$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: 1Iz1xyC7/I/mY8/CHBPb1xyfXBftH1vUWQ9kHbDlKus= Subject key identifier: 2A:47:D7:CD:25:89:5A:45:E7:2F:F6:27:39:CC:E1:82:3D:4D:F1:A4 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0611 Signing time: Mon 12 May 2025 22:37:26 +0000 Manifest this update: Mon 12 May 2025 22:37:25 +0000 Manifest next update: Mon 19 May 2025 22:37:25 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: cgctj8SoxEA7kY31C4h5gLxL8tE5SwA3nFx5bDpG5CE=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: ZURzq5MNTYtgjtpZ673W988Pjm4b5QiAz5gyz+eygEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: May 12 22:37:25 2025 GMT Not After : May 19 22:37:25 2025 GMT Subject: CN=68227825-f222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:c5:60:ca:4c:22:e3:1b:3d:f0:0f:70:7a: a8:3c:ec:3e:10:79:ea:53:ea:fa:51:8b:97:fe:be: 68:a4:70:d2:9b:09:05:dd:0d:dc:e2:6a:08:28:33: b8:f8:e4:7d:da:c3:c2:73:a6:b7:76:d9:43:77:80: de:77:1a:a3:3c:e4:1a:61:2d:68:9d:44:25:24:c2: f4:27:bd:2f:28:18:b0:34:44:e4:14:da:70:e4:56: aa:cc:64:1f:6a:ac:ed:95:e1:36:ac:1c:b8:33:d6: 6f:15:dc:e8:91:71:6e:50:eb:12:79:52:61:9b:70: 4e:81:a5:00:fc:0b:97:a0:38:c7:55:73:14:0d:e1: 52:82:c2:57:50:71:87:eb:ae:48:3d:95:4f:f8:39: 83:8a:a0:c2:64:89:29:63:eb:f9:90:b0:59:1c:ea: 24:6e:c4:5a:1e:c1:ef:5a:75:a0:a5:bf:80:a4:bf: 9f:01:08:30:a4:da:5a:c1:72:88:79:30:7c:f8:b6: a3:d9:67:e5:1f:b8:fe:1d:58:dd:79:da:a7:d4:aa: c4:c2:60:f5:68:10:c9:d7:76:08:e1:7b:db:67:8c: cd:62:4f:ac:af:df:6e:e8:e8:fe:3e:e3:65:31:ff: 55:0f:40:4f:51:c5:0d:7b:f1:2d:10:5a:a5:92:b3: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:D7:CD:25:89:5A:45:E7:2F:F6:27:39:CC:E1:82:3D:4D:F1:A4 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:79:12:98:c8:f9:2c:1e:d6:a5:16:07:a5:95:e7:f0:0d:b3: 3d:33:ef:14:41:69:e6:70:5b:32:21:5b:94:4e:23:fc:42:3e: 2a:65:c9:10:27:8d:06:13:e7:0e:5e:94:0f:10:06:6e:c6:23: f1:a4:92:81:e3:a6:f3:68:63:c1:44:82:ce:1c:66:c7:da:2a: 35:01:b5:e0:f5:9f:3f:f4:04:ce:45:c2:45:9d:bf:75:e7:81: f5:53:11:b5:1f:3c:aa:46:2d:ee:55:10:0d:e3:f2:fb:0d:e3: cc:63:2c:51:06:2b:a5:04:7d:1d:d2:2f:e5:d2:e3:64:ef:06: db:a1:63:e2:a4:bf:61:d6:16:33:cd:5e:14:c4:59:28:79:4b: 22:a6:15:fd:8c:6a:d0:74:4c:78:24:13:b9:67:84:83:03:6d: 15:f9:02:f2:ef:06:1c:40:c9:18:50:b5:b9:22:7c:17:5f:c6: 95:1f:d2:c8:9b:11:26:83:fc:90:71:c3:33:f7:d0:56:78:50: 2f:3a:1a:8f:1e:1a:ec:ad:67:0d:51:c6:c2:e4:35:ba:d3:c0: 6c:c5:47:0e:f6:1c:73:e0:e2:71:a8:f8:3b:5d:f9:55:b9:72: 01:e8:65:66:0b:2d:5c:5d:45:85:2b:49:66:2a:3d:73:79:c1: 66:f2:f5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjUwNTEyMjIzNzI1WhcNMjUwNTE5MjIzNzI1WjAYMRYwFAYD VQQDEw02ODIyNzgyNS1mMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxPFYMpMIuMbPfAPcHqoPOw+EHnqU+r6UYuX/r5opHDSmwkF3Q3c4moIKDO4 +OR92sPCc6a3dtlDd4DedxqjPOQaYS1onUQlJML0J70vKBiwNETkFNpw5FaqzGQf aqztleE2rBy4M9ZvFdzokXFuUOsSeVJhm3BOgaUA/AuXoDjHVXMUDeFSgsJXUHGH 665IPZVP+DmDiqDCZIkpY+v5kLBZHOokbsRaHsHvWnWgpb+ApL+fAQgwpNpawXKI eTB8+Laj2WflH7j+HVjdedqn1KrEwmD1aBDJ13YI4XvbZ4zNYk+sr99u6Oj+PuNl Mf9VD0BPUcUNe/EtEFqlkrNNDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpH180l iVpF5y/2JznM4YI9TfGkMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOeRKYyPksHtalFgellefwDbM9M+8UQWnmcFsyIVuUTiP8Qj4qZckQ J40GE+cOXpQPEAZuxiPxpJKB46bzaGPBRILOHGbH2io1AbXg9Z8/9ATORcJFnb91 54H1UxG1HzyqRi3uVRAN4/L7DePMYyxRBiulBH0d0i/l0uNk7wbboWPipL9h1hYz zV4UxFkoeUsiphX9jGrQdEx4JBO5Z4SDA20V+QLy7wYcQMkYULW5InwXX8aVH9LI mxEmg/yQccMz99BWeFAvOhqPHhrsrWcNUcbC5DW608BsxUcO9hxz4OJxqPg7XflV uXIB6GVmCy1cXUWFK0lmKj1zecFm8vVE -----END CERTIFICATE-----Generated at Tue May 13 00:52:15 2025 by rpki-client