$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft File: inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json) Hash identifier: 520qIsv9cpbVLnaD0mJ8QDuXx7br9L7+4+nGEZ8/sC8= Subject key identifier: 56:B1:D0:F4:E0:D9:2C:00:49:A3:97:82:B0:99:E4:51:32:BB:83:CD Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C Certificate issuer: /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft Manifest number: BC Signing time: Thu 03 Jul 2025 06:05:05 +0000 Manifest this update: Thu 03 Jul 2025 06:05:05 +0000 Manifest next update: Thu 10 Jul 2025 06:05:05 +0000 Files and hashes: 1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: bnaGbaEgwo0DwuMRXrLblwwhcA5hcQ8bZFHoJ7Ky+M8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Validity Not Before: Jul 3 06:05:05 2025 GMT Not After : Jul 10 06:05:05 2025 GMT Subject: CN=68661d91-c3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:f7:7a:ca:75:97:47:8d:12:ef:67:a4:bb: d1:e9:af:c4:b1:33:b8:3b:b8:9b:50:d9:d1:c3:82: 9b:ab:1f:1c:6b:f3:58:eb:41:0f:00:20:9d:20:1e: ef:9a:72:15:53:8b:34:4c:be:53:1c:09:8a:e3:db: 12:b1:1c:3f:61:39:09:49:39:da:5a:01:aa:80:d7: eb:e0:c2:cc:71:66:ce:2f:4c:ef:7a:ae:52:47:34: 79:8a:27:35:51:16:31:5c:9e:75:58:9c:1c:51:66: a9:a0:13:86:4e:1c:78:d6:04:05:59:a4:3d:87:14: d3:39:c4:6c:f1:c7:a0:39:cb:97:44:8c:54:0f:1c: 22:f5:74:5a:60:33:61:99:d2:3d:81:92:d3:0d:b5: b4:e9:63:ea:18:31:c7:d6:a8:34:8e:77:d1:c2:83: b7:d1:a7:ed:26:36:5d:b5:8b:33:e9:b3:f3:4a:f3: bf:31:1e:b4:28:f7:d3:f0:bf:7e:cf:43:80:ee:d7: 0c:69:21:6d:24:d5:f0:0c:60:0f:b3:77:fb:28:e3: 5b:6a:3a:22:b3:de:91:bd:a8:bc:dc:aa:61:76:86: 2e:4e:d5:bc:f4:71:02:53:d2:7d:a2:b3:c4:42:ce: 25:f1:78:ee:70:91:78:b7:a2:22:be:d8:c7:b6:6e: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:D0:F4:E0:D9:2C:00:49:A3:97:82:B0:99:E4:51:32:BB:83:CD X509v3 Authority Key Identifier: keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9c:79:15:11:ec:c5:41:28:18:9a:96:a2:e7:16:cb:f5:fc: 40:52:7c:64:89:e0:71:ae:d5:de:e0:27:c5:dd:0c:f5:58:27: c2:79:54:5a:55:cb:87:51:2e:cb:51:d0:e7:bc:3f:30:39:2e: 2c:ce:88:38:44:b0:f8:0b:8f:08:0a:62:ba:5e:51:07:a6:f8: 73:b2:aa:44:6d:0b:02:5a:51:c2:7d:31:55:b6:55:91:b0:73: d5:43:32:cc:c8:8f:f3:54:1e:f5:fc:06:ca:cc:66:52:c6:14: 04:29:16:67:e4:f3:97:ca:bb:02:d9:f5:97:d9:da:8c:d4:36: b2:07:8e:ad:c4:67:fb:f5:7b:92:ca:9d:6b:96:94:7b:ac:45: c7:d2:27:94:70:9a:67:37:0f:7a:70:7a:cc:d1:2a:4e:e9:df: f6:f9:45:ae:44:02:3c:ec:b3:22:5f:85:52:de:c6:36:af:25: 5b:c2:93:f0:56:71:f4:ee:9d:4f:76:fe:d9:82:b0:c0:c2:86: 84:46:76:bf:ae:8d:5e:e4:1a:4c:62:cd:3e:1d:fe:45:05:6d: 26:f1:12:aa:cf:ad:2a:24:07:20:f6:fd:fc:31:2b:d0:cb:40: 9a:9c:b0:7f:31:19:82:94:f6:b0:a1:f2:01:a5:6e:c2:9c:ef: 93:92:98:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKDhBNzY0NDA0NTIzM0FFMzhEMzBEMzVCODI2RDk1QjJF N0I0MzdEOUMwHhcNMjUwNzAzMDYwNTA1WhcNMjUwNzEwMDYwNTA1WjAYMRYwFAYD VQQDEw02ODY2MWQ5MS1jM2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKv3esp1l0eNEu9npLvR6a/EsTO4O7ibUNnRw4Kbqx8ca/NY60EPACCdIB7v mnIVU4s0TL5THAmK49sSsRw/YTkJSTnaWgGqgNfr4MLMcWbOL0zveq5SRzR5iic1 URYxXJ51WJwcUWapoBOGThx41gQFWaQ9hxTTOcRs8cegOcuXRIxUDxwi9XRaYDNh mdI9gZLTDbW06WPqGDHH1qg0jnfRwoO30aftJjZdtYsz6bPzSvO/MR60KPfT8L9+ z0OA7tcMaSFtJNXwDGAPs3f7KONbajois96Rvai83KphdoYuTtW89HECU9J9orPE Qs4l8XjucJF4t6IivtjHtm7blQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFax0PTg 2SwASaOXgrCZ5FEyu4PNMB8GA1UdIwQYMBaAFIp2RARSM6440w01uCbZWy57Q32c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DRjM0QzFFRTM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJqalREVFc0SnRsYkxudERm WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luWkVCRkl6cmpqVERUVzRKdGxiTG50RGZady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DRjM0QzFFRTM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJq alREVFc0SnRsYkxudERmWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlnHkVEezFQSgYmpai5xbL9fxAUnxkieBxrtXe4CfF3Qz1WCfCeVRa VcuHUS7LUdDnvD8wOS4szog4RLD4C48ICmK6XlEHpvhzsqpEbQsCWlHCfTFVtlWR sHPVQzLMyI/zVB71/AbKzGZSxhQEKRZn5POXyrsC2fWX2dqM1DayB46txGf79XuS yp1rlpR7rEXH0ieUcJpnNw96cHrM0SpO6d/2+UWuRAI87LMiX4VS3sY2ryVbwpPw VnH07p1Pdv7ZgrDAwoaERna/ro1e5BpMYs0+Hf5FBW0m8RKqz60qJAcg9v38MSvQ y0CanLB/MRmClPawofIBpW7CnO+Tkphn -----END CERTIFICATE-----Generated at Thu Jul 3 18:03:34 2025 by rpki-client