$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: qATkCUXXo+uTr/6T/ypquELulav/ytPIEc8pZp2G3uc= Subject key identifier: E7:05:53:BC:D4:48:EA:18:9C:D7:C2:A2:9F:A5:39:02:23:8D:E8:CE Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 47 Signing time: Sat 19 Jul 2025 07:39:16 +0000 Manifest this update: Sat 19 Jul 2025 07:39:15 +0000 Manifest next update: Sat 26 Jul 2025 07:39:15 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: RgC4kL99QiCb9Ghpm99k/D4z3gI9R4tUtjMbKSDCJ00=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Jul 19 07:39:15 2025 GMT Not After : Jul 26 07:39:15 2025 GMT Subject: CN=687b4ba4-1edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:6b:54:4d:2a:91:1d:f5:3a:cc:f6:bc:37: 19:e9:ec:05:16:c7:7a:5e:04:f0:38:26:d2:48:be: d4:6e:33:6d:f5:5d:b5:22:14:d7:b5:6d:10:f7:09: c7:a9:44:4f:03:cf:88:cf:7b:cd:c9:dc:de:dd:a2: 43:71:f8:4c:55:b4:4e:b8:7c:8f:a7:77:7a:35:3a: d3:99:0a:12:ab:24:a1:3a:70:37:1e:e0:33:53:80: cf:6b:fc:90:af:b5:62:70:ca:7b:b0:cc:9d:85:dd: a5:22:35:53:83:d5:b8:58:ca:a8:07:6b:a5:ce:34: 4d:9f:77:b5:40:69:d8:ed:cb:44:25:53:65:f7:d4: b4:ca:08:f1:b0:7f:cf:c4:8b:99:96:6f:a1:1a:c5: a8:a4:f9:a2:80:b4:83:c0:46:10:06:d6:93:0b:a1: 7c:37:18:9e:4f:7a:f6:b3:35:43:45:f8:df:a9:72: 50:69:d2:39:eb:a3:7a:b8:9e:2f:68:ac:7e:02:c1: 9c:a2:57:7d:42:fe:24:44:9d:43:8c:e5:1f:9e:a9: 11:24:f3:37:93:ee:87:85:4b:f5:49:45:eb:0b:76: 77:96:f9:ae:7d:be:20:32:d3:c3:16:4f:bc:5c:61: 82:a1:24:18:9a:7e:1f:8c:c9:9a:66:28:0c:74:a4: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:53:BC:D4:48:EA:18:9C:D7:C2:A2:9F:A5:39:02:23:8D:E8:CE X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:d2:cb:08:6f:76:dd:1a:e3:c5:53:42:d4:4a:60:f9:78: c9:fe:a3:51:b6:39:7d:14:4c:3f:5a:75:f3:ed:89:50:e4:87: 4b:2b:6b:2a:9c:eb:75:1b:48:5d:c9:40:c8:3f:eb:f3:b1:33: 47:09:ab:f1:a7:cd:d4:03:fb:16:6c:23:8d:ad:2e:b0:00:b3: 3e:a6:66:ef:23:24:84:dd:7d:43:64:ce:bc:af:89:a5:dd:54: f6:76:87:38:64:70:a1:a8:9e:e3:c4:06:cc:32:bf:fe:be:35: c3:64:46:87:19:70:3a:f5:fc:1f:2e:0f:2c:c2:8b:f4:14:e3: 41:e9:a6:43:46:e3:73:86:be:3e:2b:82:1c:04:e3:dd:a9:fc: cf:7c:c9:c4:b1:09:c6:08:32:b5:ee:c0:02:3c:18:cd:ec:a3: b3:ff:5b:43:af:7a:35:ec:44:b9:20:49:7c:3f:34:d8:b4:d2: a9:ae:13:55:08:8b:57:6a:ca:8b:c6:14:0d:ae:13:b3:37:a6: f6:5d:8e:ae:c9:08:b9:a5:bd:9b:bb:cf:ed:41:da:f7:8e:eb: be:8a:6f:c3:01:6f:b0:3d:3a:37:f8:5e:6a:08:53:c4:ed:42: 11:af:34:00:5b:ee:c0:29:4f:a2:dd:0a:e5:c6:1e:7e:58:87: 8f:8c:75:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA3MTkwNzM5MTVaFw0yNTA3MjYwNzM5MTVaMBgxFjAUBgNV BAMTDTY4N2I0YmE0LTFlZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4n2tUTSqRHfU6zPa8Nxnp7AUWx3peBPA4JtJIvtRuM231XbUiFNe1bRD3Ccep RE8Dz4jPe83J3N7dokNx+ExVtE64fI+nd3o1OtOZChKrJKE6cDce4DNTgM9r/JCv tWJwynuwzJ2F3aUiNVOD1bhYyqgHa6XONE2fd7VAadjty0QlU2X31LTKCPGwf8/E i5mWb6Eaxaik+aKAtIPARhAG1pMLoXw3GJ5PevazNUNF+N+pclBp0jnro3q4ni9o rH4CwZyiV31C/iREnUOM5R+eqREk8zeT7oeFS/VJResLdneW+a59viAy08MWT7xc YYKhJBiafh+MyZpmKAx0pMQDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5wVTvNRI 6hic18Kin6U5AiON6M4wHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKP50ssIb3bdGuPFU0LUSmD5eMn+o1G2OX0UTD9adfPtiVDkh0srayqc 63UbSF3JQMg/6/OxM0cJq/GnzdQD+xZsI42tLrAAsz6mZu8jJITdfUNkzryviaXd VPZ2hzhkcKGonuPEBswyv/6+NcNkRocZcDr1/B8uDyzCi/QU40HppkNG43OGvj4r ghwE492p/M98ycSxCcYIMrXuwAI8GM3so7P/W0OvejXsRLkgSXw/NNi00qmuE1UI i1dqyovGFA2uE7M3pvZdjq7JCLmlvZu7z+1B2veO676Kb8MBb7A9Ojf4XmoIU8Tt QhGvNABb7sApT6LdCuXGHn5Yh4+MddM= -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:44 2025 by rpki-client