$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: zZSYjEXukFia72mG1dGQpCqdrYMMIN8igh0KHzze2Ec= Subject key identifier: B7:35:BE:06:1E:05:7E:A0:BF:A5:5B:E7:8E:80:77:57:88:A4:AA:DF Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 80 Signing time: Sat 19 Jul 2025 06:54:45 +0000 Manifest this update: Sat 19 Jul 2025 06:54:45 +0000 Manifest next update: Sat 26 Jul 2025 06:54:45 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: 5z2I2/x9BOpPAlD3YyLEQzPNht9IzcgD6sqOKgYRSXQ=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Jul 19 06:54:45 2025 GMT Not After : Jul 26 06:54:45 2025 GMT Subject: CN=687b4135-4f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:fa:9e:d7:c2:96:56:5e:8f:00:33:f5:09: a6:9d:a2:d7:99:32:df:c9:c8:ea:06:ad:27:f8:d7: da:d4:8d:85:ac:ff:a8:58:a8:4f:51:d5:cf:cb:ef: 74:57:12:88:f5:8c:a3:73:01:88:d3:78:4f:95:75: 1c:df:2d:b1:e7:2d:d5:1d:d0:dd:7f:e0:4f:91:23: 8c:53:44:00:02:5e:dc:70:e3:f3:ee:fa:75:a4:94: 7e:89:7d:3d:a3:4b:4a:15:8e:10:5f:6e:0c:66:7c: 6b:de:5f:fd:1a:07:ad:58:a1:15:18:8f:f9:ca:a3: 2e:64:7c:d1:d8:1f:ba:63:ed:53:4b:28:14:b6:f0: 9d:20:7f:35:d1:f9:c2:d9:e9:45:09:f1:8c:58:e8: ea:67:e8:7b:a2:e6:d7:c3:94:d5:81:4f:69:bf:f2: 4a:69:cb:36:c2:e4:b6:a3:54:d3:f9:69:8f:98:4d: 21:0b:17:2c:81:64:41:34:df:28:68:7f:fc:3f:c5: bc:c1:f0:f1:a6:c3:20:25:df:6e:a2:0d:2a:dd:2e: 01:5b:0b:c9:1c:09:68:90:01:a0:00:23:95:45:74: e6:71:e2:3b:9d:cf:22:7b:32:96:fa:a3:75:5c:dd: ab:fb:d9:69:93:d9:d7:59:30:2c:74:97:74:b7:30: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:BE:06:1E:05:7E:A0:BF:A5:5B:E7:8E:80:77:57:88:A4:AA:DF X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f6:5d:b5:a6:27:34:e1:a1:2b:94:ed:3b:fb:93:07:e3:85: 3a:01:d1:67:c4:4a:c9:61:81:0b:4f:51:75:48:5f:69:1e:c2: 1d:a1:4b:76:23:38:c7:99:db:09:18:40:f6:ee:fb:3f:06:c6: 6a:5c:cb:72:3e:72:a9:ce:ad:fd:37:93:11:d9:f2:c2:f4:0b: 6e:57:3b:58:0a:87:0b:29:3d:28:58:fb:a2:dd:bc:0f:19:26: 04:c7:f6:36:55:9a:0e:ec:c9:3e:20:26:f7:98:f4:e2:75:48: b2:8a:8d:9d:92:9e:1f:1f:d0:b7:9e:b0:40:14:73:48:8e:c3: 54:c1:d4:e2:4d:7c:86:8d:3d:aa:49:32:4a:53:cd:cf:a8:47: 40:fa:86:38:86:57:9b:4a:37:fb:a5:3f:cb:0a:4a:ca:ff:6e: b5:c3:fd:c2:a4:9a:8d:c7:df:55:04:3b:de:8c:e6:12:f1:5c: 62:de:81:62:5b:9c:a2:09:8b:8e:30:f5:c5:aa:42:dc:07:ee: 7a:f0:22:be:e0:22:aa:e1:f8:ae:a6:a8:02:35:24:a3:f8:a9: 2e:47:38:bb:d9:cc:b5:5a:af:de:e7:df:3e:f9:5e:95:83:64: 71:6d:12:b4:cd:0f:cd:16:e9:f0:54:5f:57:3b:b1:c5:58:b2: 7d:22:7d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUwNzE5MDY1NDQ1WhcNMjUwNzI2MDY1NDQ1WjAYMRYwFAYD VQQDEw02ODdiNDEzNS00ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvX6ntfCllZejwAz9QmmnaLXmTLfycjqBq0n+Nfa1I2FrP+oWKhPUdXPy+90 VxKI9YyjcwGI03hPlXUc3y2x5y3VHdDdf+BPkSOMU0QAAl7ccOPz7vp1pJR+iX09 o0tKFY4QX24MZnxr3l/9GgetWKEVGI/5yqMuZHzR2B+6Y+1TSygUtvCdIH810fnC 2elFCfGMWOjqZ+h7oubXw5TVgU9pv/JKacs2wuS2o1TT+WmPmE0hCxcsgWRBNN8o aH/8P8W8wfDxpsMgJd9uog0q3S4BWwvJHAlokAGgACOVRXTmceI7nc8iezKW+qN1 XN2r+9lpk9nXWTAsdJd0tzCnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc1vgYe BX6gv6Vb546Ad1eIpKrfMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB79l21pic04aErlO07+5MH44U6AdFnxErJYYELT1F1SF9pHsIdoUt2 IzjHmdsJGED27vs/BsZqXMtyPnKpzq39N5MR2fLC9AtuVztYCocLKT0oWPui3bwP GSYEx/Y2VZoO7Mk+ICb3mPTidUiyio2dkp4fH9C3nrBAFHNIjsNUwdTiTXyGjT2q STJKU83PqEdA+oY4hlebSjf7pT/LCkrK/261w/3CpJqNx99VBDvejOYS8Vxi3oFi W5yiCYuOMPXFqkLcB+568CK+4CKq4fiupqgCNSSj+KkuRzi72cy1Wq/e598++V6V g2RxbRK0zQ/NFunwVF9XO7HFWLJ9In2s -----END CERTIFICATE-----Generated at Sun Jul 20 03:10:49 2025 by rpki-client