$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: wY5+oivF1d6qEFdxhY6ctBRQFOnM69pah5GQ6KeurBc= Subject key identifier: EF:66:BB:13:83:A1:F4:58:B6:33:D2:9D:D8:CC:B7:4A:49:E5:50:E9 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 042B Signing time: Thu 03 Apr 2025 00:20:41 +0000 Manifest this update: Thu 03 Apr 2025 00:20:40 +0000 Manifest next update: Thu 10 Apr 2025 00:20:40 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: 3LavWOz/tHXdEVWnOkzrYwOm5aRXLz/QjKmcBevF598=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA Validity Not Before: Apr 3 00:20:40 2025 GMT Not After : Apr 10 00:20:40 2025 GMT Subject: CN=67edd458-15c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3c:88:8b:c2:17:2e:cf:c0:60:36:de:d3:e9: 07:2a:4a:d0:c2:e1:20:5c:f1:7b:1e:33:61:b3:98: f1:91:a4:78:5c:91:62:02:f4:a2:50:85:15:a8:52: d3:7c:f1:30:66:ff:b2:a9:34:4f:d4:86:66:58:50: 4e:12:5a:08:10:bd:f2:c6:1e:2f:21:f3:73:31:16: f2:f1:31:64:4f:d5:91:39:32:d8:87:1f:bf:8f:08: 1c:56:b4:88:55:43:71:9d:87:5f:26:d0:23:b6:aa: 06:ac:29:bd:c3:68:44:f0:ba:1e:76:aa:13:37:fe: 4c:5a:0e:4d:56:a3:e2:3d:ab:69:96:cc:f0:2a:a6: 58:da:b4:3b:22:52:68:37:90:c5:a6:72:9e:ae:54: 67:57:19:3c:59:85:23:6c:a3:71:b5:20:22:74:a4: 3c:c4:73:f0:53:f8:6f:50:67:78:31:e4:80:74:e9: f4:d1:19:d2:55:df:5d:26:55:cf:8c:ca:21:04:46: 1e:7b:9f:5b:32:e2:2d:bd:29:a0:22:83:6e:99:bc: a8:90:d2:37:eb:c6:d4:9f:83:be:a9:7e:82:54:56: bc:22:af:ed:6c:3a:ee:a1:8a:1c:32:99:a4:40:1c: 28:61:a8:4e:bc:19:77:1b:69:92:d2:ac:bc:f6:d0: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:BB:13:83:A1:F4:58:B6:33:D2:9D:D8:CC:B7:4A:49:E5:50:E9 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:28:18:cc:98:3b:bb:95:f9:b5:d7:c2:c5:59:df:89:1e:1c: 30:ee:af:5f:9d:26:07:32:60:c7:7e:4e:d7:49:67:af:d1:c6: 68:2a:43:d9:47:88:c9:f9:d0:57:9f:9d:5b:a5:f8:51:e2:4b: 27:c7:94:1e:ad:e9:14:8a:40:97:3c:a6:e7:8c:e7:15:87:18: 0b:a7:26:9a:22:e2:92:19:06:25:17:5a:b8:75:63:8a:4c:9d: 2b:4c:25:91:11:8f:b7:e6:78:46:c5:ec:3d:66:6b:47:8f:9c: c3:14:37:41:aa:1b:bd:58:79:a4:79:c0:62:e0:94:9b:6e:bc: c9:86:19:5c:a0:a8:10:c6:75:29:9f:61:54:10:77:c9:7a:32: 49:6c:14:e8:02:1f:81:84:76:1e:79:2d:c0:a4:d8:40:52:4f: e3:05:1c:ce:5c:68:69:1b:18:a6:45:e3:bc:0d:17:32:af:67: a9:82:a9:f0:f9:71:3c:0a:32:95:13:3a:26:d7:67:e7:37:16: b2:16:1e:c7:a9:7c:f7:6c:9e:d5:ca:b9:6b:69:31:fa:46:1a: 8c:68:04:06:3a:b3:39:5f:8f:fa:53:a6:43:52:c3:3d:e8:21: e5:be:07:e0:79:c6:5d:75:7c:b5:72:1d:8e:53:f9:65:0f:28: d5:18:f9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwNDAzMDAyMDQwWhcNMjUwNDEwMDAyMDQwWjAYMRYwFAYD VQQDEw02N2VkZDQ1OC0xNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DyIi8IXLs/AYDbe0+kHKkrQwuEgXPF7HjNhs5jxkaR4XJFiAvSiUIUVqFLT fPEwZv+yqTRP1IZmWFBOEloIEL3yxh4vIfNzMRby8TFkT9WROTLYhx+/jwgcVrSI VUNxnYdfJtAjtqoGrCm9w2hE8LoedqoTN/5MWg5NVqPiPatplszwKqZY2rQ7IlJo N5DFpnKerlRnVxk8WYUjbKNxtSAidKQ8xHPwU/hvUGd4MeSAdOn00RnSVd9dJlXP jMohBEYee59bMuItvSmgIoNumbyokNI368bUn4O+qX6CVFa8Iq/tbDruoYocMpmk QBwoYahOvBl3G2mS0qy89tA4jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9muxOD ofRYtjPSndjMt0pJ5VDpMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KBjMmDu7lfm118LFWd+JHhww7q9fnSYHMmDHfk7XSWev0cZoKkPZ R4jJ+dBXn51bpfhR4ksnx5QerekUikCXPKbnjOcVhxgLpyaaIuKSGQYlF1q4dWOK TJ0rTCWREY+35nhGxew9ZmtHj5zDFDdBqhu9WHmkecBi4JSbbrzJhhlcoKgQxnUp n2FUEHfJejJJbBToAh+BhHYeeS3ApNhAUk/jBRzOXGhpGximReO8DRcyr2epgqnw +XE8CjKVEzom12fnNxayFh7HqXz3bJ7VyrlraTH6RhqMaAQGOrM5X4/6U6ZDUsM9 6CHlvgfgecZddXy1ch2OU/llDyjVGPld -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client