$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: KBRo4Dqrzv967tpuEG0OaGB5Y1lUJfW4xjrthhLnsrk= Subject key identifier: C7:4D:BB:B6:4E:D7:C2:89:7F:B8:FD:68:DC:DC:A1:AC:48:A2:BB:86 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 2F Signing time: Sun 01 Jun 2025 07:24:54 +0000 Manifest this update: Sun 01 Jun 2025 07:24:53 +0000 Manifest next update: Sun 08 Jun 2025 07:24:53 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: q4hdQQYkYXqKn/wmJWAGzms9x2EZTdEU7fjtmAFqBbo=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Jun 1 07:24:53 2025 GMT Not After : Jun 8 07:24:53 2025 GMT Subject: CN=683c0046-cc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:69:63:1f:ff:82:79:73:f0:57:6f:e7:25: 9b:b3:2a:1e:e1:32:98:63:8f:ce:00:7f:ea:86:55: 5b:31:c3:64:30:52:ec:c6:84:cd:f0:05:40:53:d0: df:99:47:17:61:03:3d:12:3b:b2:ac:fd:f6:60:35: d8:aa:60:a8:41:5f:f8:b3:f6:ca:84:08:f2:a5:db: 0a:0b:ac:a0:18:e3:7c:11:07:0b:89:2d:65:fe:f8: 67:d3:2b:a4:ef:c1:f1:38:d9:42:7f:8b:a1:0f:7e: 33:09:5c:16:0e:17:a0:9a:5a:b6:49:e7:c4:60:45: 2b:a9:5d:37:3a:38:7a:a8:96:3c:ba:c4:0b:99:e6: 4b:bb:99:b7:88:84:5f:7c:ec:81:be:29:d0:9e:4f: b3:99:cf:90:fa:27:d0:3f:a5:3f:ff:6d:08:b6:48: a4:fb:49:c2:10:bd:d9:c6:9f:fd:da:ac:b5:39:7b: 70:85:df:d1:71:47:5e:32:39:1d:67:1d:95:fe:cc: d3:a8:a4:e2:83:5a:23:d5:59:08:29:ce:3d:ca:32: 0f:2a:3c:cd:d0:d3:67:60:52:a8:39:5b:7f:35:6d: 5f:64:f7:69:75:20:d0:a3:c8:80:94:22:f1:2d:d9: 82:42:ad:d0:5f:b0:d3:79:ed:f2:57:4f:b1:a4:32: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:BB:B6:4E:D7:C2:89:7F:B8:FD:68:DC:DC:A1:AC:48:A2:BB:86 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c0:4f:0b:6e:b3:2d:37:ce:5c:87:0e:57:0f:31:c9:a6:4a: 59:20:83:c4:1e:7b:71:cc:d8:eb:8c:9a:70:f1:a5:68:56:a1: b1:cc:1e:4a:43:95:fb:86:79:6c:d6:c1:81:be:0a:ea:36:14: cb:1e:e3:62:f5:b3:54:39:0d:23:06:35:9d:8f:99:b8:6d:dd: 94:8f:df:df:45:f8:a4:1a:db:e5:6b:1d:50:e4:af:2c:d5:e8: 7a:ca:13:6c:71:89:bf:2d:9f:ee:20:49:4a:b8:58:97:4c:cc: 76:b9:d2:af:96:41:27:cf:c0:71:e7:c2:a4:c0:4b:12:7d:3b: 9c:c2:bd:ad:7f:2c:23:85:55:07:2a:c9:9c:2d:bb:08:b9:63: 51:e5:c8:5e:79:b4:75:4d:f5:99:72:32:ce:ae:7b:ac:7b:41: b0:5e:97:1c:b8:2c:f1:43:e1:30:28:ae:3a:92:a7:4d:1d:66: 33:f9:38:9a:f6:7c:d8:75:29:6c:0a:5a:cf:41:14:8e:0d:bb: 00:23:98:c2:e4:af:9c:e9:93:4e:a8:0e:60:20:2a:c2:fa:fc: 58:32:64:f6:f4:6d:a9:7c:09:c1:3d:10:be:cd:91:c6:fd:cd: db:27:7c:1b:d8:4d:b9:52:c8:ea:ac:1d:2c:89:f1:f7:5d:33: 2c:be:96:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA2MDEwNzI0NTNaFw0yNTA2MDgwNzI0NTNaMBgxFjAUBgNV BAMTDTY4M2MwMDQ2LWNjMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFC2ljH/+CeXPwV2/nJZuzKh7hMphjj84Af+qGVVsxw2QwUuzGhM3wBUBT0N+Z RxdhAz0SO7Ks/fZgNdiqYKhBX/iz9sqECPKl2woLrKAY43wRBwuJLWX++GfTK6Tv wfE42UJ/i6EPfjMJXBYOF6CaWrZJ58RgRSupXTc6OHqoljy6xAuZ5ku7mbeIhF98 7IG+KdCeT7OZz5D6J9A/pT//bQi2SKT7ScIQvdnGn/3arLU5e3CF39FxR14yOR1n HZX+zNOopOKDWiPVWQgpzj3KMg8qPM3Q02dgUqg5W381bV9k92l1INCjyICUIvEt 2YJCrdBfsNN57fJXT7GkMrBRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx027tk7X wol/uP1o3NyhrEiiu4YwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLATwtusy03zlyHDlcPMcmmSlkgg8Qee3HM2OuMmnDxpWhWobHMHkpD lfuGeWzWwYG+Cuo2FMse42L1s1Q5DSMGNZ2Pmbht3ZSP399F+KQa2+VrHVDkryzV 6HrKE2xxib8tn+4gSUq4WJdMzHa50q+WQSfPwHHnwqTASxJ9O5zCva1/LCOFVQcq yZwtuwi5Y1HlyF55tHVN9ZlyMs6ue6x7QbBelxy4LPFD4TAorjqSp00dZjP5OJr2 fNh1KWwKWs9BFI4NuwAjmMLkr5zpk06oDmAgKsL6/FgyZPb0bal8CcE9EL7Nkcb9 zdsnfBvYTblSyOqsHSyJ8fddMyy+lv8= -----END CERTIFICATE-----Generated at Mon Jun 2 05:04:23 2025 by rpki-client