$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: 91wYRNX1dHEbE/q59SVOPDTimepgE9WmsBWkHzi0Pf4= Subject key identifier: 67:BE:C3:2C:04:AF:E9:FB:26:8E:92:45:92:99:60:BC:F0:AD:A5:E4 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 62 Signing time: Tue 09 Sep 2025 07:13:20 +0000 Manifest this update: Tue 09 Sep 2025 07:13:19 +0000 Manifest next update: Tue 16 Sep 2025 07:13:19 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: ChfASPRcy3j0nGAvQ8RTmKlndmhfuVSJ2FEzxrOJadE=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Sep 9 07:13:19 2025 GMT Not After : Sep 16 07:13:19 2025 GMT Subject: CN=68bfd38f-a54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:ff:b6:53:80:b6:00:13:9e:fb:3b:08:22: 1b:2b:19:91:46:b7:f5:e4:0b:3c:05:b9:37:f4:db: c1:b4:af:c5:fe:81:15:97:8e:71:1c:15:8b:c4:2c: 57:b9:4b:71:b6:a4:fb:72:eb:4f:99:63:49:a8:39: 78:cd:46:f2:bc:8e:f6:23:70:b3:c8:51:dd:34:b7: e9:5e:c2:f0:61:17:a1:d9:ae:81:d8:c9:57:d2:b4: b6:0d:af:6e:a5:16:b4:c9:b0:74:17:ad:11:36:df: 8b:44:4f:1a:c0:5f:93:8a:17:c9:c2:d9:c9:3c:6e: 95:b0:e7:8a:2a:e6:a8:9f:18:b4:5a:7f:93:7a:56: c2:c7:af:df:8c:61:f8:47:8b:aa:a5:13:57:86:2b: e0:4d:94:3c:7f:f7:ea:4a:84:86:f0:5d:10:1e:3a: da:76:68:2d:b5:c6:3c:bf:15:f4:8a:dd:bb:59:d9: e8:ed:41:d5:1f:46:e0:f6:b7:2a:31:51:10:3f:a1: c3:f4:3c:f0:de:28:12:0e:cc:65:b6:d9:dd:f5:96: 96:e5:4f:da:e3:8c:80:4d:de:ab:14:ab:31:07:59: 08:76:ae:a9:6e:ac:91:b0:3d:91:57:65:84:b1:7f: c8:8a:dd:2b:ad:4e:ce:b0:8e:43:dd:a5:24:d4:58: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:C3:2C:04:AF:E9:FB:26:8E:92:45:92:99:60:BC:F0:AD:A5:E4 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:89:6b:e0:48:17:c1:e7:ae:4d:80:40:a7:46:40:4a:64:94: 1b:9f:f4:e4:a0:d4:43:9a:08:13:5e:7e:23:99:7e:13:20:96: 23:ae:ed:a7:aa:3e:fe:e1:42:6a:cd:a6:f4:fa:10:ea:ce:c8: 46:08:28:3d:4b:41:aa:85:6f:10:9a:cc:eb:3e:8b:32:9f:dd: 96:fa:dd:93:c2:09:36:cb:68:3e:50:af:43:89:c7:77:d3:60: 4c:89:53:2f:f0:9d:90:c7:a6:42:69:66:3a:5b:03:fd:c3:19: 3e:8d:f4:ab:58:d8:c2:39:88:7b:4d:1a:2d:87:8d:35:6f:67: a1:9c:d3:ca:02:b9:17:df:32:3a:9d:49:a8:56:b7:f1:6e:e5: b5:55:a0:1f:dd:7d:93:fa:d0:df:d4:39:e9:29:38:be:44:ba: 28:cf:f7:c2:da:5b:aa:e3:45:34:60:ad:ae:2f:00:d2:34:ad: 52:4d:f3:bc:6a:c9:3a:71:3e:64:c9:10:07:5b:af:66:73:72: 3d:f6:7b:26:14:14:04:03:df:b3:b1:30:00:87:87:5e:08:b6: bb:3a:8c:db:0f:c4:f8:6f:17:79:86:f4:ab:24:19:ac:83:3f: d5:9b:b0:d1:62:d3:1f:57:63:fa:2b:fd:f5:7c:68:e5:df:55: be:0b:d0:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA5MDkwNzEzMTlaFw0yNTA5MTYwNzEzMTlaMBgxFjAUBgNV BAMTDTY4YmZkMzhmLWE1NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSH/+2U4C2ABOe+zsIIhsrGZFGt/XkCzwFuTf028G0r8X+gRWXjnEcFYvELFe5 S3G2pPty60+ZY0moOXjNRvK8jvYjcLPIUd00t+lewvBhF6HZroHYyVfStLYNr26l FrTJsHQXrRE234tETxrAX5OKF8nC2ck8bpWw54oq5qifGLRaf5N6VsLHr9+MYfhH i6qlE1eGK+BNlDx/9+pKhIbwXRAeOtp2aC21xjy/FfSK3btZ2ejtQdUfRuD2tyox URA/ocP0PPDeKBIOzGW22d31lpblT9rjjIBN3qsUqzEHWQh2rqlurJGwPZFXZYSx f8iK3SutTs6wjkPdpSTUWOLtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ77DLASv 6fsmjpJFkplgvPCtpeQwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmJa+BIF8Hnrk2AQKdGQEpklBuf9OSg1EOaCBNefiOZfhMgliOu7aeq Pv7hQmrNpvT6EOrOyEYIKD1LQaqFbxCazOs+izKf3Zb63ZPCCTbLaD5Qr0OJx3fT YEyJUy/wnZDHpkJpZjpbA/3DGT6N9KtY2MI5iHtNGi2HjTVvZ6Gc08oCuRffMjqd SahWt/Fu5bVVoB/dfZP60N/UOekpOL5EuijP98LaW6rjRTRgra4vANI0rVJN87xq yTpxPmTJEAdbr2Zzcj32eyYUFAQD37OxMACHh14Itrs6jNsPxPhvF3mG9KskGayD P9WbsNFi0x9XY/or/fV8aOXfVb4L0BY= -----END CERTIFICATE-----Generated at Tue Sep 9 14:27:57 2025 by rpki-client