$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: 0pKv3FWhnTYAwL3JuUen7gaK3pacrESict7jQuvlHZc= Subject key identifier: 2C:A0:9A:14:3F:EA:F0:04:C4:D0:19:7A:AF:C3:98:B6:F4:C4:EB:A0 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 68 Signing time: Sun 01 Jun 2025 06:42:31 +0000 Manifest this update: Sun 01 Jun 2025 06:42:31 +0000 Manifest next update: Sun 08 Jun 2025 06:42:31 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: ILpGXURaDNcAXzkjumMGNvsMcLv/J7zvvdt9dq5vI8I=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Jun 1 06:42:31 2025 GMT Not After : Jun 8 06:42:31 2025 GMT Subject: CN=683bf657-0eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:8e:c1:b6:aa:aa:7d:ad:5b:92:1c:07:3f: ff:29:b3:59:0c:e3:d6:f5:d4:e9:1c:f6:ea:9e:d2: ed:0a:cb:2b:0d:a8:0d:f4:fd:ac:ad:6a:2d:1b:fa: e1:5c:f6:4f:99:53:a8:8a:b6:c1:f3:3a:a0:6d:98: 1e:7a:e0:ac:be:42:18:ec:a5:79:a6:93:d4:2f:f9: c6:94:6e:87:78:b7:ae:63:c6:8e:dc:67:f9:00:98: 61:75:b8:c7:96:0a:fb:d2:f9:6c:05:eb:48:de:37: 09:48:1e:99:cf:c4:62:9b:80:1d:7b:cd:83:36:12: 96:26:73:cc:60:73:96:dd:7d:a5:dd:66:58:dd:f5: 39:f2:b3:5d:da:24:37:99:f7:f9:39:62:f8:88:f1: a6:56:ab:02:a2:cb:73:bc:e4:e7:c4:8c:ec:f9:90: 7d:12:ad:75:88:38:b9:71:12:7e:9b:bf:5b:b8:c3: 4c:2d:e3:2c:be:71:7a:43:57:f0:44:96:4f:6b:73: c9:b1:23:01:60:55:aa:7b:d8:95:8f:1e:7b:2a:76: bd:5a:57:4d:ed:bb:10:d7:c1:54:80:a0:3a:ac:e5: 6d:63:4a:30:e3:e2:ce:07:7c:5b:39:0e:ae:ac:5a: b8:ca:49:d5:7b:25:ac:5f:6b:23:a5:be:aa:13:62: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:9A:14:3F:EA:F0:04:C4:D0:19:7A:AF:C3:98:B6:F4:C4:EB:A0 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5c:19:9f:2c:f1:94:60:e0:f3:fd:36:00:3c:5e:56:7c:94: e7:f6:67:4f:f6:44:96:78:61:cd:7f:5b:5b:0d:f1:e3:5f:74: 1f:06:f2:39:89:0f:88:1b:c6:58:6c:fe:49:88:eb:db:e2:b0: 80:ba:e7:fb:80:d4:4e:2e:9c:e2:3a:f5:4d:c3:3b:2b:46:e4: 56:70:33:23:2f:6b:af:8f:bc:2f:78:c7:7b:83:4f:dd:9b:20: c8:fc:65:de:9c:99:43:40:1e:82:09:63:60:42:af:86:74:54: c3:02:d8:9c:87:3e:27:fd:f1:7e:72:98:71:40:b0:72:34:ff: a3:89:29:a3:8a:12:8f:06:06:2d:78:1a:db:03:fb:86:52:15: 59:fe:97:f4:af:37:00:65:db:2d:ce:a3:04:6b:b0:84:7f:d7: bf:11:16:3d:96:d3:5e:a3:cd:1e:1a:63:90:e1:4a:42:27:2f: 30:44:90:58:02:f9:bf:76:ca:8b:2c:0a:f6:ac:19:7b:92:8a: 43:9f:b3:03:0a:b3:d1:5d:b4:ad:5c:da:21:3b:b3:93:d7:c5: c6:60:91:5a:b1:b8:eb:ed:52:d8:4f:18:8c:60:3a:e1:a9:32: 55:49:68:4e:9b:c3:ab:2a:54:32:44:b4:9f:da:6e:44:d8:42: 77:da:7c:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNTA2MDEwNjQyMzFaFw0yNTA2MDgwNjQyMzFaMBgxFjAUBgNV BAMTDTY4M2JmNjU3LTBlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSWI7Btqqqfa1bkhwHP/8ps1kM49b11Okc9uqe0u0KyysNqA30/aytai0b+uFc 9k+ZU6iKtsHzOqBtmB564Ky+QhjspXmmk9Qv+caUbod4t65jxo7cZ/kAmGF1uMeW CvvS+WwF60jeNwlIHpnPxGKbgB17zYM2EpYmc8xgc5bdfaXdZljd9Tnys13aJDeZ 9/k5YviI8aZWqwKiy3O85OfEjOz5kH0SrXWIOLlxEn6bv1u4w0wt4yy+cXpDV/BE lk9rc8mxIwFgVap72JWPHnsqdr1aV03tuxDXwVSAoDqs5W1jSjDj4s4HfFs5Dq6s WrjKSdV7JaxfayOlvqoTYrbDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULKCaFD/q 8ATE0Bl6r8OYtvTE66AwHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdcGZ8s8ZRg4PP9NgA8XlZ8lOf2Z0/2RJZ4Yc1/W1sN8eNfdB8G8jmJ D4gbxlhs/kmI69visIC65/uA1E4unOI69U3DOytG5FZwMyMva6+PvC94x3uDT92b IMj8Zd6cmUNAHoIJY2BCr4Z0VMMC2JyHPif98X5ymHFAsHI0/6OJKaOKEo8GBi14 GtsD+4ZSFVn+l/SvNwBl2y3OowRrsIR/178RFj2W016jzR4aY5DhSkInLzBEkFgC +b92yossCvasGXuSikOfswMKs9FdtK1c2iE7s5PXxcZgkVqxuOvtUthPGIxgOuGp MlVJaE6bw6sqVDJEtJ/abkTYQnfafBo= -----END CERTIFICATE-----Generated at Mon Jun 2 21:12:43 2025 by rpki-client