$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: ymPiZVu+7DQIQcmWiCtiXm1wxK6z+hlrT4AiYxY0SoE= Subject key identifier: C4:3F:04:DA:74:09:FA:80:1D:54:66:B6:A4:7F:48:A7:DE:B6:5D:AB Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0479 Signing time: Fri 05 Sep 2025 00:23:23 +0000 Manifest this update: Fri 05 Sep 2025 00:23:23 +0000 Manifest next update: Fri 12 Sep 2025 00:23:23 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: h4znIjPbdKJXe/uiVyE7qJ2LIieNA/sucAtknzSxiLs=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Sep 5 00:23:23 2025 GMT Not After : Sep 12 00:23:23 2025 GMT Subject: CN=68ba2d7b-1123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:92:d4:25:47:d8:e7:4f:7d:a6:83:f4:49: 01:ed:7f:28:14:8f:79:e3:61:35:bb:a5:32:57:ba: bc:9c:4c:6a:b6:58:22:ff:af:14:e4:01:c5:87:3b: 85:90:27:36:f1:bb:bd:ff:2e:45:70:85:89:40:47: 8b:41:a3:61:01:a8:e9:b0:83:04:67:97:a9:47:fc: 2f:30:d9:56:8d:bc:03:f4:70:0d:41:05:98:31:48: be:2e:b4:e3:ee:aa:21:9b:49:64:a8:57:68:93:59: 15:6d:ee:af:aa:82:b4:0c:4b:d7:f9:2d:f1:92:ce: 9d:76:00:29:46:6c:8b:6f:bd:7c:17:f4:5a:2f:a2: f4:06:d6:ae:e4:24:ae:cc:e7:34:8a:32:85:e7:9e: b3:a6:8c:f9:7d:e1:46:e8:46:87:36:73:5d:d1:69: 92:09:38:4b:f6:1a:bf:41:43:f1:74:c2:15:ff:ac: ec:d0:77:e3:63:a4:d0:34:f1:0d:c7:6a:80:19:5e: 80:1c:fe:3a:44:49:df:bd:52:7c:26:5e:63:09:2f: 8c:ff:e5:11:50:62:04:15:27:3a:fc:f2:5d:2e:66: 17:87:63:14:0a:c1:97:b6:1e:82:38:46:f8:6c:ca: a1:c4:d3:48:d9:4f:87:f8:7e:77:49:48:00:35:b2: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3F:04:DA:74:09:FA:80:1D:54:66:B6:A4:7F:48:A7:DE:B6:5D:AB X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:47:ec:c4:77:06:71:dd:36:74:0c:07:cd:e4:be:1d:56:50: 1a:61:c5:93:15:57:13:ba:44:64:84:d4:4f:39:1c:6e:71:6a: de:89:af:e0:c8:a9:1d:a2:34:c1:1b:16:c9:cd:b4:42:4e:93: 1d:d3:f0:57:f1:51:a4:20:82:0c:41:80:f2:79:66:96:8b:c4: 6a:87:33:8f:3f:d3:c7:4e:d0:f6:ec:2b:71:45:56:be:34:49: f5:2b:34:f4:ab:f9:4b:37:62:8d:71:97:19:5a:ba:f9:9f:6c: ea:2b:d6:2a:f5:d9:84:26:93:c9:3c:c0:64:36:de:8a:18:df: ed:5c:c9:9a:b5:56:4c:5e:f3:9e:4d:d5:99:00:05:91:bf:e1: d3:c6:c3:bb:c2:2f:b8:8e:33:6c:97:a0:46:96:5a:c9:68:d9: 8c:71:6e:b3:82:fb:e2:5b:3d:a4:f7:d1:af:21:8f:32:25:c3: 12:5c:69:32:d5:b4:de:10:32:d3:49:1e:32:36:fc:9a:67:6c: 01:a0:de:99:d4:fa:bc:18:f3:82:e7:db:76:ab:10:02:eb:82: ff:ad:79:86:a9:1f:df:9e:ad:fe:3b:3e:21:ba:63:ff:41:c4: ab:1b:c3:1e:c9:bb:b3:5c:49:80:4f:65:94:dc:2b:20:ba:09: cd:85:86:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwOTA1MDAyMzIzWhcNMjUwOTEyMDAyMzIzWjAYMRYwFAYD VQQDEw02OGJhMmQ3Yi0xMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIOS1CVH2OdPfaaD9EkB7X8oFI9542E1u6UyV7q8nExqtlgi/68U5AHFhzuF kCc28bu9/y5FcIWJQEeLQaNhAajpsIMEZ5epR/wvMNlWjbwD9HANQQWYMUi+LrTj 7qohm0lkqFdok1kVbe6vqoK0DEvX+S3xks6ddgApRmyLb718F/RaL6L0Btau5CSu zOc0ijKF556zpoz5feFG6EaHNnNd0WmSCThL9hq/QUPxdMIV/6zs0HfjY6TQNPEN x2qAGV6AHP46REnfvVJ8Jl5jCS+M/+URUGIEFSc6/PJdLmYXh2MUCsGXth6COEb4 bMqhxNNI2U+H+H53SUgANbK2wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQ/BNp0 CfqAHVRmtqR/SKfetl2rMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqR+zEdwZx3TZ0DAfN5L4dVlAaYcWTFVcTukRkhNRPORxucWreia/g yKkdojTBGxbJzbRCTpMd0/BX8VGkIIIMQYDyeWaWi8RqhzOPP9PHTtD27CtxRVa+ NEn1KzT0q/lLN2KNcZcZWrr5n2zqK9Yq9dmEJpPJPMBkNt6KGN/tXMmatVZMXvOe TdWZAAWRv+HTxsO7wi+4jjNsl6BGllrJaNmMcW6zgvviWz2k99GvIY8yJcMSXGky 1bTeEDLTSR4yNvyaZ2wBoN6Z1Pq8GPOC59t2qxAC64L/rXmGqR/fnq3+Oz4humP/ QcSrG8MeybuzXEmAT2WU3CsgugnNhYY3 -----END CERTIFICATE-----Generated at Sat Sep 6 16:59:53 2025 by rpki-client