$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: 4DPP/Mi2GKrObr7GZ8vkugcgNmRqI1QW7mSFjUK3YoY= Subject key identifier: 48:BC:75:FB:A5:B4:AF:AE:66:BB:34:A7:DB:4E:43:EC:FE:CC:C0:C5 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0619 Signing time: Fri 30 May 2025 23:01:14 +0000 Manifest this update: Fri 30 May 2025 23:01:14 +0000 Manifest next update: Fri 06 Jun 2025 23:01:14 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: qkSq2+Rpqqi5pcEaBzUvKnXbHHpwNOiixOQ8TIQ2C7o=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: ZURzq5MNTYtgjtpZ673W988Pjm4b5QiAz5gyz+eygEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: May 30 23:01:14 2025 GMT Not After : Jun 6 23:01:14 2025 GMT Subject: CN=683a38ba-af29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:52:00:20:fa:a8:24:b0:2f:86:70:96:d6: 01:d5:f7:0b:bd:0b:61:96:57:8d:f4:36:d3:73:0e: a5:41:20:12:d8:bf:64:14:77:be:78:41:93:60:20: aa:0e:39:17:73:d4:9d:fb:9c:34:79:f2:93:27:7b: f1:ca:45:7f:f3:90:f1:fd:92:0c:c3:64:27:03:97: 93:f6:e2:1b:4f:63:f3:bc:d1:b4:b7:1b:3b:4d:1a: 73:11:a1:f6:27:01:6e:95:6c:bd:7f:97:e6:69:ae: 47:b3:ff:a4:72:fe:3d:da:b4:74:33:2c:60:6b:a0: 12:2a:f6:b2:71:7f:b6:d7:ca:f2:71:56:ce:27:0b: c9:33:09:23:63:48:e2:11:ed:b8:9b:d1:62:34:41: ac:3c:03:2d:fc:36:9a:0d:75:c6:ad:7a:7b:cd:2f: fc:6d:30:e7:ed:bd:4d:61:7e:16:d1:3d:c9:eb:3d: 2b:b3:15:40:36:9e:64:ba:bd:4d:bd:3c:59:e1:a9: 92:57:f3:5f:3a:e0:5c:6a:9f:4a:38:b3:e1:bd:77: 1b:1a:fb:00:7d:54:d4:63:5a:6e:9c:f8:97:6d:60: b1:a4:30:a5:54:3d:56:7f:53:67:38:7f:dc:24:16: 11:26:7b:69:7a:81:f8:1a:ba:20:62:e8:55:4c:25: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:75:FB:A5:B4:AF:AE:66:BB:34:A7:DB:4E:43:EC:FE:CC:C0:C5 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:51:6a:aa:6f:a3:49:ec:75:7e:ec:ea:9f:ee:d4:a0:ac:98: cb:9e:9c:d8:9d:3e:38:3a:58:d9:09:2d:6d:5b:2b:74:2e:df: 4f:89:61:87:bc:e3:ad:f4:66:85:7e:db:37:f9:0f:ba:e5:8e: 4c:8e:15:fd:09:34:64:b5:ac:31:4c:cd:0f:91:a7:57:4a:71: 90:63:9e:5b:5f:03:c1:d4:1d:fb:90:37:90:eb:47:91:54:67: 59:a2:b0:3d:58:50:1e:57:04:8d:1f:5c:47:17:30:15:43:10: 17:ed:d0:9c:6c:83:1d:14:e1:60:f6:09:24:96:41:00:5b:10: e3:a3:4e:54:d0:eb:20:da:93:b7:aa:72:b5:77:74:c8:24:56: c4:53:b4:3a:81:2e:f5:f2:74:2c:0a:12:d3:5e:b4:8c:5e:03: 6a:83:02:09:91:db:26:1d:3f:28:c8:5b:b8:d7:6d:0c:d6:6a: 23:0b:70:e0:0d:4e:81:0d:13:0f:e7:72:29:8c:34:40:16:63: 8e:86:7b:4c:ce:a3:4b:8b:4c:a7:47:10:89:fc:2a:09:1b:9a: de:77:0f:c6:0a:66:9c:30:d2:d4:07:41:a8:4b:af:c4:fe:40: e2:e3:e0:75:ca:4c:f2:f3:74:f9:23:76:02:e6:fc:00:d8:79: 8b:76:88:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjUwNTMwMjMwMTE0WhcNMjUwNjA2MjMwMTE0WjAYMRYwFAYD VQQDEw02ODNhMzhiYS1hZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzpSACD6qCSwL4ZwltYB1fcLvQthlleN9DbTcw6lQSAS2L9kFHe+eEGTYCCq DjkXc9Sd+5w0efKTJ3vxykV/85Dx/ZIMw2QnA5eT9uIbT2PzvNG0txs7TRpzEaH2 JwFulWy9f5fmaa5Hs/+kcv492rR0Myxga6ASKvaycX+218rycVbOJwvJMwkjY0ji Ee24m9FiNEGsPAMt/DaaDXXGrXp7zS/8bTDn7b1NYX4W0T3J6z0rsxVANp5kur1N vTxZ4amSV/NfOuBcap9KOLPhvXcbGvsAfVTUY1punPiXbWCxpDClVD1Wf1NnOH/c JBYRJntpeoH4GrogYuhVTCW79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi8dful tK+uZrs0p9tOQ+z+zMDFMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeUWqqb6NJ7HV+7Oqf7tSgrJjLnpzYnT44OljZCS1tWyt0Lt9PiWGH vOOt9GaFfts3+Q+65Y5MjhX9CTRktawxTM0PkadXSnGQY55bXwPB1B37kDeQ60eR VGdZorA9WFAeVwSNH1xHFzAVQxAX7dCcbIMdFOFg9gkklkEAWxDjo05U0Osg2pO3 qnK1d3TIJFbEU7Q6gS718nQsChLTXrSMXgNqgwIJkdsmHT8oyFu4120M1mojC3Dg DU6BDRMP53IpjDRAFmOOhntMzqNLi0ynRxCJ/CoJG5redw/GCmacMNLUB0GoS6/E /kDi4+B1ykzy83T5I3YC5vwA2HmLdoiN -----END CERTIFICATE-----Generated at Sat May 31 16:45:52 2025 by rpki-client