$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: lTKzvJXCu5uME7VWZs+ZQ8uzk/kLjbngdGX48y6cRMg= Subject key identifier: 02:8D:63:76:AD:80:1E:8B:AA:6E:CB:C4:32:9C:62:3A:7F:DA:7F:4A Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 09FB Signing time: Fri 18 Jul 2025 20:05:31 +0000 Manifest this update: Fri 18 Jul 2025 20:05:31 +0000 Manifest next update: Fri 25 Jul 2025 20:05:31 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: rpbGKMpXUSOLFC1QABw8T50wCyqjok08RsYDb/9CUEI=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Jul 18 20:05:31 2025 GMT Not After : Jul 25 20:05:31 2025 GMT Subject: CN=687aa90b-37c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:61:a9:b3:a1:f7:e3:18:e2:d8:f2:6f:bd: c4:8a:16:f2:3c:a3:38:44:4f:44:83:ff:5b:26:3a: 5f:a0:77:86:51:d7:e0:aa:06:8a:02:08:fc:a1:46: 88:31:cc:6e:aa:5f:a5:6a:1c:4a:b9:9f:61:ab:50: 89:41:9d:f2:da:b5:c7:36:6b:ad:bd:b3:e1:75:18: 4b:a3:9a:ad:a8:e7:f4:c0:dc:c5:be:f2:66:0d:c3: 14:bd:8a:6b:dd:73:90:39:ca:96:e6:80:04:6a:0c: 6a:ca:f4:02:75:96:37:9c:9e:70:98:fc:7a:01:a1: 3f:9b:b5:50:08:50:72:b1:f0:92:ca:9b:73:b9:42: e6:50:51:89:3e:c3:10:a5:f4:cc:87:7e:4e:4e:fd: 76:69:ba:97:98:2c:4d:14:14:9e:5c:4b:87:57:ce: 54:1c:61:1f:66:32:40:08:ae:6c:e9:11:0c:d6:29: 17:1d:df:b1:9c:58:da:cb:b4:9d:8e:ad:12:6a:9b: 99:e4:f9:26:0d:65:31:5a:62:30:b5:30:b1:dd:8e: 44:87:4b:59:cb:75:54:d3:0e:9c:67:7a:cc:56:88: 5f:9e:f0:c8:91:40:5f:96:f1:4e:61:e3:c2:e2:a4: 5a:7f:a6:e5:af:0d:58:0d:e2:3c:7c:ec:e5:32:29: 89:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:63:76:AD:80:1E:8B:AA:6E:CB:C4:32:9C:62:3A:7F:DA:7F:4A X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:8d:9c:c6:aa:a3:d7:b7:92:cf:99:85:75:00:33:2f:bb:c5: 72:63:72:e7:74:5d:8c:ca:a3:50:f7:c2:34:b7:c2:94:f7:77: 92:f4:c5:a8:4f:ec:c7:cf:0b:46:4e:b7:cb:39:75:24:d5:7f: 16:c6:47:96:b7:cb:b3:bb:36:83:b3:46:9d:5d:42:6f:c2:03: 18:bd:3e:00:20:c0:0c:78:99:40:23:ac:1a:56:4b:18:e8:15: b5:5f:b6:90:3d:65:e1:48:aa:5a:aa:f9:cd:97:42:a6:3a:c0: 7b:94:23:85:05:8e:f3:80:1d:4f:b1:98:2f:b5:32:3f:14:7e: a2:ae:35:5b:ce:81:93:08:ad:d3:16:fd:17:d1:2c:ac:4b:b5: 6a:b2:ad:b1:53:72:ee:51:60:61:d8:56:ed:48:4a:72:55:65: f7:5d:10:2c:1a:30:97:67:04:6d:c1:ca:1b:3e:19:ab:db:9c: 60:6a:6f:0b:4e:d1:2c:1c:0a:4d:b1:73:eb:04:d6:42:c3:82: b1:7b:62:68:ef:3a:6a:27:65:4c:98:04:28:39:96:83:39:e6: c5:bd:2c:7c:a9:ef:ec:16:9f:3f:3c:90:e3:24:04:29:78:1b: f2:ec:91:97:44:c8:36:0b:76:e3:61:be:25:1f:bf:7a:e1:f7: 22:18:ac:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUwNzE4MjAwNTMxWhcNMjUwNzI1MjAwNTMxWjAYMRYwFAYD VQQDEw02ODdhYTkwYi0zN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ1hqbOh9+MY4tjyb73EihbyPKM4RE9Eg/9bJjpfoHeGUdfgqgaKAgj8oUaI Mcxuql+lahxKuZ9hq1CJQZ3y2rXHNmutvbPhdRhLo5qtqOf0wNzFvvJmDcMUvYpr 3XOQOcqW5oAEagxqyvQCdZY3nJ5wmPx6AaE/m7VQCFBysfCSyptzuULmUFGJPsMQ pfTMh35OTv12abqXmCxNFBSeXEuHV85UHGEfZjJACK5s6REM1ikXHd+xnFjay7Sd jq0SapuZ5PkmDWUxWmIwtTCx3Y5Eh0tZy3VU0w6cZ3rMVohfnvDIkUBflvFOYePC 4qRaf6blrw1YDeI8fOzlMimJiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKNY3at gB6Lqm7LxDKcYjp/2n9KMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRjZzGqqPXt5LPmYV1ADMvu8VyY3LndF2MyqNQ98I0t8KU93eS9MWo T+zHzwtGTrfLOXUk1X8WxkeWt8uzuzaDs0adXUJvwgMYvT4AIMAMeJlAI6waVksY 6BW1X7aQPWXhSKpaqvnNl0KmOsB7lCOFBY7zgB1PsZgvtTI/FH6irjVbzoGTCK3T Fv0X0SysS7Vqsq2xU3LuUWBh2FbtSEpyVWX3XRAsGjCXZwRtwcobPhmr25xgam8L TtEsHApNsXPrBNZCw4Kxe2Jo7zpqJ2VMmAQoOZaDOebFvSx8qe/sFp8/PJDjJAQp eBvy7JGXRMg2C3bjYb4lH7964fciGKw5 -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:24 2025 by rpki-client