$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: jcEusRorPk6AjFu2/zEZZwBC0Yf0eR+oMlFAC7rHbME= Subject key identifier: AA:44:33:15:0C:51:DC:10:4C:75:28:67:CA:34:53:3F:CC:E3:11:B4 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 0487 Signing time: Mon 21 Jul 2025 00:15:57 +0000 Manifest this update: Mon 21 Jul 2025 00:15:57 +0000 Manifest next update: Mon 28 Jul 2025 00:15:57 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: lR381hRS25VsZhG26QpkGkETgWPoqjaYJhhNtO/g+5A=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Jul 21 00:15:57 2025 GMT Not After : Jul 28 00:15:57 2025 GMT Subject: CN=687d86bd-436f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:94:d4:52:3a:3d:62:ba:7b:f5:01:ff:f4:95: bd:a5:62:03:75:eb:4c:9d:3a:2a:07:33:e9:45:e2: ad:6e:4f:8e:5c:51:1e:91:58:b6:29:97:67:ab:9a: 5a:7e:c0:83:c4:e1:78:51:57:9e:17:14:03:2f:88: 40:44:35:b8:23:87:74:92:50:8b:68:2b:d5:ca:7a: 00:e7:f8:c3:b4:9a:58:06:d6:2b:23:a5:43:5f:c6: 83:a9:24:37:08:7c:f6:a3:fc:3f:77:72:17:80:d6: f8:18:6a:af:b9:78:91:c8:ce:dd:f9:d3:c1:13:0d: 43:11:de:28:52:24:98:9c:b2:e8:78:be:d2:64:65: f0:0e:b6:8d:9a:d8:bd:e6:56:d9:79:a5:66:f2:4c: 90:41:08:e5:de:df:ed:e3:4b:56:0f:0a:d6:98:36: 2d:0b:ab:45:8b:98:08:b2:38:cf:7a:6a:61:da:36: f3:00:ee:2b:25:b8:ad:fe:fa:9b:8d:52:35:9b:e8: 28:93:65:98:a0:cb:fc:25:ab:a2:04:fa:94:ac:6f: 24:e8:50:62:ad:2a:b0:59:dc:28:ac:b5:80:6a:83: 61:58:2e:5f:ce:2a:7b:26:44:87:c9:1e:cf:be:b3: cc:b0:89:a9:93:92:f9:c6:98:ae:f8:8e:f0:53:c4: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:44:33:15:0C:51:DC:10:4C:75:28:67:CA:34:53:3F:CC:E3:11:B4 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c1:48:d2:c7:72:9b:a0:71:69:37:75:bb:44:e8:5a:47:e0: 03:a6:a9:0f:2d:56:e4:d0:0c:76:13:88:0f:81:6c:4c:6e:e2: 64:6d:64:b0:e1:01:47:ed:de:81:83:10:9b:da:e4:f9:32:aa: 09:0f:33:58:4b:90:47:7a:75:b0:60:aa:97:82:9c:54:0e:7c: db:a3:c3:30:0f:2b:43:ac:aa:de:3b:a7:c2:54:5d:df:1d:d7: 63:31:f2:4c:06:fa:5b:44:1d:17:3f:66:5d:34:d7:64:80:52: 87:80:3c:30:30:ef:c3:fe:97:1c:ba:1c:43:b9:f5:ab:8c:1b: 80:70:24:0b:c4:9d:e2:6e:0c:7e:ee:53:b0:d7:27:8d:68:6a: f2:d3:1d:5a:77:71:31:38:4c:1f:ca:9e:b1:87:62:75:11:4b: c3:e5:96:ba:c5:a0:88:3e:18:ef:80:58:74:e2:ec:1e:c8:86: 6d:bf:5b:15:b3:48:ef:84:a2:ff:4d:ad:91:ba:a1:e3:fa:79: e0:2c:8b:da:ee:61:68:41:54:ab:85:88:1c:44:df:6e:5f:f0: 3a:e8:af:8f:d1:6a:f0:2b:da:bc:fc:20:7e:32:d3:c2:c2:89: 87:51:ae:d9:d1:12:d3:cb:9d:e1:df:3e:d1:6d:bc:b1:5a:99: ba:60:3d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwNzIxMDAxNTU3WhcNMjUwNzI4MDAxNTU3WjAYMRYwFAYD VQQDEw02ODdkODZiZC00MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55TUUjo9Yrp79QH/9JW9pWIDdetMnToqBzPpReKtbk+OXFEekVi2KZdnq5pa fsCDxOF4UVeeFxQDL4hARDW4I4d0klCLaCvVynoA5/jDtJpYBtYrI6VDX8aDqSQ3 CHz2o/w/d3IXgNb4GGqvuXiRyM7d+dPBEw1DEd4oUiSYnLLoeL7SZGXwDraNmti9 5lbZeaVm8kyQQQjl3t/t40tWDwrWmDYtC6tFi5gIsjjPemph2jbzAO4rJbit/vqb jVI1m+gok2WYoMv8JauiBPqUrG8k6FBirSqwWdworLWAaoNhWC5fzip7JkSHyR7P vrPMsImpk5L5xpiu+I7wU8RaAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpEMxUM UdwQTHUoZ8o0Uz/M4xG0MB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKwUjSx3KboHFpN3W7ROhaR+ADpqkPLVbk0Ax2E4gPgWxMbuJkbWSw 4QFH7d6BgxCb2uT5MqoJDzNYS5BHenWwYKqXgpxUDnzbo8MwDytDrKreO6fCVF3f HddjMfJMBvpbRB0XP2ZdNNdkgFKHgDwwMO/D/pccuhxDufWrjBuAcCQLxJ3ibgx+ 7lOw1yeNaGry0x1ad3ExOEwfyp6xh2J1EUvD5Za6xaCIPhjvgFh04uweyIZtv1sV s0jvhKL/Ta2RuqHj+nngLIva7mFoQVSrhYgcRN9uX/A66K+P0WrwK9q8/CB+MtPC womHUa7Z0RLTy53h3z7RbbyxWpm6YD09 -----END CERTIFICATE-----Generated at Mon Jul 21 07:16:05 2025 by rpki-client