$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: o8iMDHQ22kRQlcGDpveQi+QLoDcghutOrumwgjgv6hU= Subject key identifier: 6E:AE:D5:49:37:C9:C8:77:94:A5:B4:1D:0E:2D:67:8D:78:9F:EE:6A Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1CE1 Signing time: Tue 22 Jul 2025 16:17:31 +0000 Manifest this update: Tue 22 Jul 2025 16:17:30 +0000 Manifest next update: Tue 29 Jul 2025 16:17:30 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: oXscM017gUhxqBS1zIS/nVuHopO805+kZ2yEQZAbwOE=) 2: EB7012446FDE11E9AF945067C4F9AE02.roa (hash: 7u9f+gWjW4ewcVZaqyMD9ZqpjL5Hz8NvrMbvw9f5dXY=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7412 (0x1cf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Jul 22 16:17:30 2025 GMT Not After : Jul 29 16:17:30 2025 GMT Subject: CN=687fb99b-3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:1b:d0:b6:a2:8f:bb:45:50:ad:9d:46:a6: 5f:7d:3b:76:4d:e9:93:92:aa:a5:db:c1:0c:ca:fe: 1c:41:c6:86:b9:da:ce:ab:4e:1a:59:c1:10:c4:3c: 73:72:1c:25:e4:c5:db:49:7d:f5:d6:e7:3a:05:27: ce:04:18:08:00:94:89:ea:55:1b:7f:a6:42:91:9e: e9:c9:63:11:3d:7c:17:2e:12:45:45:2f:1c:2f:e6: 45:fb:fe:ed:a6:3f:95:82:05:2a:62:25:a8:ee:9e: 87:23:87:77:33:34:69:70:64:c1:ab:db:61:17:a2: 94:35:bd:d9:9e:ee:60:57:df:a1:2a:32:d2:10:aa: b4:82:50:65:e9:1c:fa:58:b9:cb:73:f4:23:50:4e: 3f:44:63:87:b4:30:fc:72:b6:9f:76:b2:64:b1:4a: 60:0e:29:bb:6f:33:95:ec:3f:8a:2a:9e:d7:e5:6c: 44:f8:32:e0:eb:d3:7c:23:46:c5:10:7a:8e:2c:a3: a0:21:3c:86:bf:5e:38:7f:c1:98:0e:ea:86:ec:ee: b5:8a:1c:aa:e4:ed:90:39:79:cb:06:14:d0:27:11: 39:1e:07:eb:bc:18:80:69:c0:e5:fb:3f:b9:65:2a: 2b:b2:2f:9e:8c:4f:f3:13:95:63:33:27:10:db:eb: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AE:D5:49:37:C9:C8:77:94:A5:B4:1D:0E:2D:67:8D:78:9F:EE:6A X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:62:ac:54:f3:87:12:9a:1d:1c:a1:b8:c1:f2:8b:ab:bd:8d: 66:7d:e7:18:0f:13:cf:81:ae:5c:a6:bc:33:ac:ff:37:06:57: 24:e3:82:85:33:20:ba:bc:bf:1d:b6:f4:2e:81:78:84:85:cf: 4c:14:ad:97:dc:89:c6:a9:68:5e:42:da:49:32:27:68:61:97: 41:ba:ae:0e:4f:44:ac:47:49:c0:5c:4d:e3:a4:34:cd:d6:09: 9e:c1:cd:77:00:e3:49:80:f3:22:aa:08:24:42:91:d3:8d:06: c8:23:68:22:c2:98:c9:2a:b9:46:6a:6b:46:65:c9:30:f1:52: aa:5a:76:bd:e2:c7:d2:4f:cb:2e:34:0a:7c:9f:1e:88:96:22: e1:2d:cb:03:5b:98:0b:c7:84:17:94:d1:b4:10:59:7f:0c:c0: f0:dc:13:e2:4b:a6:6c:ad:c1:c1:c9:75:ef:cd:15:1e:02:4e: a5:1d:c2:d8:cf:3b:9d:be:0b:ec:b8:b0:06:28:f0:2e:d8:d5: 61:71:be:2a:e3:6d:f1:06:50:e6:e0:23:d3:6d:52:18:39:14: 59:46:82:32:14:b0:15:52:3b:49:a2:ed:67:b4:fa:02:1f:1b: 46:84:44:2b:38:5f:2e:51:20:b5:45:0c:fd:cf:16:77:19:30: a5:65:66:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjUwNzIyMTYxNzMwWhcNMjUwNzI5MTYxNzMwWjAYMRYwFAYD VQQDEw02ODdmYjk5Yi0zZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27Eb0Laij7tFUK2dRqZffTt2TemTkqql28EMyv4cQcaGudrOq04aWcEQxDxz chwl5MXbSX311uc6BSfOBBgIAJSJ6lUbf6ZCkZ7pyWMRPXwXLhJFRS8cL+ZF+/7t pj+VggUqYiWo7p6HI4d3MzRpcGTBq9thF6KUNb3Znu5gV9+hKjLSEKq0glBl6Rz6 WLnLc/QjUE4/RGOHtDD8crafdrJksUpgDim7bzOV7D+KKp7X5WxE+DLg69N8I0bF EHqOLKOgITyGv144f8GYDuqG7O61ihyq5O2QOXnLBhTQJxE5HgfrvBiAacDl+z+5 ZSorsi+ejE/zE5VjMycQ2+tBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6u1Uk3 ych3lKW0HQ4tZ414n+5qMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXYqxU84cSmh0cobjB8ourvY1mfecYDxPPga5cprwzrP83Blck44KF MyC6vL8dtvQugXiEhc9MFK2X3InGqWheQtpJMidoYZdBuq4OT0SsR0nAXE3jpDTN 1gmewc13AONJgPMiqggkQpHTjQbII2giwpjJKrlGamtGZckw8VKqWna94sfST8su NAp8nx6IliLhLcsDW5gLx4QXlNG0EFl/DMDw3BPiS6ZsrcHByXXvzRUeAk6lHcLY zzudvgvsuLAGKPAu2NVhcb4q423xBlDm4CPTbVIYORRZRoIyFLAVUjtJou1ntPoC HxtGhEQrOF8uUSC1RQz9zxZ3GTClZWaj -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:36 2025 by rpki-client