$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: DXUevu0Bz6E4N0sVonKjPljO74suqXlNQF+uXSrlWeE= Subject key identifier: 2B:DB:52:E6:21:31:07:BA:49:6B:00:4A:FC:DB:51:39:0A:F8:F7:C4 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 66 Signing time: Sat 19 Jul 2025 07:13:44 +0000 Manifest this update: Sat 19 Jul 2025 07:13:43 +0000 Manifest next update: Sat 26 Jul 2025 07:13:43 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: U8LY5BXc3KDl7pl6lECLYsqbVGxwS+OAaotELJNM/9A=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Jul 19 07:13:43 2025 GMT Not After : Jul 26 07:13:43 2025 GMT Subject: CN=687b45a7-99fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:b5:b6:bd:a5:47:21:5c:f3:98:1b:1c:f8: 51:ac:32:2d:f4:37:bb:b4:96:d1:39:33:b1:79:13: 34:75:6d:a5:28:a2:39:eb:bb:22:19:43:af:da:70: cf:35:d3:77:96:d0:86:92:c5:ee:e6:75:ea:38:28: 34:9c:32:d7:eb:19:c1:1c:03:8c:d0:f0:44:59:8d: 0c:80:60:64:17:c8:f6:17:f5:bf:04:e4:00:42:8a: e5:cf:f9:cb:34:f8:30:e6:84:15:bd:c6:52:c5:ab: bf:e0:e5:75:92:9a:32:0a:f6:8a:ac:05:f0:22:7e: ed:4b:ea:e3:14:bc:8e:ba:01:08:d0:e6:c1:f4:6e: e1:b6:04:18:0c:5a:7a:1a:1d:cb:a3:bd:3c:63:1e: fe:24:a4:6c:ba:f9:02:7e:9e:6a:f3:0d:2f:95:46: 08:b6:f5:60:05:4d:0d:43:83:0b:73:a5:ce:cd:99: 39:c0:71:fe:72:38:09:fe:6b:85:86:ca:84:45:6f: 46:b9:eb:58:57:76:90:53:a8:74:29:f5:e5:59:01: 61:2a:cf:d0:9a:96:a1:4f:88:fe:88:01:d0:48:94: 9d:98:5f:9c:55:a8:85:55:3f:6e:73:e9:3b:d9:fa: 36:13:7e:22:c6:3c:2a:67:21:a9:f4:3d:64:39:2f: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:52:E6:21:31:07:BA:49:6B:00:4A:FC:DB:51:39:0A:F8:F7:C4 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e6:8c:a0:1a:b5:a6:77:87:80:34:3d:67:53:8a:fa:8f:c2: df:b0:02:7b:7f:39:18:2e:f4:e0:23:a6:a0:3c:09:16:3c:89: b9:bf:8f:53:79:52:1b:a3:0a:20:c2:d7:91:a5:f6:73:fc:7c: 69:31:60:59:d3:76:74:7a:16:c5:78:3d:f6:5d:14:76:51:64: 3c:c6:3e:80:0f:08:9d:70:5c:e0:d5:d9:fe:40:d2:5d:8e:a0: b8:b2:16:97:f5:15:2c:94:64:26:33:f5:48:b5:29:57:e0:02: 14:af:1f:b7:ff:9c:26:a1:ff:86:6f:06:f3:ea:35:b7:bc:28: e0:cc:2d:33:c5:07:b0:17:98:cf:4d:25:a8:5e:f3:d9:18:49: 39:db:d8:5e:9d:97:4f:75:9a:56:d8:8e:93:50:31:d5:2e:7b: 2a:8c:9d:d3:26:85:24:6f:f6:cf:62:a6:ac:86:12:ac:ce:44: b0:15:11:bb:4e:4d:d8:48:92:30:b0:b2:85:71:0b:c6:86:39: 9e:b7:44:4a:84:41:b7:cc:58:e2:c3:4e:3a:33:64:b6:10:c0: 1e:97:ec:50:d8:c6:4a:4f:8c:da:e3:9c:7c:18:31:92:18:a2: 38:ae:17:c7:3b:21:12:c5:c8:48:ce:0b:a1:72:cf:a7:ac:d4: 12:ec:9f:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA3MTkwNzEzNDNaFw0yNTA3MjYwNzEzNDNaMBgxFjAUBgNV BAMTDTY4N2I0NWE3LTk5ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC167W2vaVHIVzzmBsc+FGsMi30N7u0ltE5M7F5EzR1baUoojnruyIZQ6/acM81 03eW0IaSxe7mdeo4KDScMtfrGcEcA4zQ8ERZjQyAYGQXyPYX9b8E5ABCiuXP+cs0 +DDmhBW9xlLFq7/g5XWSmjIK9oqsBfAifu1L6uMUvI66AQjQ5sH0buG2BBgMWnoa HcujvTxjHv4kpGy6+QJ+nmrzDS+VRgi29WAFTQ1Dgwtzpc7NmTnAcf5yOAn+a4WG yoRFb0a561hXdpBTqHQp9eVZAWEqz9CalqFPiP6IAdBIlJ2YX5xVqIVVP25z6TvZ +jYTfiLGPCpnIan0PWQ5L3F1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK9tS5iEx B7pJawBK/NtROQr498QwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrmjKAataZ3h4A0PWdTivqPwt+wAnt/ORgu9OAjpqA8CRY8ibm/j1N5 UhujCiDC15Gl9nP8fGkxYFnTdnR6FsV4PfZdFHZRZDzGPoAPCJ1wXODV2f5A0l2O oLiyFpf1FSyUZCYz9Ui1KVfgAhSvH7f/nCah/4ZvBvPqNbe8KODMLTPFB7AXmM9N Jahe89kYSTnb2F6dl091mlbYjpNQMdUueyqMndMmhSRv9s9ipqyGEqzORLAVEbtO TdhIkjCwsoVxC8aGOZ63REqEQbfMWOLDTjozZLYQwB6X7FDYxkpPjNrjnHwYMZIY ojiuF8c7IRLFyEjOC6Fyz6es1BLsn5E= -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:33 2025 by rpki-client