$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft File: inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json) Hash identifier: LC1p0MQw+YEce++yRzumdFBSMSRMpgVvnv9fOkdJBvg= Subject key identifier: 8E:19:80:19:6C:95:7A:9A:17:C7:65:97:6D:5C:05:59:11:E4:D1:A1 Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C Certificate issuer: /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft Manifest number: D5 Signing time: Thu 21 Aug 2025 05:46:51 +0000 Manifest this update: Thu 21 Aug 2025 05:46:51 +0000 Manifest next update: Thu 28 Aug 2025 05:46:51 +0000 Files and hashes: 1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: dVcgC+3PTGFmUOgJv/raqM8HOdCrGjBpis06cl1dCtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Validity Not Before: Aug 21 05:46:51 2025 GMT Not After : Aug 28 05:46:51 2025 GMT Subject: CN=68a6b2cb-df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fc:b0:33:7a:72:5d:b2:36:c9:41:78:32:71: 1f:3c:3f:18:97:8d:bf:7e:b8:40:87:c9:f9:ed:ff: 38:6d:06:5d:c1:18:85:12:d8:5a:92:11:fb:cb:36: 89:13:e3:e4:88:66:0e:10:e3:99:d7:ed:7f:48:b7: 29:6d:1e:15:ab:fa:2b:e4:dd:f7:60:8d:44:eb:ba: 7a:91:24:cb:70:d6:32:8a:52:5c:35:55:72:c8:c2: 6b:29:9d:6c:a9:2f:ce:e8:c4:08:01:21:4a:d0:c1: 7c:dd:f1:b5:05:8d:d0:20:99:f0:9b:42:f6:9c:8c: 0b:bf:42:5b:d1:cb:b2:fe:81:df:2c:0a:a3:32:a0: cf:d7:46:01:97:38:f3:a3:66:3a:cb:e5:08:e8:6e: a9:8d:11:3d:88:9f:71:6d:7b:23:32:fb:c6:be:f6: 8c:4a:8b:11:fc:0a:b9:99:1b:27:62:4e:03:2e:6b: 33:a3:26:19:6d:5a:d4:c2:d5:23:a6:0c:8a:b7:3e: 96:56:4b:3c:7f:28:25:6b:b1:66:81:db:40:fc:64: 9f:8d:79:a6:4f:d1:06:e9:98:41:20:8f:33:16:ea: 43:99:93:7b:f8:0f:fe:c3:b4:b9:95:7c:62:21:fe: 65:2c:25:59:5c:2a:95:87:1f:54:cf:37:9d:4c:15: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:80:19:6C:95:7A:9A:17:C7:65:97:6D:5C:05:59:11:E4:D1:A1 X509v3 Authority Key Identifier: keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:3e:14:b0:fd:98:c9:83:64:4d:59:12:f4:e7:25:9e:0d: aa:d0:a8:4f:11:7f:c1:1a:bb:0c:55:95:54:25:f8:17:49:a8: 4a:43:36:90:53:81:8f:70:99:7a:a0:11:19:4c:84:a7:dc:dd: 3a:dc:64:36:1e:8c:20:bb:65:1a:ad:ab:10:33:5e:95:af:98: a2:3e:ef:ed:f4:cc:d2:37:38:78:4f:f0:9c:80:c0:6f:35:bb: 8e:73:5a:35:ba:c3:ee:6a:55:cc:54:88:82:d3:93:1a:6b:c6: 1c:ff:1e:04:2e:c4:65:8d:e8:7d:16:d0:bc:ea:7f:fe:81:d5: 87:18:05:e5:bb:25:34:5a:bb:68:a0:49:04:a5:ad:b7:50:6a: d0:51:07:53:3d:de:da:4c:f5:b6:9e:1d:7a:a7:da:ac:ce:dd: 1a:a7:dc:d4:c9:92:34:83:0f:77:ea:eb:e7:ea:67:98:e4:9f: a2:7e:1c:da:5a:0b:03:34:b4:92:54:14:f5:08:30:2c:0a:96: b6:f5:9f:48:7f:10:e4:88:de:76:f9:f1:02:56:bf:2e:e5:41: 00:ae:09:3f:74:32:df:54:2f:3e:03:68:ad:bf:75:59:1e:1d: 5b:ca:bd:c5:18:67:e9:d8:19:9e:a8:f2:47:f2:45:8e:87:75: a6:75:e5:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKDhBNzY0NDA0NTIzM0FFMzhEMzBEMzVCODI2RDk1QjJF N0I0MzdEOUMwHhcNMjUwODIxMDU0NjUxWhcNMjUwODI4MDU0NjUxWjAYMRYwFAYD VQQDEw02OGE2YjJjYi1kZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PywM3pyXbI2yUF4MnEfPD8Yl42/frhAh8n57f84bQZdwRiFEthakhH7yzaJ E+PkiGYOEOOZ1+1/SLcpbR4Vq/or5N33YI1E67p6kSTLcNYyilJcNVVyyMJrKZ1s qS/O6MQIASFK0MF83fG1BY3QIJnwm0L2nIwLv0Jb0cuy/oHfLAqjMqDP10YBlzjz o2Y6y+UI6G6pjRE9iJ9xbXsjMvvGvvaMSosR/Aq5mRsnYk4DLmszoyYZbVrUwtUj pgyKtz6WVks8fygla7FmgdtA/GSfjXmmT9EG6ZhBII8zFupDmZN7+A/+w7S5lXxi If5lLCVZXCqVhx9UzzedTBUnYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4ZgBls lXqaF8dll21cBVkR5NGhMB8GA1UdIwQYMBaAFIp2RARSM6440w01uCbZWy57Q32c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DRjM0QzFFRTM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJqalREVFc0SnRsYkxudERm WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luWkVCRkl6cmpqVERUVzRKdGxiTG50RGZady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DRjM0QzFFRTM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJq alREVFc0SnRsYkxudERmWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYEz4UsP2YyYNkTVkS9Oclng2q0KhPEX/BGrsMVZVUJfgXSahKQzaQ U4GPcJl6oBEZTISn3N063GQ2Howgu2UarasQM16Vr5iiPu/t9MzSNzh4T/CcgMBv NbuOc1o1usPualXMVIiC05Maa8Yc/x4ELsRljeh9FtC86n/+gdWHGAXluyU0Wrto oEkEpa23UGrQUQdTPd7aTPW2nh16p9qszt0ap9zUyZI0gw936uvn6meY5J+ifhza WgsDNLSSVBT1CDAsCpa29Z9IfxDkiN52+fECVr8u5UEArgk/dDLfVC8+A2itv3VZ Hh1byr3FGGfp2BmeqPJH8kWOh3WmdeXT -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:15 2025 by rpki-client