$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: nV6Eaa1kXv3jUBXmwsFw1bRXRRCS4ZcjeebWOWKacKk= Subject key identifier: 79:44:37:D5:30:37:AB:C3:9D:4C:0B:2F:18:1A:7F:40:7F:3C:44:09 Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: B7 Signing time: Tue 09 Sep 2025 06:11:49 +0000 Manifest this update: Tue 09 Sep 2025 06:11:48 +0000 Manifest next update: Tue 16 Sep 2025 06:11:48 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: m4vlUHxrc1M6UiCDybkBZV9GtHZ1QyHal4Kduwt72+Q=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: /tD3m0UAwlMwH5KNwcamave93IXNHxAGbXTHUSH9zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: Sep 9 06:11:48 2025 GMT Not After : Sep 16 06:11:48 2025 GMT Subject: CN=68bfc525-093f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:da:be:b1:f8:8a:a5:99:47:9c:46:75:c6: 79:e7:5b:3b:7d:89:32:4b:62:e9:9c:90:66:59:1e: fa:77:d6:5a:96:95:d8:fb:f4:61:c2:eb:12:19:24: 2f:2d:0a:59:83:e2:01:b8:2b:8b:48:79:aa:51:9b: 11:c6:64:14:e1:0e:ea:78:2d:5d:a2:16:ef:54:a0: d2:65:99:d1:80:1f:41:d5:32:e8:ce:e6:e1:bc:10: f4:43:c2:75:67:1d:69:a1:e2:a5:c3:dd:fb:fc:0c: 62:f5:ca:6c:4b:fd:9e:99:67:43:d1:3d:7a:4d:a4: 7d:1f:ea:9e:34:fd:b3:84:1f:f0:6b:37:28:d6:ac: 67:2c:49:80:4e:f7:6d:a9:ea:ab:92:f5:92:2a:e6: ec:da:01:6b:89:99:48:ed:33:c8:d9:da:27:b3:9f: 65:86:64:e9:6c:a8:80:d7:ee:4f:05:dc:6b:22:83: 22:ce:78:b4:24:df:ef:9c:b9:85:5d:ff:fd:e2:7c: 17:6d:4c:32:4f:8a:81:dc:c2:ad:1f:23:08:c1:78: 63:19:bf:75:3a:f5:02:64:54:06:13:65:a6:43:72: 18:70:bc:c1:5b:f9:cc:64:93:07:85:34:34:a4:c6: 45:fc:2e:1c:47:88:f8:c2:cd:b5:7c:1a:48:4a:00: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:44:37:D5:30:37:AB:C3:9D:4C:0B:2F:18:1A:7F:40:7F:3C:44:09 X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:8c:44:71:87:6c:ee:03:5e:e2:2f:09:dd:99:1a:0c:da: a8:77:73:b8:2e:1a:b7:d4:18:50:8d:2b:9e:13:ed:48:9b:5a: 68:74:a2:c9:3f:b1:fb:99:6c:fa:bb:73:8b:b6:d4:fb:f8:a9: ed:a6:9f:c8:81:0c:2e:9a:e1:0b:56:e2:d8:a7:eb:3c:b9:9f: 38:a2:f0:b5:06:52:0e:fe:22:44:20:2b:f6:7a:94:9d:3d:52: fb:af:51:03:6f:c0:8f:ab:d3:b0:80:0f:d3:a4:13:4f:08:3b: 78:fa:96:ec:78:c8:48:67:3a:58:96:ca:f9:f6:22:c7:11:c0: 39:59:5b:03:3d:5d:39:0d:15:5c:2e:2f:91:a4:24:b7:e8:d9: d5:5d:dc:98:55:2c:2d:3f:4e:3a:fb:5a:22:9b:ce:eb:7b:48: 4c:e1:1c:be:3f:f1:43:48:3c:93:ba:b3:6c:f6:13:db:62:1f: cb:77:8a:52:7c:04:6d:0d:c4:51:3f:30:64:5b:83:81:4c:2d: 49:4e:7f:8a:35:20:46:43:9a:eb:39:d3:93:b7:aa:88:93:83: b5:15:46:83:46:8e:b5:13:dd:ff:22:88:5f:c5:9a:87:3c:1a: 57:d0:9d:f5:9b:ea:11:32:bb:8e:f5:12:95:cc:35:6a:68:39: 6a:e3:cf:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE NTdBQUFDMEIwHhcNMjUwOTA5MDYxMTQ4WhcNMjUwOTE2MDYxMTQ4WjAYMRYwFAYD VQQDEw02OGJmYzUyNS0wOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BTavrH4iqWZR5xGdcZ551s7fYkyS2LpnJBmWR76d9ZalpXY+/RhwusSGSQv LQpZg+IBuCuLSHmqUZsRxmQU4Q7qeC1dohbvVKDSZZnRgB9B1TLozubhvBD0Q8J1 Zx1poeKlw937/Axi9cpsS/2emWdD0T16TaR9H+qeNP2zhB/wazco1qxnLEmATvdt qeqrkvWSKubs2gFriZlI7TPI2dons59lhmTpbKiA1+5PBdxrIoMizni0JN/vnLmF Xf/94nwXbUwyT4qB3MKtHyMIwXhjGb91OvUCZFQGE2WmQ3IYcLzBW/nMZJMHhTQ0 pMZF/C4cR4j4ws21fBpISgBDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlEN9Uw N6vDnUwLLxgaf0B/PEQJMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv bXpKQlJiX21PM1RWZXFyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa5oxEcYds7gNe4i8J3ZkaDNqod3O4Lhq31BhQjSueE+1Im1podKLJ P7H7mWz6u3OLttT7+Kntpp/IgQwumuELVuLYp+s8uZ84ovC1BlIO/iJEICv2epSd PVL7r1EDb8CPq9OwgA/TpBNPCDt4+pbseMhIZzpYlsr59iLHEcA5WVsDPV05DRVc Li+RpCS36NnVXdyYVSwtP046+1oim87re0hM4Ry+P/FDSDyTurNs9hPbYh/Ld4pS fARtDcRRPzBkW4OBTC1JTn+KNSBGQ5rrOdOTt6qIk4O1FUaDRo61E93/IohfxZqH PBpX0J31m+oRMruO9RKVzDVqaDlq48+b -----END CERTIFICATE-----Generated at Tue Sep 9 13:33:58 2025 by rpki-client