$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: 3vyv2Edh+1YmdpPPWbzMlvoIMbGySyh4bmNwCxbsXog= Subject key identifier: 73:11:F6:5C:BF:82:B0:6B:BA:E0:EA:A4:CC:2C:33:A3:9A:F0:5E:A7 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04A5 Signing time: Wed 17 Sep 2025 00:21:26 +0000 Manifest this update: Wed 17 Sep 2025 00:21:26 +0000 Manifest next update: Wed 24 Sep 2025 00:21:26 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: HXVsingJaA8S6Doz+d4xQ/zrePNwV7ekRpejq5wjEDI=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Sep 17 00:21:26 2025 GMT Not After : Sep 24 00:21:26 2025 GMT Subject: CN=68c9ff06-5d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:95:d5:31:2e:00:5f:44:29:8f:ed:7c:6e: 76:39:85:7b:86:be:82:21:2e:09:b4:50:36:04:6b: c1:20:6c:85:d5:d7:c2:a7:c8:89:26:39:ce:b0:78: dc:fa:9f:3d:f7:53:22:c2:14:02:8b:53:2f:6a:d5: 3e:fd:f3:03:87:e1:ba:53:ca:65:c2:53:1a:90:12: b8:01:b6:30:ef:e8:43:59:9d:f0:39:08:3d:5d:33: 93:38:f1:2f:6f:52:5d:ab:1d:e6:d7:36:3e:f7:33: bd:85:a3:2e:43:aa:8d:b6:4f:55:b9:a0:59:fe:a8: 86:d0:8c:bf:90:68:8c:82:d5:4e:67:b8:6c:43:92: a9:b7:c3:7c:0a:26:18:47:ee:34:59:25:62:21:60: 31:7f:50:4f:57:0b:9a:6e:ae:95:f1:34:e3:1d:46: 99:e3:b1:8c:9a:b7:a6:37:8e:84:8b:1c:7f:95:75: 12:53:a0:96:9e:fb:a3:dd:81:c5:fc:cb:8d:6c:d5: 2d:24:7f:7f:d3:92:6f:6c:0c:26:ab:ec:0d:8f:17: c1:72:6d:d4:65:0a:94:a2:0e:f2:16:dc:98:56:d7: 43:ac:24:f9:7a:f1:91:a8:77:4a:aa:bf:cd:c0:88: da:0a:b5:a6:d8:a0:22:a7:46:43:b6:22:1f:92:bf: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:F6:5C:BF:82:B0:6B:BA:E0:EA:A4:CC:2C:33:A3:9A:F0:5E:A7 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a4:73:fc:c9:19:db:b2:57:3a:d4:fe:5d:5e:54:67:95:be: 10:ed:59:d8:77:79:5a:b0:0f:13:51:0c:7a:b0:49:41:0f:42: 9b:26:93:b4:ad:4d:47:d1:4f:dc:37:b1:b9:a2:c5:fe:b8:90: 12:40:02:11:3b:1d:cc:31:a7:89:6f:37:e7:89:5a:07:41:75: 4d:1f:99:47:78:96:c9:43:69:bb:ce:2c:ef:c7:45:03:e6:1a: b1:a3:1a:c7:34:22:82:49:a4:dc:47:bd:09:a4:03:94:b0:ca: 86:62:84:23:ce:60:19:0f:09:64:36:a7:64:b2:64:bf:b1:f3: 3f:93:ad:e2:69:0e:4c:0b:37:8d:44:29:74:49:0f:da:18:88: 4f:df:ee:5e:07:29:ca:02:68:17:b8:5d:d0:fe:76:20:c6:18: 6c:93:ce:c4:c9:2f:a1:6e:af:5c:bd:41:ea:fe:4a:ab:ae:89: aa:51:e0:5a:4f:56:c2:20:b0:a5:26:60:43:b9:d9:c8:ca:d8: a2:97:29:29:41:1a:61:9a:cd:e2:d7:25:73:91:96:96:38:d5: ae:84:04:09:98:d8:44:0a:2f:a3:f0:82:ff:0c:1f:35:ec:46: f3:ff:b3:c8:17:52:13:4f:b4:bd:38:89:b8:fa:14:2f:87:8e: ba:51:06:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwOTE3MDAyMTI2WhcNMjUwOTI0MDAyMTI2WjAYMRYwFAYD VQQDEw02OGM5ZmYwNi01ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2buV1TEuAF9EKY/tfG52OYV7hr6CIS4JtFA2BGvBIGyF1dfCp8iJJjnOsHjc +p8991MiwhQCi1MvatU+/fMDh+G6U8plwlMakBK4AbYw7+hDWZ3wOQg9XTOTOPEv b1Jdqx3m1zY+9zO9haMuQ6qNtk9VuaBZ/qiG0Iy/kGiMgtVOZ7hsQ5Kpt8N8CiYY R+40WSViIWAxf1BPVwuabq6V8TTjHUaZ47GMmremN46Eixx/lXUSU6CWnvuj3YHF /MuNbNUtJH9/05JvbAwmq+wNjxfBcm3UZQqUog7yFtyYVtdDrCT5evGRqHdKqr/N wIjaCrWm2KAip0ZDtiIfkr87fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMR9ly/ grBruuDqpMwsM6Oa8F6nMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCupHP8yRnbslc61P5dXlRnlb4Q7VnYd3lasA8TUQx6sElBD0KbJpO0 rU1H0U/cN7G5osX+uJASQAIROx3MMaeJbzfniVoHQXVNH5lHeJbJQ2m7zizvx0UD 5hqxoxrHNCKCSaTcR70JpAOUsMqGYoQjzmAZDwlkNqdksmS/sfM/k63iaQ5MCzeN RCl0SQ/aGIhP3+5eBynKAmgXuF3Q/nYgxhhsk87EyS+hbq9cvUHq/kqrromqUeBa T1bCILClJmBDudnIytiilykpQRphms3i1yVzkZaWONWuhAQJmNhECi+j8IL/DB81 7Ebz/7PIF1ITT7S9OIm4+hQvh466UQYb -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:12 2025 by rpki-client