$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: jUbm4VSvhNXpADUGhkXAdrCahGAuw2/FkWIYBv1Je8o= Subject key identifier: 7A:EA:5B:31:5D:1D:45:0C:47:D0:88:37:AF:D8:33:A1:F9:4E:48:E1 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 0222 Signing time: Wed 17 Sep 2025 02:29:02 +0000 Manifest this update: Wed 17 Sep 2025 02:29:01 +0000 Manifest next update: Wed 24 Sep 2025 02:29:01 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: ZXQXyDfSZ94cGnsybbNHazFZS31w+SkSVSvju0MSsA0=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Sep 17 02:29:01 2025 GMT Not After : Sep 24 02:29:01 2025 GMT Subject: CN=68ca1ced-7f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:da:92:ac:3d:ee:ff:be:8c:29:3d:c8:20: b9:ee:88:35:05:66:04:1c:aa:b8:00:50:7a:c3:cf: ec:7f:27:b3:77:f7:67:87:d6:ae:8f:c2:a2:b9:83: be:4b:26:32:ed:c8:52:02:11:2b:68:99:68:25:ef: af:47:a5:ae:29:4a:d3:6f:ec:a7:47:03:5c:49:eb: 39:2a:7d:a3:6f:e9:d6:c6:33:76:dd:3e:e7:d1:d5: 31:5e:cd:cd:56:7b:d1:d5:69:73:b8:d7:df:6d:96: 50:73:ce:bd:33:87:a1:fc:ca:ff:c5:77:7e:eb:e8: 72:ed:b3:0b:13:20:cd:a2:0e:dd:f7:22:7b:ff:ae: ed:2f:3f:b6:65:68:7a:c6:4b:3d:65:61:73:ec:0d: c8:5d:c1:72:62:59:2c:31:23:ff:d5:22:ea:c2:16: 65:6c:98:66:cb:b6:b5:83:74:3c:08:41:64:c8:84: 7b:dd:07:09:68:8a:af:35:d6:f8:27:67:ff:aa:ec: ad:de:7e:a8:83:7c:6c:52:c6:cd:15:6a:c3:fe:e7: 35:f7:61:40:aa:87:ec:b6:34:09:15:c0:59:2b:a4: 58:c2:c7:11:b3:34:86:db:57:e1:13:d0:61:e6:43: 82:a8:3e:89:d2:57:01:39:2e:82:46:54:e2:20:c9: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EA:5B:31:5D:1D:45:0C:47:D0:88:37:AF:D8:33:A1:F9:4E:48:E1 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:35:88:70:fa:fb:28:b8:09:52:7b:e0:10:8f:2b:3b:06:af: f8:ac:b0:ea:e9:a1:6f:9e:a3:ea:ba:96:0e:60:9f:fa:67:cd: 69:ed:1f:b9:0f:ee:48:cf:d6:3f:5d:02:18:dd:9c:68:52:97: 38:18:10:9a:b7:c7:20:bc:66:a8:2e:88:cd:bb:f7:5f:3e:34: de:27:38:1c:31:b4:56:95:79:ae:00:4b:07:dd:a9:d2:f8:aa: da:e8:af:40:f2:e1:34:02:ee:97:bd:66:c8:ba:44:b4:ab:00: ec:41:8f:7c:aa:e1:a5:bd:86:7b:01:4e:2d:0e:cd:98:37:60: 2d:e9:f2:e3:8e:7b:67:05:0a:c5:92:9b:e8:ef:8b:9a:06:29: 09:9f:50:d9:3b:5a:31:f0:34:5d:cc:47:b4:a8:55:c8:6c:56: 2e:1f:62:c9:ad:d0:02:f3:e9:41:fe:4f:04:25:47:fd:a6:bf: ac:7a:c8:d5:fd:24:54:b8:14:d0:e0:45:44:15:6a:b7:d2:40: a9:6d:26:59:f7:36:3c:9e:35:70:e0:1c:2e:66:ed:81:c2:44: 3a:a1:e7:6a:89:01:d8:9e:7b:52:31:6d:12:54:d4:5e:aa:eb: 96:5a:6a:00:ea:c1:4f:ef:2d:af:e8:e0:14:cc:f8:10:bb:51: 9b:69:e1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUwOTE3MDIyOTAxWhcNMjUwOTI0MDIyOTAxWjAYMRYwFAYD VQQDEw02OGNhMWNlZC03ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGHakqw97v++jCk9yCC57og1BWYEHKq4AFB6w8/sfyezd/dnh9auj8KiuYO+ SyYy7chSAhEraJloJe+vR6WuKUrTb+ynRwNcSes5Kn2jb+nWxjN23T7n0dUxXs3N VnvR1WlzuNffbZZQc869M4eh/Mr/xXd+6+hy7bMLEyDNog7d9yJ7/67tLz+2ZWh6 xks9ZWFz7A3IXcFyYlksMSP/1SLqwhZlbJhmy7a1g3Q8CEFkyIR73QcJaIqvNdb4 J2f/quyt3n6og3xsUsbNFWrD/uc192FAqofstjQJFcBZK6RYwscRszSG21fhE9Bh 5kOCqD6J0lcBOS6CRlTiIMkGTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrqWzFd HUUMR9CIN6/YM6H5TkjhMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbNYhw+vsouAlSe+AQjys7Bq/4rLDq6aFvnqPqupYOYJ/6Z81p7R+5 D+5Iz9Y/XQIY3ZxoUpc4GBCat8cgvGaoLojNu/dfPjTeJzgcMbRWlXmuAEsH3anS +Kra6K9A8uE0Au6XvWbIukS0qwDsQY98quGlvYZ7AU4tDs2YN2At6fLjjntnBQrF kpvo74uaBikJn1DZO1ox8DRdzEe0qFXIbFYuH2LJrdAC8+lB/k8EJUf9pr+sesjV /SRUuBTQ4EVEFWq30kCpbSZZ9zY8njVw4BwuZu2BwkQ6oedqiQHYnntSMW0SVNRe quuWWmoA6sFP7y2v6OAUzPgQu1GbaeEK -----END CERTIFICATE-----Generated at Thu Sep 18 23:24:02 2025 by rpki-client