$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: 0ys/a5fyrB4mka+i3qdJ+ssIbMOJs8lNcmhJepOqF3c= Subject key identifier: 26:40:24:EC:19:A2:56:B7:65:BA:DB:F6:30:83:85:65:2D:F7:B6:BD Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01F0 Signing time: Thu 21 Aug 2025 02:37:39 +0000 Manifest this update: Thu 21 Aug 2025 02:37:39 +0000 Manifest next update: Thu 28 Aug 2025 02:37:39 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: DsAaCcx9PURRWnlghpRnsU2X5I2rDcchPZ5w9lK7ApE=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Aug 21 02:37:39 2025 GMT Not After : Aug 28 02:37:39 2025 GMT Subject: CN=68a68673-70db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:8a:b7:f1:61:65:cf:e9:3b:4f:7c:7e:a6: 1b:6d:fc:ab:e8:1e:42:71:6c:07:1b:ab:ec:8a:ef: 93:59:d1:a5:bc:c6:a5:3d:79:fd:05:e7:8b:ad:a5: cc:fc:40:8a:a3:9e:2f:9b:ab:ae:db:65:6f:6e:1c: 84:f5:dd:a7:08:28:ac:d0:5c:9d:99:61:30:2e:34: 20:ea:be:e4:45:6d:6c:a3:c0:00:87:f4:6e:9f:4a: 4a:99:eb:2a:35:9a:ea:e2:16:fc:25:66:5d:ae:fd: c9:d5:5f:03:c6:df:c4:eb:0c:e9:fe:03:e7:9a:f1: 54:6c:d6:6a:5b:68:9c:11:98:5b:a3:35:e3:66:59: 64:6f:79:da:85:85:95:8e:e7:6b:5e:4a:27:cc:36: 07:56:b9:03:62:5c:aa:3f:77:5f:ba:04:09:f8:4c: 47:77:73:23:4b:c2:b0:ef:80:89:5d:b7:67:be:9c: ff:97:43:ea:10:25:2e:e8:61:fb:4b:73:c8:7b:7a: 77:1c:cb:9a:4e:a2:8e:2c:40:c6:0f:d0:6a:77:5a: ec:a4:a8:a9:dd:66:c1:22:2a:8b:8f:f5:94:a3:ee: 21:0c:47:bf:dc:07:60:7d:f0:0c:0f:c5:45:2e:f8: 09:7f:39:4f:e2:67:74:21:63:ed:1a:ca:0e:fd:eb: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:24:EC:19:A2:56:B7:65:BA:DB:F6:30:83:85:65:2D:F7:B6:BD X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:65:ea:e7:54:43:38:28:12:1c:f0:1e:28:eb:ef:88:5c:89: e2:f5:ee:d8:14:64:da:86:05:dc:8d:fa:c5:d1:e5:61:99:4f: 27:7b:5b:51:04:24:c0:c1:f7:06:29:fd:d8:f1:17:85:bb:6d: d7:3c:fe:1b:ca:45:3a:f3:8c:3e:cd:e3:78:62:0f:52:ae:d1: 55:d9:69:45:d9:fe:26:71:25:f6:35:86:47:dd:7f:37:5b:81: f7:18:32:4c:f3:32:58:8f:2e:33:00:61:1e:41:8c:08:11:66: cf:26:69:bf:d9:33:90:88:79:16:de:6e:c4:eb:27:bb:68:6c: 31:8d:94:05:3c:10:1a:99:db:e2:4f:3b:9c:f6:62:6e:b9:f4: 16:62:b4:be:c6:22:45:ca:e4:2c:d1:fc:a8:af:29:42:b1:e1: 24:34:eb:eb:8a:a8:3d:66:6b:d2:44:12:0e:81:a3:ca:c9:34: d1:2f:e6:b5:82:b4:37:76:72:98:ff:94:a3:34:6e:f5:d5:52: bf:e2:97:60:46:95:6d:45:06:c9:79:f5:6f:56:46:d6:c8:65: d4:58:62:d7:b6:e3:29:34:8f:8d:1b:b6:b3:52:21:fa:f9:c6: 4c:e9:03:13:79:77:82:50:8e:19:0a:e4:1f:e1:52:9f:86:72: 63:21:5f:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwODIxMDIzNzM5WhcNMjUwODI4MDIzNzM5WjAYMRYwFAYD VQQDEw02OGE2ODY3My03MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iKKt/FhZc/pO098fqYbbfyr6B5CcWwHG6vsiu+TWdGlvMalPXn9BeeLraXM /ECKo54vm6uu22VvbhyE9d2nCCis0FydmWEwLjQg6r7kRW1so8AAh/Run0pKmesq NZrq4hb8JWZdrv3J1V8Dxt/E6wzp/gPnmvFUbNZqW2icEZhbozXjZllkb3nahYWV judrXkonzDYHVrkDYlyqP3dfugQJ+ExHd3MjS8Kw74CJXbdnvpz/l0PqECUu6GH7 S3PIe3p3HMuaTqKOLEDGD9Bqd1rspKip3WbBIiqLj/WUo+4hDEe/3AdgffAMD8VF LvgJfzlP4md0IWPtGsoO/evpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZAJOwZ ola3Zbrb9jCDhWUt97a9MB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBZernVEM4KBIc8B4o6++IXIni9e7YFGTahgXcjfrF0eVhmU8ne1tR BCTAwfcGKf3Y8ReFu23XPP4bykU684w+zeN4Yg9SrtFV2WlF2f4mcSX2NYZH3X83 W4H3GDJM8zJYjy4zAGEeQYwIEWbPJmm/2TOQiHkW3m7E6ye7aGwxjZQFPBAamdvi Tzuc9mJuufQWYrS+xiJFyuQs0fyorylCseEkNOvriqg9ZmvSRBIOgaPKyTTRL+a1 grQ3dnKY/5SjNG711VK/4pdgRpVtRQbJefVvVkbWyGXUWGLXtuMpNI+NG7azUiH6 +cZM6QMTeXeCUI4ZCuQf4VKfhnJjIV+m -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:49 2025 by rpki-client