$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: IkbTlIkm15S8FxAB2HQjguRom1pvVLs2wInxuWou37U= Subject key identifier: CB:49:32:EA:DF:0F:A1:23:CB:B7:33:E4:52:BA:7E:8E:02:D3:C7:21 Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 066F Signing time: Thu 04 Sep 2025 22:46:38 +0000 Manifest this update: Thu 04 Sep 2025 22:46:37 +0000 Manifest next update: Thu 11 Sep 2025 22:46:37 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: ePYOhImuzTEveqLQuzU6if/qMwqDf4xhniVyMJ/DOFY=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: WLK6J5FK1cyYi8od3TiV/xRyzkXSS7BDCS8cGAhSdLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: Sep 4 22:46:37 2025 GMT Not After : Sep 11 22:46:37 2025 GMT Subject: CN=68ba16cd-2698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:b0:da:b0:d1:b1:7d:b6:ff:78:6e:c2:e9: 5a:94:21:60:af:3f:a2:34:4a:a0:e3:7d:fe:55:13: 37:7e:88:81:0e:82:d0:ed:61:38:7a:81:b3:bb:51: b5:2e:48:4e:6b:d8:71:8e:29:74:48:93:9c:f4:e5: 57:c0:6e:f9:fb:66:20:8d:86:1e:2c:60:98:93:05: c6:06:ef:fc:27:e2:47:72:8a:82:b6:5c:79:4b:79: 4e:4e:b5:ff:68:01:bf:20:b4:e0:8d:4b:62:09:40: 8d:49:a4:a0:f4:b0:74:51:76:c7:93:4c:a9:48:98: 0d:ae:c1:ab:41:df:66:8b:a2:26:4d:bc:2c:0d:1a: 3f:40:b7:87:02:91:35:22:1a:ea:aa:34:70:ea:5c: ba:a1:39:58:2b:6a:62:4b:36:c0:0d:3b:1f:e0:65: ea:14:6f:3c:32:f2:17:c4:46:f3:ac:9d:a2:48:1e: 27:25:a3:25:39:5f:87:34:e9:7b:68:32:d5:ff:8b: 7c:86:bc:b1:d3:28:ea:85:28:5c:43:93:96:70:42: 94:11:73:e3:6e:13:f5:d3:e1:15:8e:3f:a1:67:17: f9:ab:02:f3:9d:03:6a:4e:2c:d2:69:21:9d:ed:0b: 99:10:c2:9f:7f:8b:25:14:cb:ec:79:82:87:9a:04: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:32:EA:DF:0F:A1:23:CB:B7:33:E4:52:BA:7E:8E:02:D3:C7:21 X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:21:8a:85:fc:1f:cf:d8:c7:40:66:4b:02:2e:cb:64:95:1c: 7a:aa:31:53:d6:4c:97:f5:a4:08:cf:2e:58:18:cd:65:80:1a: 31:27:71:ea:9c:ff:51:76:55:dd:2d:d9:37:8e:ce:33:47:27: 23:a4:60:52:74:e3:ac:a4:3a:31:b3:8a:29:b1:f3:18:20:3b: 12:13:3d:cf:be:92:0c:9a:a1:76:66:3c:71:e3:64:1a:6e:3e: 33:24:f4:a6:0f:52:8a:ce:68:af:d5:ee:0e:7f:55:11:4e:39: 89:e1:59:c2:50:d8:86:4d:23:42:77:ea:32:bf:ee:35:f3:b3: d3:da:e7:56:d0:c8:b7:d4:90:54:cc:6d:13:44:da:a4:f6:9e: f9:23:bf:91:31:6c:0f:f5:45:a5:3f:09:c2:9a:d8:9c:01:ce: 58:d8:d9:88:c7:e2:ab:a9:35:31:06:82:7d:5d:65:f4:98:54: 15:35:13:c7:f7:2f:dc:a5:43:23:91:70:e4:43:d5:c2:1a:f7: b0:df:9c:64:44:94:00:93:05:d8:63:46:97:e4:0f:53:db:b5: 21:b5:4b:aa:24:a4:93:45:58:7a:4f:16:aa:d1:dd:97:b0:89: ac:2d:c6:06:fe:e0:3e:89:42:92:9d:9d:99:a7:6c:92:af:d0: 0f:67:7c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjUwOTA0MjI0NjM3WhcNMjUwOTExMjI0NjM3WjAYMRYwFAYD VQQDEw02OGJhMTZjZC0yNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Kiw2rDRsX22/3huwulalCFgrz+iNEqg433+VRM3foiBDoLQ7WE4eoGzu1G1 LkhOa9hxjil0SJOc9OVXwG75+2YgjYYeLGCYkwXGBu/8J+JHcoqCtlx5S3lOTrX/ aAG/ILTgjUtiCUCNSaSg9LB0UXbHk0ypSJgNrsGrQd9mi6ImTbwsDRo/QLeHApE1 IhrqqjRw6ly6oTlYK2piSzbADTsf4GXqFG88MvIXxEbzrJ2iSB4nJaMlOV+HNOl7 aDLV/4t8hryx0yjqhShcQ5OWcEKUEXPjbhP10+EVjj+hZxf5qwLznQNqTizSaSGd 7QuZEMKff4slFMvseYKHmgScmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtJMurf D6Ejy7cz5FK6fo4C08chMB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNIYqF/B/P2MdAZksCLstklRx6qjFT1kyX9aQIzy5YGM1lgBoxJ3Hq nP9RdlXdLdk3js4zRycjpGBSdOOspDoxs4opsfMYIDsSEz3PvpIMmqF2Zjxx42Qa bj4zJPSmD1KKzmiv1e4Of1URTjmJ4VnCUNiGTSNCd+oyv+4187PT2udW0Mi31JBU zG0TRNqk9p75I7+RMWwP9UWlPwnCmticAc5Y2NmIx+KrqTUxBoJ9XWX0mFQVNRPH 9y/cpUMjkXDkQ9XCGvew35xkRJQAkwXYY0aX5A9T27UhtUuqJKSTRVh6Txaq0d2X sImsLcYG/uA+iUKSnZ2Zp2ySr9APZ3xA -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:36 2025 by rpki-client