$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: rdZQgHL8Tw5hl2Sqfug8tVmVvbj6+dSjFznU2zpYATk= Subject key identifier: D4:80:76:37:04:9D:5C:3A:91:27:39:3F:AF:1A:AF:0B:39:74:A0:44 Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 0657 Signing time: Sun 20 Jul 2025 22:43:55 +0000 Manifest this update: Sun 20 Jul 2025 22:43:55 +0000 Manifest next update: Sun 27 Jul 2025 22:43:55 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: 5gx3iNZsqGehI/N7VvdsVUnq0j/t3J/xyM0TRsHgtbY=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: WLK6J5FK1cyYi8od3TiV/xRyzkXSS7BDCS8cGAhSdLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: Jul 20 22:43:55 2025 GMT Not After : Jul 27 22:43:55 2025 GMT Subject: CN=687d712b-e384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:fe:50:c8:aa:8f:c2:89:38:48:b3:85:51: c8:d1:10:88:f4:eb:8d:07:bd:d6:62:48:1b:7c:e5: f0:9c:72:72:c0:76:fe:3e:fa:8d:d4:c3:84:65:41: 28:63:55:6e:8b:c7:60:12:37:07:eb:74:04:c9:91: 9e:26:02:68:70:9e:16:85:aa:21:95:47:8a:e2:05: 92:c0:ef:da:1d:65:4d:bb:ba:91:39:2a:be:b9:d2: 3e:19:d0:8b:a8:e2:7d:c8:1c:bf:fe:3e:85:09:0b: 15:81:c2:a6:d5:3d:98:ce:38:4a:ec:79:2c:5f:40: 00:db:c6:f4:75:25:8d:01:6c:ed:35:80:e8:9e:21: ff:4c:46:c5:d0:2e:df:37:ac:e8:6b:da:1a:20:d2: ba:0a:16:cf:b1:47:94:db:34:15:6d:00:a1:f7:42: 0e:20:35:e7:92:d1:f1:35:91:ad:98:7b:0a:ac:82: 31:ab:37:61:31:ee:62:db:66:eb:45:b3:c7:b4:b7: 0c:5e:f8:2f:bf:e1:79:b4:e6:a7:16:88:00:5d:90: 79:6c:ef:42:80:9b:c7:d2:bc:cc:1e:ce:09:9e:98: 69:97:3b:82:cb:07:43:b3:c9:f4:0a:13:18:22:10: ce:c5:e9:20:19:0d:ce:02:b9:28:00:a3:6d:c3:db: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:76:37:04:9D:5C:3A:91:27:39:3F:AF:1A:AF:0B:39:74:A0:44 X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:2c:a3:c8:e2:6d:af:90:88:02:36:21:68:12:da:74:d5:64: dd:bb:f1:b9:36:76:3d:53:a8:44:94:52:d7:e8:7e:82:79:36: 70:34:09:38:c3:d0:75:31:ae:2a:7e:cc:1e:df:65:82:f7:2f: 89:a7:b7:2b:f4:35:32:24:96:ec:8a:99:ab:75:aa:2e:c6:ab: 86:bd:de:bd:c3:ed:c5:2e:85:61:79:42:2c:00:f8:d5:18:1a: 80:94:46:db:6f:8b:8c:17:01:4c:e4:07:8d:b8:95:55:9c:d6: 91:7f:d9:81:2f:d8:75:ad:9a:ad:69:31:c0:52:2e:bf:7e:65: 50:44:41:37:03:93:ff:e9:15:9b:da:fd:16:93:c9:28:2c:f6: 84:f6:61:26:b0:4b:c9:51:df:ed:7b:77:6c:6c:31:f4:2b:94: b4:06:24:34:74:a8:34:10:0e:d0:69:c9:df:6b:13:78:ff:fe: 06:7c:a7:37:7c:33:4d:46:e1:09:4b:6d:d5:8a:9c:01:0a:e9: a4:3f:a9:23:5b:65:08:7f:da:2d:32:78:69:3e:1f:ee:5d:84: a2:74:53:45:c2:ab:96:d6:b2:4e:50:78:62:c3:2c:29:22:2d: bf:cd:8c:41:5b:47:b1:92:31:3c:28:47:43:29:f0:ad:56:16: 0c:ca:7b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjUwNzIwMjI0MzU1WhcNMjUwNzI3MjI0MzU1WjAYMRYwFAYD VQQDEw02ODdkNzEyYi1lMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwf+UMiqj8KJOEizhVHI0RCI9OuNB73WYkgbfOXwnHJywHb+PvqN1MOEZUEo Y1Vui8dgEjcH63QEyZGeJgJocJ4WhaohlUeK4gWSwO/aHWVNu7qROSq+udI+GdCL qOJ9yBy//j6FCQsVgcKm1T2YzjhK7HksX0AA28b0dSWNAWztNYDoniH/TEbF0C7f N6zoa9oaINK6ChbPsUeU2zQVbQCh90IOIDXnktHxNZGtmHsKrIIxqzdhMe5i22br RbPHtLcMXvgvv+F5tOanFogAXZB5bO9CgJvH0rzMHs4JnphplzuCywdDs8n0ChMY IhDOxekgGQ3OArkoAKNtw9tguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSAdjcE nVw6kSc5P68arws5dKBEMB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLLKPI4m2vkIgCNiFoEtp01WTdu/G5NnY9U6hElFLX6H6CeTZwNAk4 w9B1Ma4qfswe32WC9y+Jp7cr9DUyJJbsipmrdaouxquGvd69w+3FLoVheUIsAPjV GBqAlEbbb4uMFwFM5AeNuJVVnNaRf9mBL9h1rZqtaTHAUi6/fmVQREE3A5P/6RWb 2v0Wk8koLPaE9mEmsEvJUd/te3dsbDH0K5S0BiQ0dKg0EA7QacnfaxN4//4GfKc3 fDNNRuEJS23VipwBCumkP6kjW2UIf9otMnhpPh/uXYSidFNFwquW1rJOUHhiwywp Ii2/zYxBW0exkjE8KEdDKfCtVhYMynuw -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:16 2025 by rpki-client