$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: eFb24FinQzdqtiQy+bB32nKp87sY+aXxgMrmNW8cwSE= Subject key identifier: EF:B2:FD:13:7A:0C:5C:91:AF:7C:7B:15:AA:93:1F:7F:64:CA:01:99 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1CFB Signing time: Mon 08 Sep 2025 16:09:33 +0000 Manifest this update: Mon 08 Sep 2025 16:09:32 +0000 Manifest next update: Mon 15 Sep 2025 16:09:32 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: 8iwSiVqAn9ZGQTkkwpfEu/H6nCAKFiRalEWTdQqlxAg=) 2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 2aGejYYAILu+vq+h9Ds1ItJ4A2WEADfQRUwQnuAzQp4=) 3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: dyKQZQJFWOlaLCos4pICmePW3GQtvzVk28wWqQnX6xA=) 4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7440 (0x1d10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Sep 8 16:09:32 2025 GMT Not After : Sep 15 16:09:32 2025 GMT Subject: CN=68beffbc-4753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:5b:31:89:42:9e:dd:1c:a8:ad:09:1e:ac: 9f:f0:bb:a4:06:d8:bc:82:bb:9b:c6:3e:0d:c0:5e: d9:37:1a:a5:fb:a1:95:ca:09:96:ce:69:14:74:74: ea:88:5c:33:77:93:bf:f1:2b:6d:a5:92:71:02:89: cd:0a:1a:68:4b:b2:60:d3:99:68:d2:b3:7e:27:f8: 23:e4:01:2e:ff:3c:12:59:67:96:cd:e1:58:3a:0d: e2:82:6c:80:f9:d4:eb:c7:e6:dc:34:57:2d:8d:fa: c3:e5:f4:97:49:5f:0e:83:f1:35:c7:96:73:75:f8: d9:c7:48:3e:ab:4f:11:9d:f5:62:62:23:ce:9f:bc: d5:e8:73:ad:5d:42:74:ea:ab:a9:8b:6a:1d:0a:1b: 3d:fd:11:64:4f:62:7f:ab:6e:9b:f7:71:60:15:a6: 9e:9c:9e:b7:e4:c1:b1:79:21:35:57:fe:d0:ad:12: 27:e7:c6:d9:78:6b:9c:c3:68:55:02:7a:b6:ae:e7: be:9a:b1:5a:2f:2c:51:91:b4:06:33:0c:e0:f7:37: fc:56:4e:bc:49:f3:e4:5c:7f:b9:52:77:0b:5b:5a: 42:39:75:4a:b4:31:f8:d5:39:83:29:ba:fe:e8:ce: 97:9d:47:f0:9a:fe:f8:b3:04:d9:30:bd:8b:7a:33: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B2:FD:13:7A:0C:5C:91:AF:7C:7B:15:AA:93:1F:7F:64:CA:01:99 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:af:9e:a9:39:79:fc:11:82:d6:e1:3f:a9:d3:18:aa:d0:78: c9:1a:31:25:ea:ec:9d:52:84:77:32:26:5c:2b:6c:e9:f2:b7: 84:bb:e4:ae:97:b3:8d:34:96:99:6f:7e:a9:48:c9:c7:55:71: f7:ff:4e:af:59:69:0e:3b:33:38:e6:d2:8a:bb:1b:57:05:54: 8f:f0:aa:36:8c:2a:4a:50:96:c7:0c:ca:7c:24:ad:c4:1f:50: 30:09:bc:93:0d:0f:a4:e8:19:79:63:65:34:c0:8c:e5:05:63: 8b:68:d1:75:2c:0d:48:98:50:e8:18:59:cf:2d:dd:04:7d:ca: 74:bf:0a:68:f7:5a:82:82:b7:1c:0c:b0:19:8e:7c:5f:29:e5: 2b:18:20:06:45:56:cf:e7:ca:fb:f3:04:2e:17:b1:ef:79:ea: a2:ca:7f:a6:5a:8d:9d:2e:10:52:15:08:16:aa:70:fc:bf:83: 47:9e:04:01:72:5a:a0:3d:ba:cf:d0:2c:0a:a9:60:2f:09:a7: d2:5b:70:7c:bc:a4:aa:9f:e1:80:ee:07:69:f9:e3:63:10:58: fe:a6:55:35:19:81:36:55:7f:fe:08:c4:02:47:78:b7:15:88: 5c:1c:10:88:35:80:4c:04:45:6b:1c:99:1d:d5:64:4e:21:39: 84:dd:3f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjUwOTA4MTYwOTMyWhcNMjUwOTE1MTYwOTMyWjAYMRYwFAYD VQQDEw02OGJlZmZiYy00NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyutbMYlCnt0cqK0JHqyf8LukBti8grubxj4NwF7ZNxql+6GVygmWzmkUdHTq iFwzd5O/8SttpZJxAonNChpoS7Jg05lo0rN+J/gj5AEu/zwSWWeWzeFYOg3igmyA +dTrx+bcNFctjfrD5fSXSV8Og/E1x5ZzdfjZx0g+q08RnfViYiPOn7zV6HOtXUJ0 6qupi2odChs9/RFkT2J/q26b93FgFaaenJ635MGxeSE1V/7QrRIn58bZeGucw2hV Anq2rue+mrFaLyxRkbQGMwzg9zf8Vk68SfPkXH+5UncLW1pCOXVKtDH41TmDKbr+ 6M6XnUfwmv74swTZML2LejP3IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+y/RN6 DFyRr3x7FaqTH39kygGZMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALr56pOXn8EYLW4T+p0xiq0HjJGjEl6uydUoR3MiZcK2zp8reEu+Su l7ONNJaZb36pSMnHVXH3/06vWWkOOzM45tKKuxtXBVSP8Ko2jCpKUJbHDMp8JK3E H1AwCbyTDQ+k6Bl5Y2U0wIzlBWOLaNF1LA1ImFDoGFnPLd0Efcp0vwpo91qCgrcc DLAZjnxfKeUrGCAGRVbP58r78wQuF7Hveeqiyn+mWo2dLhBSFQgWqnD8v4NHngQB clqgPbrP0CwKqWAvCafSW3B8vKSqn+GA7gdp+eNjEFj+plU1GYE2VX/+CMQCR3i3 FYhcHBCINYBMBEVrHJkd1WROITmE3T9Y -----END CERTIFICATE-----Generated at Tue Sep 9 13:21:24 2025 by rpki-client