$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: 17kXZVmg2p9OOldvG7a85Nr4N5RllJnTNOO3eYzHgc4= Subject key identifier: 63:FE:83:94:40:35:7C:4D:52:38:EE:67:8E:5F:19:23:0C:12:74:93 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14F8 Signing time: Fri 22 Aug 2025 16:59:20 +0000 Manifest this update: Fri 22 Aug 2025 16:59:19 +0000 Manifest next update: Fri 29 Aug 2025 16:59:19 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: SkXJrY6LChbPtDtY/NC1eZVUqxi6dsRTliWhpftOprs=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: 8U3x6H5bY+5B5oCv6vYfZszgq6gpJHZUkBbn2fzX+3M=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: m0ywv3h/BJrsw2LOsXx/0+PQM3NArl9eNZt1OPifoLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5442 (0x1542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Aug 22 16:59:19 2025 GMT Not After : Aug 29 16:59:19 2025 GMT Subject: CN=68a8a1e8-8e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:42:bc:54:18:31:85:4f:20:24:8f:ee:91: 79:cf:ac:a4:83:d7:c9:3a:bc:69:33:c6:8c:d1:98: d9:bc:20:7d:4a:8b:e9:61:1f:69:3b:db:44:20:e9: de:df:94:84:95:43:dc:97:2b:41:63:b5:2e:71:07: 6d:d1:6a:f8:d9:29:e9:86:ce:35:38:24:74:17:8c: 7f:d9:f9:31:cc:e5:99:0b:67:18:a7:82:43:c8:ac: 26:42:83:19:01:13:22:46:db:71:fa:ff:36:18:78: 42:6f:bc:cf:86:c8:f3:05:ba:b7:d9:9a:8d:a6:80: 50:cd:41:ee:e5:7d:1c:19:d9:2c:77:b1:9a:30:de: 1c:67:af:c4:db:c3:68:13:5b:a7:3d:3b:39:06:a0: 7d:44:68:24:45:cf:2a:22:a0:19:65:f1:88:60:6f: 26:96:bb:9e:7a:ab:7b:18:44:b4:2e:ec:27:62:f1: 22:3e:96:f6:bf:5f:f4:6a:15:c6:a5:2a:e5:be:1f: bf:1e:a2:5c:3f:db:4f:7f:49:4d:da:66:bb:c1:60: 0c:f4:5e:1e:32:ec:c2:d5:f1:7e:be:9c:cf:d5:06: 74:46:70:22:b0:48:9f:00:e0:96:80:cc:8d:08:d3: 8d:f9:c7:9b:49:be:47:9a:4b:e2:5d:be:64:35:98: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:83:94:40:35:7C:4D:52:38:EE:67:8E:5F:19:23:0C:12:74:93 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:61:c6:72:46:a6:ad:24:6d:8d:7a:65:52:d2:9c:97:a8:e0: 8d:2f:5f:7a:69:74:33:fb:f2:76:39:45:1c:14:d2:91:c7:d1: e7:9e:09:ec:54:e7:f3:dd:c3:d5:d6:d2:1e:1e:cf:35:22:ad: 77:70:65:91:69:b1:9c:3f:f9:9f:44:10:e4:c0:a9:7e:18:b8: 76:38:73:b6:24:cf:07:3b:d0:95:cd:7c:59:e7:29:06:76:1c: 66:85:02:0f:32:d7:40:b6:87:e7:91:81:7e:ca:8c:63:df:2a: 1b:4f:ae:74:ea:ac:f0:fb:16:24:1d:7c:69:2c:a6:7e:18:57: cd:1f:1e:f5:56:7f:9c:40:48:71:d7:d9:2f:24:a4:4d:e5:8a: 62:0e:33:fa:5b:a8:2f:fd:d9:97:2f:f4:2c:52:20:cf:f6:8b: 9e:b2:a3:b1:31:58:98:56:c0:81:6b:66:94:29:89:ef:8b:8f: 0b:24:a6:fe:65:82:c9:25:dc:48:25:ea:41:85:73:c6:87:aa: b0:cb:c4:ea:4f:80:59:9b:df:dc:51:5a:c9:6e:86:ae:a7:99: cf:77:3a:59:4f:60:5f:2b:18:24:92:d1:5b:5a:45:e9:27:67: c3:1c:1c:e6:76:04:a2:c2:84:65:e2:ad:88:29:54:79:2e:02: f0:36:81:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwODIyMTY1OTE5WhcNMjUwODI5MTY1OTE5WjAYMRYwFAYD VQQDEw02OGE4YTFlOC04ZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg9CvFQYMYVPICSP7pF5z6ykg9fJOrxpM8aM0ZjZvCB9SovpYR9pO9tEIOne 35SElUPclytBY7UucQdt0Wr42Snphs41OCR0F4x/2fkxzOWZC2cYp4JDyKwmQoMZ ARMiRttx+v82GHhCb7zPhsjzBbq32ZqNpoBQzUHu5X0cGdksd7GaMN4cZ6/E28No E1unPTs5BqB9RGgkRc8qIqAZZfGIYG8mlrueeqt7GES0LuwnYvEiPpb2v1/0ahXG pSrlvh+/HqJcP9tPf0lN2ma7wWAM9F4eMuzC1fF+vpzP1QZ0RnAisEifAOCWgMyN CNON+cebSb5HmkviXb5kNZic5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP+g5RA NXxNUjjuZ45fGSMMEnSTMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcYcZyRqatJG2NemVS0pyXqOCNL196aXQz+/J2OUUcFNKRx9Hnngns VOfz3cPV1tIeHs81Iq13cGWRabGcP/mfRBDkwKl+GLh2OHO2JM8HO9CVzXxZ5ykG dhxmhQIPMtdAtofnkYF+yoxj3yobT6506qzw+xYkHXxpLKZ+GFfNHx71Vn+cQEhx 19kvJKRN5YpiDjP6W6gv/dmXL/QsUiDP9ouesqOxMViYVsCBa2aUKYnvi48LJKb+ ZYLJJdxIJepBhXPGh6qwy8TqT4BZm9/cUVrJboaup5nPdzpZT2BfKxgkktFbWkXp J2fDHBzmdgSiwoRl4q2IKVR5LgLwNoEu -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:04 2025 by rpki-client