$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: 3wGTuiLMyfB5sJ8PKb+39D8EWsNWJ0dtpmsX4wzEeqA= Subject key identifier: E0:C6:2F:1C:80:27:16:B3:5A:18:90:13:C0:46:59:63:44:DF:2B:90 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 07:00:21 +0000 Manifest this update: Sat 23 Aug 2025 07:00:21 +0000 Manifest next update: Sat 30 Aug 2025 07:00:21 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: EEeAJcUy4psFAZq+xXOfMOZ0GE3QU7Cg90MVnS+6sMs=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Aug 23 07:00:21 2025 GMT Not After : Aug 30 07:00:21 2025 GMT Subject: CN=68a96705-e25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:c3:b8:e6:8d:7b:c6:ef:b0:76:97:71:7d: c0:c8:31:90:9a:1a:e9:c6:27:7a:c2:a4:c4:bd:31: 0b:25:b0:01:96:3d:90:06:75:6c:c6:33:a8:6f:66: 21:0f:d7:18:5d:7f:c4:5f:54:9b:48:05:fa:da:31: e4:70:3c:3f:cd:b1:69:e1:b9:2b:e8:60:20:3a:3d: 0e:df:ab:3c:16:78:fe:23:ea:10:46:a3:ed:40:a1: e6:11:1c:e4:6b:11:f5:e6:de:1d:74:f1:f1:bf:87: ff:77:83:a2:59:d1:48:f8:15:44:cc:d5:11:57:e4: 9d:7e:e5:68:9e:e7:e5:7f:da:16:c7:ae:68:bd:42: 16:3d:19:18:11:6f:77:9a:4c:18:d2:0c:7c:13:6d: 29:fc:eb:c8:89:bb:d2:c0:83:97:71:92:a3:a8:d4: 68:ed:57:f2:2e:ac:c1:15:5d:89:77:43:e0:a7:a8: 71:32:f1:f0:d8:5c:97:67:35:0c:1e:64:f0:82:88: 34:cd:d0:20:74:73:b3:08:cb:d4:2e:57:91:77:73: 11:80:62:75:26:ae:3a:08:96:bd:29:da:4a:5a:46: 81:c7:d9:73:b3:e7:9e:2d:08:63:44:41:ba:34:c9: 1b:d0:65:2f:20:06:60:48:df:a8:8b:0f:dc:10:87: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:2F:1C:80:27:16:B3:5A:18:90:13:C0:46:59:63:44:DF:2B:90 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:30:05:1f:40:89:91:84:d4:9e:c6:01:86:be:4e:b6:47:79: 36:4f:02:3f:34:a0:a2:b4:95:8e:09:96:57:64:e8:05:6c:75: c5:b8:85:fa:d7:03:5a:98:1f:1d:b0:5e:ad:c9:b8:c5:c0:18: 95:c1:cb:d9:9a:d9:45:a9:9d:ad:ef:10:10:0c:d0:45:e5:c9: 56:2a:81:6a:35:7c:61:47:56:de:17:d6:f4:79:b4:92:99:78: cf:55:c5:e3:f6:3e:d1:84:df:3b:28:6d:ac:a1:b2:7b:80:88: d6:bc:c0:5b:e3:56:69:78:81:b7:6d:61:7e:ef:4f:07:bc:3f: 0c:da:fd:28:62:83:92:25:54:15:2c:6c:e7:47:61:86:81:6c: 53:5f:75:2a:7a:9d:f5:d1:a9:c4:1c:a8:03:3f:0b:8a:b0:76: 8c:7e:82:e3:b2:8b:e3:64:ee:fb:30:4d:48:65:a3:93:c5:04: 88:df:ee:54:54:8f:43:d4:3e:ae:3c:a2:d9:80:13:f2:f7:97: a8:cd:42:02:a3:b3:60:aa:85:8e:9b:29:41:75:f7:a0:90:0f: f3:55:49:93:00:6d:48:fd:16:eb:da:f1:af:02:e3:97:63:19: 1f:d8:53:cc:0d:ae:c9:70:d8:d9:70:a9:fa:b8:80:c4:89:67: 06:dd:2c:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA4MjMwNzAwMjFaFw0yNTA4MzAwNzAwMjFaMBgxFjAUBgNV BAMTDTY4YTk2NzA1LWUyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCto8O45o17xu+wdpdxfcDIMZCaGunGJ3rCpMS9MQslsAGWPZAGdWzGM6hvZiEP 1xhdf8RfVJtIBfraMeRwPD/NsWnhuSvoYCA6PQ7fqzwWeP4j6hBGo+1AoeYRHORr EfXm3h108fG/h/93g6JZ0Uj4FUTM1RFX5J1+5Wie5+V/2hbHrmi9QhY9GRgRb3ea TBjSDHwTbSn868iJu9LAg5dxkqOo1GjtV/IurMEVXYl3Q+CnqHEy8fDYXJdnNQwe ZPCCiDTN0CB0c7MIy9QuV5F3cxGAYnUmrjoIlr0p2kpaRoHH2XOz554tCGNEQbo0 yRvQZS8gBmBI36iLD9wQhzjNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4MYvHIAn FrNaGJATwEZZY0TfK5AwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcwBR9AiZGE1J7GAYa+TrZHeTZPAj80oKK0lY4Jlldk6AVsdcW4hfrX A1qYHx2wXq3JuMXAGJXBy9ma2UWpna3vEBAM0EXlyVYqgWo1fGFHVt4X1vR5tJKZ eM9VxeP2PtGE3zsobayhsnuAiNa8wFvjVml4gbdtYX7vTwe8Pwza/Shig5IlVBUs bOdHYYaBbFNfdSp6nfXRqcQcqAM/C4qwdox+guOyi+Nk7vswTUhlo5PFBIjf7lRU j0PUPq48otmAE/L3l6jNQgKjs2CqhY6bKUF196CQD/NVSZMAbUj9Fuva8a8C45dj GR/YU8wNrslw2Nlwqfq4gMSJZwbdLIA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:10 2025 by rpki-client