$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: kuru1Zw8LnXWWlR+1iMUD3wFs6GkrUN+ffEitA4LdEQ= Subject key identifier: 0B:94:55:D5:27:44:41:E8:E2:BB:B6:F4:67:8C:03:D8:85:00:E8:A4 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 07B7 Signing time: Fri 22 Aug 2025 21:23:01 +0000 Manifest this update: Fri 22 Aug 2025 21:23:00 +0000 Manifest next update: Fri 29 Aug 2025 21:23:00 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: q5JYhUhTV/kEHT0wOaBwPhzpz5RhE51GffND61LPL4M=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Aug 22 21:23:00 2025 GMT Not After : Aug 29 21:23:00 2025 GMT Subject: CN=68a8dfb5-2937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:54:ac:b4:3c:03:91:f8:f7:a4:3f:7d:2c: 7a:29:20:3c:c0:74:b6:52:84:5b:7f:99:3b:20:9f: 40:b1:89:4e:9b:d0:b9:9d:4b:56:5c:f2:a9:84:11: f5:88:eb:2c:71:2d:f7:87:94:2e:d7:88:f4:87:8a: 84:f3:6f:3a:65:82:32:72:3d:57:8a:88:28:48:10: 81:9d:47:70:21:20:2d:2b:0e:95:48:aa:9c:90:29: f1:f1:ad:1a:98:22:2f:24:dd:46:13:8d:23:27:6e: 0a:98:b3:aa:71:7e:3f:a6:7f:23:7b:35:69:58:e3: 80:7f:b9:09:5c:c2:46:95:94:02:97:ed:ca:20:26: c4:65:64:4f:e7:cb:a8:1b:a5:28:e6:1b:a7:1e:fd: 9f:81:2f:fe:5c:1f:72:4f:f6:7d:ac:55:64:0b:95: 80:df:27:85:61:d6:46:f5:fd:0e:ea:52:ff:04:aa: 8f:d6:40:10:83:70:45:86:83:66:17:e2:e3:89:4f: 10:f8:68:54:75:19:25:71:8d:57:20:23:d0:56:4d: 31:6c:af:97:78:ca:d7:db:da:b3:89:04:fa:5b:38: 63:83:78:07:42:ec:a3:cb:21:0d:58:22:fd:7b:3f: a4:31:95:68:5b:4c:84:89:6b:05:c9:4e:00:a2:69: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:55:D5:27:44:41:E8:E2:BB:B6:F4:67:8C:03:D8:85:00:E8:A4 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:6a:e2:48:a1:53:2b:d9:67:a6:9b:80:0a:2f:d4:31:38: c8:8a:90:95:a0:74:68:b5:a5:89:72:14:68:e9:9e:2c:2f:ca: ec:79:0f:95:49:6a:8d:49:bc:9b:fc:96:94:65:cc:18:64:90: 61:f2:b4:8e:b4:ec:ad:6c:05:dd:64:5c:59:36:ac:d5:5c:92: d9:56:c5:66:e3:59:2e:e0:32:37:68:8d:5a:68:f1:c8:a2:54: b9:0a:26:38:10:5c:ed:e2:c8:00:ce:62:42:1b:19:5b:7e:a2: 70:ba:03:5b:6b:dc:29:3c:14:d6:92:97:fb:65:9d:24:3f:a9: eb:74:3a:25:ed:f7:f8:94:4d:9c:e3:df:47:0a:4a:4e:52:98: 14:f9:33:0e:0f:36:e8:db:70:28:52:e7:0a:ed:7e:3a:8c:2c: a5:33:c6:e6:69:4c:ad:2d:36:1f:0c:1d:78:f7:d7:14:31:79: ca:12:77:dd:dc:f4:1a:71:e3:20:ed:af:4a:d2:b6:33:a8:cb: eb:f9:52:8c:49:34:fa:aa:41:f5:36:0d:eb:2c:96:da:9e:7d: 58:0d:19:b1:a4:c1:8c:db:0a:ec:6b:c9:54:63:89:36:77:97: 37:f2:48:e1:74:7b:fb:77:5e:83:b7:03:67:93:6e:6e:7a:c2: 0b:51:bb:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUwODIyMjEyMzAwWhcNMjUwODI5MjEyMzAwWjAYMRYwFAYD VQQDEw02OGE4ZGZiNS0yOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqVUrLQ8A5H496Q/fSx6KSA8wHS2UoRbf5k7IJ9AsYlOm9C5nUtWXPKphBH1 iOsscS33h5Qu14j0h4qE8286ZYIycj1XiogoSBCBnUdwISAtKw6VSKqckCnx8a0a mCIvJN1GE40jJ24KmLOqcX4/pn8jezVpWOOAf7kJXMJGlZQCl+3KICbEZWRP58uo G6Uo5hunHv2fgS/+XB9yT/Z9rFVkC5WA3yeFYdZG9f0O6lL/BKqP1kAQg3BFhoNm F+LjiU8Q+GhUdRklcY1XICPQVk0xbK+XeMrX29qziQT6Wzhjg3gHQuyjyyENWCL9 ez+kMZVoW0yEiWsFyU4AomnCRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuUVdUn REHo4ru29GeMA9iFAOikMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48GriSKFTK9lnppuACi/UMTjIipCVoHRotaWJchRo6Z4sL8rseQ+V SWqNSbyb/JaUZcwYZJBh8rSOtOytbAXdZFxZNqzVXJLZVsVm41ku4DI3aI1aaPHI olS5CiY4EFzt4sgAzmJCGxlbfqJwugNba9wpPBTWkpf7ZZ0kP6nrdDol7ff4lE2c 499HCkpOUpgU+TMODzbo23AoUucK7X46jCylM8bmaUytLTYfDB1499cUMXnKEnfd 3PQaceMg7a9K0rYzqMvr+VKMSTT6qkH1Ng3rLJbann1YDRmxpMGM2wrsa8lUY4k2 d5c38kjhdHv7d16DtwNnk25uesILUbub -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:59 2025 by rpki-client