$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: L7C+Hgu/46alhP61ekcfEoYWq7fgrR+tHtlIvAmLbvE= Subject key identifier: 7A:7C:C7:8C:DA:65:BD:4F:F4:19:D3:C2:53:36:BF:B8:0F:7D:C2:1A Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 0904 Signing time: Fri 22 Aug 2025 21:07:45 +0000 Manifest this update: Fri 22 Aug 2025 21:07:45 +0000 Manifest next update: Fri 29 Aug 2025 21:07:45 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: Dm4eKb/znE50ppDNNhU8UTN0zyye8EvhztCqUuoSuOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Aug 22 21:07:45 2025 GMT Not After : Aug 29 21:07:45 2025 GMT Subject: CN=68a8dc21-41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0a:c4:74:d6:56:91:fc:ff:11:5c:18:b5:d0: 7e:4f:f4:9f:ed:a0:f0:7f:70:c4:d7:eb:af:ca:37: 7c:c9:16:ed:d5:00:f4:9a:69:13:00:80:2d:4c:30: f3:80:bb:16:b2:dc:5d:86:93:c9:b3:f2:84:af:1c: d0:b5:d5:c7:2b:b3:04:83:d7:56:10:ea:c1:88:8d: e8:a8:6b:b6:cb:eb:56:52:da:18:50:ec:92:2e:63: a2:f4:08:e8:7f:66:62:b0:ed:c7:b1:b4:a3:9b:62: 42:f3:32:18:23:81:b8:55:06:8a:0d:36:ff:8b:dc: 10:1d:5a:6a:0e:b3:e7:8e:be:65:91:8e:53:f3:b4: 0d:7b:09:35:24:57:3e:45:4d:a3:9b:4a:7a:98:3a: 4d:ac:60:6c:27:97:de:d8:bd:40:43:45:18:cb:a6: e2:ac:56:7a:58:88:9a:f4:ff:d9:a4:14:9d:6e:26: c1:87:3e:46:bb:f9:1f:56:25:da:f9:51:80:2a:2d: 89:f8:c6:bf:e8:a5:d3:b7:de:31:8f:61:81:84:a1: 74:74:16:a1:0e:68:26:bf:7a:d1:93:1a:7a:6d:a7: 7e:70:e2:b1:17:47:4a:89:be:a0:67:e6:21:df:30: 36:5d:ea:5c:11:d2:06:ca:ba:ac:46:55:b3:91:2d: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:C7:8C:DA:65:BD:4F:F4:19:D3:C2:53:36:BF:B8:0F:7D:C2:1A X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ec:16:d3:96:05:27:80:9e:14:b6:6b:9d:cc:47:d8:7d:cb: 6e:f7:7f:ec:12:10:37:91:ab:db:b9:c7:99:27:40:4f:e5:b3: 83:cc:15:ae:5f:5e:34:88:52:de:5e:7d:4a:f8:a7:e0:12:6d: 29:38:e1:0a:ce:3e:0b:21:32:01:1f:2e:7d:ba:59:51:df:02: 61:8f:09:f8:48:1d:2b:94:c9:5c:74:ab:e6:10:e3:7f:c6:c9: b0:10:79:fa:7f:75:96:2a:5e:be:1a:d2:56:67:05:56:e8:5a: 47:b7:12:2d:d7:db:b9:55:dc:e4:4d:82:74:03:8a:55:04:e8: fe:00:f9:d4:61:ae:26:e8:6b:69:59:a0:67:7a:ff:d4:fb:47: d5:1b:10:3c:f8:94:c4:93:42:f9:af:ed:82:ba:42:fe:64:1a: 90:c1:8c:1d:6a:36:d5:80:e4:11:f6:5a:e1:a3:b4:b7:77:1c: 47:d3:d3:29:ab:32:ce:3e:cd:26:56:02:a4:6e:3d:71:18:1d: 3b:3d:06:ab:d2:75:0c:bf:02:09:26:ea:67:26:0c:98:37:aa: db:cc:2b:67:80:e8:27:82:8d:08:cf:a6:f7:f7:72:af:9a:c6: 46:59:9b:ff:4e:18:60:74:b0:77:40:82:f0:6f:74:f5:d7:ff: 82:8e:7a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwODIyMjEwNzQ1WhcNMjUwODI5MjEwNzQ1WjAYMRYwFAYD VQQDEw02OGE4ZGMyMS00MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wrEdNZWkfz/EVwYtdB+T/Sf7aDwf3DE1+uvyjd8yRbt1QD0mmkTAIAtTDDz gLsWstxdhpPJs/KErxzQtdXHK7MEg9dWEOrBiI3oqGu2y+tWUtoYUOySLmOi9Ajo f2ZisO3HsbSjm2JC8zIYI4G4VQaKDTb/i9wQHVpqDrPnjr5lkY5T87QNewk1JFc+ RU2jm0p6mDpNrGBsJ5fe2L1AQ0UYy6birFZ6WIia9P/ZpBSdbibBhz5Gu/kfViXa +VGAKi2J+Ma/6KXTt94xj2GBhKF0dBahDmgmv3rRkxp6bad+cOKxF0dKib6gZ+Yh 3zA2XepcEdIGyrqsRlWzkS1zuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp8x4za Zb1P9BnTwlM2v7gPfcIaMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH7BbTlgUngJ4UtmudzEfYfctu93/sEhA3kavbuceZJ0BP5bODzBWu X140iFLeXn1K+KfgEm0pOOEKzj4LITIBHy59ullR3wJhjwn4SB0rlMlcdKvmEON/ xsmwEHn6f3WWKl6+GtJWZwVW6FpHtxIt19u5VdzkTYJ0A4pVBOj+APnUYa4m6Gtp WaBnev/U+0fVGxA8+JTEk0L5r+2CukL+ZBqQwYwdajbVgOQR9lrho7S3dxxH09Mp qzLOPs0mVgKkbj1xGB07PQar0nUMvwIJJupnJgyYN6rbzCtngOgngo0Iz6b393Kv msZGWZv/ThhgdLB3QILwb3T11/+Cjnpr -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:55 2025 by rpki-client