$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: HnG6p77ZB5K6DGPEviJiT3PPWoOyQcKbhyAyrPcOsS8= Subject key identifier: BA:AF:AC:39:15:76:8C:5C:DC:48:4A:05:6F:48:46:58:89:0B:DD:D5 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 08CE Signing time: Mon 30 Jun 2025 21:16:37 +0000 Manifest this update: Mon 30 Jun 2025 21:16:36 +0000 Manifest next update: Mon 07 Jul 2025 21:16:36 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: 1zkdDPvevskMpcw4yXPDanV5ZDk3cLHhPEDZGF/B38k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Jun 30 21:16:36 2025 GMT Not After : Jul 7 21:16:36 2025 GMT Subject: CN=6862feb4-24e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:88:f0:df:eb:0d:33:76:bf:c9:28:9e:70: da:a4:71:64:59:21:97:ee:73:47:58:94:63:21:8e: 66:b0:3f:90:6a:4b:1c:08:66:8b:f6:0a:87:65:fe: 1c:dc:6b:74:98:0f:9f:8c:d9:58:83:1a:f6:5a:1f: 00:fb:53:2f:bc:24:8d:d6:fe:5f:28:7a:29:03:0c: d3:92:6e:c3:ea:0e:a4:ad:9d:c7:63:27:cf:f5:46: d4:50:f0:6c:71:dd:f5:58:d3:8e:3f:6a:fb:b4:0e: 76:34:69:1e:7d:48:da:1e:d3:13:b2:a5:73:16:95: af:71:04:b8:a6:1e:01:c3:68:27:b4:45:e7:80:4c: d1:f3:e9:b5:d4:16:15:ba:54:42:2d:0a:f5:f8:ba: d0:ea:92:53:3d:07:b3:6e:87:4c:33:3f:ab:7c:2d: 3c:fa:97:55:89:5e:fc:d0:63:01:05:0b:ae:92:d1: 24:52:30:58:ba:26:4d:37:b2:71:f6:4e:12:52:b6: 77:a2:22:c9:44:6e:33:fb:ee:65:c8:f8:5d:4e:1a: f0:d9:c3:df:59:39:74:14:ec:f7:c2:a5:52:41:ea: 47:7a:c6:8f:5f:11:e0:c7:6b:02:c0:2e:c7:22:a7: 44:97:7a:3e:f3:73:50:ad:2c:d7:07:3c:09:66:93: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:AC:39:15:76:8C:5C:DC:48:4A:05:6F:48:46:58:89:0B:DD:D5 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9c:8f:84:8d:8a:07:0a:1b:1b:51:08:3d:65:55:91:6c:24: 9d:0b:7f:b9:00:23:8d:d3:52:bb:2c:4b:3a:d1:0c:db:d2:1c: 6a:c7:19:a6:6f:83:71:63:c9:d3:93:88:51:37:93:d3:ba:02: 8f:93:3e:11:2e:ff:c7:cf:14:fd:67:22:aa:e9:ff:37:16:68: 1b:7b:0f:cc:43:b9:31:4f:55:80:da:2b:55:75:23:90:37:17: 84:8b:53:9b:0f:3f:1f:e5:67:eb:a7:61:4f:80:de:35:e0:d3: 62:3a:4f:e0:d0:ca:c4:8c:38:2c:2b:1a:9c:05:8c:75:44:5b: 96:de:8b:77:92:82:0e:6e:7b:8f:bb:6f:d9:ec:6e:03:1d:ce: d6:2f:f4:7f:bd:ff:2a:e0:02:89:0b:ab:7b:91:e0:ef:b3:a5: 17:d0:e8:f0:21:22:d4:66:ad:a1:7a:7a:82:8f:57:aa:78:61: d3:68:3d:a4:ea:b8:be:16:54:49:c1:c0:b7:63:f8:a6:6d:6b: fc:e5:7f:90:8f:0d:7d:d2:4a:1d:b1:1f:a0:16:1a:7e:7b:c4: b2:02:70:14:19:29:24:7d:f5:81:15:4b:d3:a0:e5:54:cd:ed: ce:71:51:a3:b5:4f:69:2f:71:00:da:f8:5f:4d:77:82:44:0e: 2f:ca:a2:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwNjMwMjExNjM2WhcNMjUwNzA3MjExNjM2WjAYMRYwFAYD VQQDEw02ODYyZmViNC0yNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuieI8N/rDTN2v8konnDapHFkWSGX7nNHWJRjIY5msD+QakscCGaL9gqHZf4c 3Gt0mA+fjNlYgxr2Wh8A+1MvvCSN1v5fKHopAwzTkm7D6g6krZ3HYyfP9UbUUPBs cd31WNOOP2r7tA52NGkefUjaHtMTsqVzFpWvcQS4ph4Bw2gntEXngEzR8+m11BYV ulRCLQr1+LrQ6pJTPQezbodMMz+rfC08+pdViV780GMBBQuuktEkUjBYuiZNN7Jx 9k4SUrZ3oiLJRG4z++5lyPhdThrw2cPfWTl0FOz3wqVSQepHesaPXxHgx2sCwC7H IqdEl3o+83NQrSzXBzwJZpOFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqvrDkV doxc3EhKBW9IRliJC93VMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQnI+EjYoHChsbUQg9ZVWRbCSdC3+5ACON01K7LEs60Qzb0hxqxxmm b4NxY8nTk4hRN5PTugKPkz4RLv/HzxT9ZyKq6f83Fmgbew/MQ7kxT1WA2itVdSOQ NxeEi1ObDz8f5Wfrp2FPgN414NNiOk/g0MrEjDgsKxqcBYx1RFuW3ot3koIObnuP u2/Z7G4DHc7WL/R/vf8q4AKJC6t7keDvs6UX0OjwISLUZq2henqCj1eqeGHTaD2k 6ri+FlRJwcC3Y/imbWv85X+Qjw190kodsR+gFhp+e8SyAnAUGSkkffWBFUvToOVU ze3OcVGjtU9pL3EA2vhfTXeCRA4vyqLh -----END CERTIFICATE-----Generated at Wed Jul 2 20:20:18 2025 by rpki-client