$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: 3NgwrwgepmrzHsy7gpUPPtttQsqS3+h3uHJnzByAQWM= Subject key identifier: 13:07:BC:9E:C6:69:E1:17:C9:A3:F0:82:69:8A:7A:C0:B9:BA:B1:79 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 047E Signing time: Thu 03 Jul 2025 00:24:27 +0000 Manifest this update: Thu 03 Jul 2025 00:24:26 +0000 Manifest next update: Thu 10 Jul 2025 00:24:26 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: udxaT8rnpO1IyUhe/ZxsQBKwQKg81QwsaOLpKzTrp0k=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Jul 3 00:24:26 2025 GMT Not After : Jul 10 00:24:26 2025 GMT Subject: CN=6865cdbb-06a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:b4:b5:14:fa:a0:14:5b:dd:41:34:b5:f9: be:a0:4f:13:fd:11:5d:f7:3b:7c:9e:52:77:87:8a: 6c:f3:db:e5:86:f4:34:b3:9b:d2:f2:aa:bb:23:6d: 3a:9c:78:56:fb:12:db:ba:e9:79:17:cf:ad:4f:df: 73:4f:cb:03:73:1e:ac:0e:b2:1f:ea:5b:2c:a4:3a: e7:59:5a:50:7f:66:24:01:bb:9d:d1:05:46:94:30: 9e:66:3e:16:9c:63:85:cd:d3:0a:9d:af:37:07:97: 16:2b:dc:8b:94:3f:00:88:dd:a5:89:d7:a9:1a:99: 1d:55:43:ef:0a:53:1d:f6:5b:f2:99:80:f1:a5:a2: 97:f0:90:d4:a1:c0:90:ba:3a:23:51:08:75:1f:7a: f1:1a:a7:c4:e7:c8:c5:1b:d2:70:cf:57:0e:ae:70: cd:92:5b:6d:c2:70:70:07:3a:4a:1e:67:bb:90:d7: f3:10:9e:ec:76:e1:15:31:c9:9e:7e:a3:d1:bf:e2: a6:a4:fd:b5:3e:e5:79:01:14:50:b9:61:0a:4f:c2: 1d:c3:03:3d:45:eb:65:37:b9:32:6a:fc:76:93:aa: 89:fb:d9:bf:fb:04:48:28:60:b7:d1:0c:48:0f:fa: b2:14:4c:7e:e3:1b:de:7d:51:0e:d0:31:6b:16:ac: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:BC:9E:C6:69:E1:17:C9:A3:F0:82:69:8A:7A:C0:B9:BA:B1:79 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:76:94:0d:34:6f:99:ee:ca:21:b2:11:d4:7f:53:67:89: 88:58:09:9b:fc:51:5f:1d:d8:82:38:d7:4d:85:cc:b0:27:7a: e3:0c:46:e2:57:ce:3d:df:a9:2c:8a:8c:d0:b5:e3:32:e2:46: 25:f5:a1:eb:5d:41:37:d6:27:31:7d:e4:2e:08:31:2d:2a:6a: b7:ef:19:06:47:52:32:71:04:06:a4:89:37:5c:b4:f7:b3:75: dc:d6:7d:3a:03:41:b8:fc:e7:5d:41:d8:f4:b9:75:16:57:e3: ae:74:f4:69:10:3e:3b:81:89:a2:65:c7:6e:ea:cf:f7:7b:14: 3e:ba:21:93:59:a1:e6:39:06:1d:4a:e3:df:81:65:28:9b:44: 03:3e:73:61:f5:c6:81:54:7f:5d:54:68:31:55:8c:bb:fe:af: 4a:93:c2:eb:54:48:da:04:1b:41:bd:24:da:ef:1a:f8:49:9b: 8d:06:b4:36:de:91:14:bc:e4:08:f0:da:2b:93:0b:22:89:ae: fa:cc:15:67:75:eb:17:02:21:43:15:5f:71:a7:5f:8d:2f:85: fe:f5:54:e3:8a:5d:28:cf:9b:54:e9:66:dd:e0:9c:70:ff:ac: e9:f4:9f:ac:aa:c5:1c:64:53:73:88:44:82:f7:e7:28:02:e7: 08:ad:be:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwNzAzMDAyNDI2WhcNMjUwNzEwMDAyNDI2WjAYMRYwFAYD VQQDEw02ODY1Y2RiYi0wNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8a0tRT6oBRb3UE0tfm+oE8T/RFd9zt8nlJ3h4ps89vlhvQ0s5vS8qq7I206 nHhW+xLbuul5F8+tT99zT8sDcx6sDrIf6lsspDrnWVpQf2YkAbud0QVGlDCeZj4W nGOFzdMKna83B5cWK9yLlD8AiN2lidepGpkdVUPvClMd9lvymYDxpaKX8JDUocCQ ujojUQh1H3rxGqfE58jFG9Jwz1cOrnDNklttwnBwBzpKHme7kNfzEJ7sduEVMcme fqPRv+KmpP21PuV5ARRQuWEKT8IdwwM9RetlN7kyavx2k6qJ+9m/+wRIKGC30QxI D/qyFEx+4xvefVEO0DFrFqxP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMHvJ7G aeEXyaPwgmmKesC5urF5MB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh1naUDTRvme7KIbIR1H9TZ4mIWAmb/FFfHdiCONdNhcywJ3rjDEbi V84936ksiozQteMy4kYl9aHrXUE31icxfeQuCDEtKmq37xkGR1IycQQGpIk3XLT3 s3Xc1n06A0G4/OddQdj0uXUWV+OudPRpED47gYmiZcdu6s/3exQ+uiGTWaHmOQYd SuPfgWUom0QDPnNh9caBVH9dVGgxVYy7/q9Kk8LrVEjaBBtBvSTa7xr4SZuNBrQ2 3pEUvOQI8Norkwsiia76zBVndesXAiFDFV9xp1+NL4X+9VTjil0oz5tU6Wbd4Jxw /6zp9J+sqsUcZFNziESC9+coAucIrb5t -----END CERTIFICATE-----Generated at Thu Jul 3 17:34:52 2025 by rpki-client