$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: jfpNXvcwuiUWm9fb/C5dxibbAyu7NkEJ05juZQMCT3M= Subject key identifier: E7:94:75:C5:11:8B:1C:16:39:B7:9D:B8:E3:1D:BA:2F:95:BF:84:92 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 0498 Signing time: Sat 23 Aug 2025 00:12:33 +0000 Manifest this update: Sat 23 Aug 2025 00:12:32 +0000 Manifest next update: Sat 30 Aug 2025 00:12:32 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: roRuL9dCJRevuiK23ylaDjMxvKBkk+pvqj8Qvpl4YV4=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Aug 23 00:12:32 2025 GMT Not After : Aug 30 00:12:32 2025 GMT Subject: CN=68a90771-92f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:53:a0:42:f2:fb:44:b6:f3:7a:4a:85:1c: 26:e3:d4:af:07:7b:88:5d:32:d6:b6:ac:38:f8:ca: ae:1a:ed:f0:a7:64:bb:3e:3b:98:ad:cb:45:a6:d3: e9:e3:08:8c:3a:1a:7f:f3:66:f8:0b:58:3b:2e:62: ec:19:19:67:d5:8e:dc:9e:bb:d8:59:59:83:e0:47: 4d:eb:79:98:d7:28:67:fc:3a:05:6e:c0:cd:c4:f7: f5:3b:61:af:1c:b2:fb:d5:68:63:2f:13:be:08:98: 5a:8c:c2:7a:c9:75:5e:52:5f:de:7b:5d:78:1a:bf: 9b:bb:21:87:91:5f:77:62:7e:5b:ad:4c:ab:1b:4e: f6:ce:9a:56:31:ce:ab:85:bd:19:47:c0:22:80:2a: 22:b0:ed:5a:7e:0a:65:f6:f7:98:f9:93:98:67:2d: 0f:d2:b6:ab:04:23:80:0e:e6:e8:c4:26:ab:28:45: d3:f2:d6:f7:df:36:7d:ae:a4:06:89:03:29:69:c8: ab:5e:51:93:40:b3:89:d0:c2:ef:a0:2d:ec:63:54: 36:92:c1:f8:c3:cb:a4:af:5d:33:04:5a:73:a4:47: 52:56:cd:aa:29:9b:ba:ec:9c:1a:3f:ad:0e:fc:cc: 20:be:0f:0b:9b:15:c5:b4:29:21:73:9f:3a:50:6b: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:75:C5:11:8B:1C:16:39:B7:9D:B8:E3:1D:BA:2F:95:BF:84:92 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:07:9e:0b:12:81:d5:07:56:c0:b7:22:3b:06:2c:e4:06:69: 5c:03:ae:a3:1f:ff:a5:96:ef:1a:80:d8:8e:e4:73:90:a6:f5: f6:e2:d9:95:9b:78:d0:a2:83:49:0b:5f:29:00:16:df:dd:df: b7:ac:ce:7e:0b:31:a8:3e:1a:30:cf:f5:35:1a:b7:ef:df:69: 53:27:86:94:4b:a7:08:a9:1b:e2:03:e7:39:ee:c1:e4:f2:7d: b9:4b:3a:42:5e:69:e1:6f:c1:0f:04:6a:c1:ef:3b:0b:b1:80: ee:17:d2:12:f3:35:f2:1a:1f:fb:1c:34:64:24:39:af:cb:9d: 32:fc:c2:4a:8f:d2:02:4a:36:60:d7:4e:97:90:6d:bd:0e:44: 22:91:7b:23:ee:e2:9d:5e:7a:d5:58:75:63:0d:7e:ed:80:e3: 6b:8c:c5:7f:53:27:9e:27:73:ef:10:fd:e7:f5:b4:8e:e7:db: cb:7d:a9:4e:2d:19:06:20:ac:10:0f:78:b6:4c:0c:24:8b:fb: 6c:3e:11:3a:29:3c:99:4f:90:e2:1c:c9:11:85:34:1f:62:ed: 58:83:f3:2f:5b:64:f9:c2:1e:bd:c4:6c:02:09:6f:e1:2a:b6: a4:c7:4d:70:fe:1f:98:01:24:7a:23:7b:8f:a4:17:36:61:99: 52:b3:11:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwODIzMDAxMjMyWhcNMjUwODMwMDAxMjMyWjAYMRYwFAYD VQQDEw02OGE5MDc3MS05MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EBToELy+0S283pKhRwm49SvB3uIXTLWtqw4+MquGu3wp2S7PjuYrctFptPp 4wiMOhp/82b4C1g7LmLsGRln1Y7cnrvYWVmD4EdN63mY1yhn/DoFbsDNxPf1O2Gv HLL71WhjLxO+CJhajMJ6yXVeUl/ee114Gr+buyGHkV93Yn5brUyrG072zppWMc6r hb0ZR8AigCoisO1afgpl9veY+ZOYZy0P0rarBCOADuboxCarKEXT8tb33zZ9rqQG iQMpacirXlGTQLOJ0MLvoC3sY1Q2ksH4w8ukr10zBFpzpEdSVs2qKZu67JwaP60O /Mwgvg8LmxXFtCkhc586UGs9zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeUdcUR ixwWObeduOMdui+Vv4SSMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSB54LEoHVB1bAtyI7BizkBmlcA66jH/+llu8agNiO5HOQpvX24tmV m3jQooNJC18pABbf3d+3rM5+CzGoPhowz/U1Grfv32lTJ4aUS6cIqRviA+c57sHk 8n25SzpCXmnhb8EPBGrB7zsLsYDuF9IS8zXyGh/7HDRkJDmvy50y/MJKj9ICSjZg 106XkG29DkQikXsj7uKdXnrVWHVjDX7tgONrjMV/UyeeJ3PvEP3n9bSO59vLfalO LRkGIKwQD3i2TAwki/tsPhE6KTyZT5DiHMkRhTQfYu1Yg/MvW2T5wh69xGwCCW/h Krakx01w/h+YASR6I3uPpBc2YZlSsxHG -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:37 2025 by rpki-client