$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: R+T5dFrjyN74i329ooNceBksMNaNfh8E5Hv4KOqPwxU= Subject key identifier: 22:AF:60:71:DE:69:F7:6D:EB:0D:34:93:9C:B7:19:9D:AA:C2:90:0B Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: BD Signing time: Thu 03 Jul 2025 06:06:04 +0000 Manifest this update: Thu 03 Jul 2025 06:06:03 +0000 Manifest next update: Thu 10 Jul 2025 06:06:03 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: mVpLsy0o6IXiuuVdLEVkrydWHthK5zKufD/PCL26ZiU=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: Jul 3 06:06:03 2025 GMT Not After : Jul 10 06:06:03 2025 GMT Subject: CN=68661dcc-416a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:70:eb:7f:fc:4f:f9:5d:4d:04:7d:8f:07: 68:ad:d2:52:bd:6d:e0:0b:f3:d2:56:8a:04:5b:b5: 00:ee:39:bb:2a:a1:52:1e:44:83:94:09:7a:7a:cd: f8:a6:de:c1:19:a0:54:39:3e:60:65:7f:48:65:c0: 3a:5a:d4:37:93:a5:b5:fc:9a:c6:9d:b6:6c:5b:14: e9:27:62:30:b9:dc:05:41:98:78:fb:0e:47:23:fd: 7d:41:16:ce:8a:11:79:16:2c:a7:2a:90:f5:46:1f: f1:21:5a:55:c6:3c:52:ea:17:89:74:12:22:2a:07: 74:7c:8a:b0:0e:fa:b0:bb:43:4f:2d:d3:54:94:07: ef:0e:e8:68:e4:1e:fd:c6:a6:98:db:f8:b0:b5:e6: 4d:c4:44:43:e3:6d:88:17:14:b8:7d:2e:48:f6:b4: a6:34:c7:5d:cc:16:42:7b:5f:f9:7e:8d:c3:d5:8c: b3:ea:3a:20:72:11:49:cd:c1:bf:eb:9f:1f:2c:32: 96:72:50:81:c3:61:cb:24:43:32:dd:b3:0e:aa:c8: f2:d6:45:52:5e:a5:3e:04:ce:ac:52:b8:67:7d:42: 8a:cc:45:94:0a:9d:9c:59:40:16:20:58:16:08:40: 1c:e9:1e:40:d7:c7:e8:5e:55:a8:5d:4e:56:f1:8b: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:60:71:DE:69:F7:6D:EB:0D:34:93:9C:B7:19:9D:AA:C2:90:0B X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a7:94:cb:94:45:d6:13:a3:cb:e8:e4:84:3e:25:8c:5f:e4: cd:4d:93:33:64:c5:d0:da:4f:84:fc:75:bf:ff:4b:70:ea:f0: 91:f6:ef:a0:5a:fd:e2:24:7b:62:58:07:0b:3d:5f:b3:cb:1e: 1e:17:d1:7d:bc:5c:ac:3a:ab:fd:4e:12:42:00:b1:37:e1:02: 6f:bd:85:05:20:9f:a6:8e:1a:1e:d7:c3:32:0d:7b:60:90:46: fd:30:87:66:85:53:39:a1:ab:a2:ad:f0:c9:ca:f4:bd:ab:68: 2a:d5:1b:d4:a8:f6:33:6d:85:dc:05:81:0b:d7:fd:73:a3:fc: 24:d0:83:9b:b6:1e:95:9f:04:35:e7:f4:18:2c:07:bb:08:14: ed:cd:e4:c3:d3:ce:7a:36:13:96:a7:d5:d3:67:17:5d:5f:eb: 4c:1c:55:61:a3:15:31:a6:d9:7d:d4:91:2d:c1:3c:e0:96:db: 8f:7d:e7:ae:33:91:98:6c:e7:ae:c5:b3:3c:cb:8e:58:a1:21: d5:26:2d:b3:f5:3c:86:ff:1d:2f:ce:1c:f3:6b:92:51:03:6c: 85:f8:3b:a8:54:9f:71:98:43:7c:7a:2f:c1:88:f2:10:bb:c9: 06:05:39:75:da:fb:0c:43:fb:bc:92:5b:0b:bd:cc:88:61:12: 5e:d9:fe:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwNzAzMDYwNjAzWhcNMjUwNzEwMDYwNjAzWjAYMRYwFAYD VQQDEw02ODY2MWRjYy00MTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZRw63/8T/ldTQR9jwdordJSvW3gC/PSVooEW7UA7jm7KqFSHkSDlAl6es34 pt7BGaBUOT5gZX9IZcA6WtQ3k6W1/JrGnbZsWxTpJ2IwudwFQZh4+w5HI/19QRbO ihF5FiynKpD1Rh/xIVpVxjxS6heJdBIiKgd0fIqwDvqwu0NPLdNUlAfvDuho5B79 xqaY2/iwteZNxERD422IFxS4fS5I9rSmNMddzBZCe1/5fo3D1Yyz6jogchFJzcG/ 658fLDKWclCBw2HLJEMy3bMOqsjy1kVSXqU+BM6sUrhnfUKKzEWUCp2cWUAWIFgW CEAc6R5A18foXlWoXU5W8YuPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKvYHHe afdt6w00k5y3GZ2qwpALMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2p5TLlEXWE6PL6OSEPiWMX+TNTZMzZMXQ2k+E/HW//0tw6vCR9u+g Wv3iJHtiWAcLPV+zyx4eF9F9vFysOqv9ThJCALE34QJvvYUFIJ+mjhoe18MyDXtg kEb9MIdmhVM5oauirfDJyvS9q2gq1RvUqPYzbYXcBYEL1/1zo/wk0IObth6VnwQ1 5/QYLAe7CBTtzeTD0856NhOWp9XTZxddX+tMHFVhoxUxptl91JEtwTzgltuPfeeu M5GYbOeuxbM8y45YoSHVJi2z9TyG/x0vzhzza5JRA2yF+DuoVJ9xmEN8ei/BiPIQ u8kGBTl12vsMQ/u8klsLvcyIYRJe2f5l -----END CERTIFICATE-----Generated at Thu Jul 3 20:35:18 2025 by rpki-client