$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: MfAEzlQCaDUrsnA50jPFmHmtE3WZC18Q46Q1wV+7/hs= Subject key identifier: BB:79:51:5E:2A:EF:58:CB:79:36:6E:CB:AD:4C:62:6F:E4:4B:6F:B8 Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:45:55 +0000 Manifest this update: Sat 23 Aug 2025 05:45:55 +0000 Manifest next update: Sat 30 Aug 2025 05:45:55 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: RJkiqVBWcvLdMl+jQbVgRWDitohGyeGtR5862nhfeEk=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: Aug 23 05:45:55 2025 GMT Not After : Aug 30 05:45:55 2025 GMT Subject: CN=68a95593-798c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:92:be:53:b2:ea:5b:f6:ba:0f:6b:4c:67: 3b:59:61:4d:1d:a5:ea:29:17:10:18:84:3a:97:1d: 7b:47:cd:f8:e0:f9:b2:82:9d:17:09:38:cd:ca:50: 13:34:91:c8:fc:99:db:f3:a2:24:51:4d:fa:77:80: 13:d9:fc:9c:a7:5d:90:4a:2f:b4:e3:0c:0c:34:da: 5e:2a:a2:04:29:46:32:e5:a2:93:9b:a2:eb:ad:e4: f4:1c:2a:b8:a8:f4:e7:7c:f2:29:44:5f:71:f4:51: 9f:2a:c9:f7:a9:56:56:c9:e2:a0:9f:b1:74:58:4d: 3b:ec:ca:4a:cd:b0:cf:cd:89:a9:e1:d1:a9:9f:a0: e6:1c:ef:aa:8c:e5:28:6f:43:8c:84:83:85:47:df: fd:29:ca:5e:9a:53:84:be:1e:8b:12:52:0d:f3:08: 68:9b:fb:e5:19:74:23:76:e1:92:d7:e4:5e:8e:6c: 32:ed:5c:04:88:e1:5d:c3:d8:48:f6:ee:42:93:f5: c9:43:be:50:1e:46:0c:8b:2d:4c:a1:54:74:d9:2f: e2:66:a9:54:d2:7f:c5:d8:3d:15:bf:e4:4b:f8:53: 2d:ad:bb:f4:58:9b:9e:58:b1:20:13:44:b7:2d:f6: a3:49:dd:8b:9c:d1:ab:63:c8:30:3f:5e:60:31:d6: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:51:5E:2A:EF:58:CB:79:36:6E:CB:AD:4C:62:6F:E4:4B:6F:B8 X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ac:54:43:5e:18:9b:ea:5f:57:3b:1d:13:50:ca:c6:71:6c: ac:f3:9d:f5:35:9d:bb:e3:fc:c6:56:0f:2b:98:b3:73:a6:a1: 14:97:8d:33:91:19:82:17:59:8b:0f:f2:29:8b:31:4c:89:40: dd:4b:55:fe:54:0d:9e:dd:5e:d0:1d:d2:38:ce:7a:5d:f8:78: c0:bf:7f:cc:60:dd:ec:46:e0:0b:6e:d6:05:91:b9:e8:1f:b7: c3:c6:4c:df:77:ab:11:7c:95:7e:e8:03:6f:a8:2c:59:b1:7f: 55:42:40:d2:7d:dc:56:f0:85:f7:71:a8:fc:52:b7:3a:1b:13: 70:22:d8:ba:f7:c0:f0:86:d1:42:d6:4b:db:42:10:a2:fd:c9: 8f:c4:fd:79:af:db:e0:c7:ea:ff:ad:eb:e8:c8:ba:87:53:a5: 75:1f:e1:ec:fc:4b:6c:92:ee:1d:88:8b:91:7c:06:66:2d:9c: 5f:0b:df:ae:13:30:83:ae:e8:5f:23:45:8b:40:45:ad:5b:f1: c6:23:3e:26:f6:35:19:f1:18:ed:10:a8:4a:47:43:de:48:72: 0c:71:38:02:bc:a4:e4:c5:72:df:72:e1:a3:44:a6:56:3f:85: 78:22:6b:23:ae:57:81:76:ad:46:6b:4d:14:65:16:83:bb:78: 42:1d:e0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwODIzMDU0NTU1WhcNMjUwODMwMDU0NTU1WjAYMRYwFAYD VQQDEw02OGE5NTU5My03OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukWSvlOy6lv2ug9rTGc7WWFNHaXqKRcQGIQ6lx17R8344Pmygp0XCTjNylAT NJHI/Jnb86IkUU36d4AT2fycp12QSi+04wwMNNpeKqIEKUYy5aKTm6LrreT0HCq4 qPTnfPIpRF9x9FGfKsn3qVZWyeKgn7F0WE077MpKzbDPzYmp4dGpn6DmHO+qjOUo b0OMhIOFR9/9KcpemlOEvh6LElIN8whom/vlGXQjduGS1+Rejmwy7VwEiOFdw9hI 9u5Ck/XJQ75QHkYMiy1MoVR02S/iZqlU0n/F2D0Vv+RL+FMtrbv0WJueWLEgE0S3 LfajSd2LnNGrY8gwP15gMdZjaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt5UV4q 71jLeTZuy61MYm/kS2+4MB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBerFRDXhib6l9XOx0TUMrGcWys8531NZ274/zGVg8rmLNzpqEUl40z kRmCF1mLD/IpizFMiUDdS1X+VA2e3V7QHdI4znpd+HjAv3/MYN3sRuALbtYFkbno H7fDxkzfd6sRfJV+6ANvqCxZsX9VQkDSfdxW8IX3caj8Urc6GxNwIti698DwhtFC 1kvbQhCi/cmPxP15r9vgx+r/revoyLqHU6V1H+Hs/Etsku4diIuRfAZmLZxfC9+u EzCDruhfI0WLQEWtW/HGIz4m9jUZ8RjtEKhKR0PeSHIMcTgCvKTkxXLfcuGjRKZW P4V4ImsjrleBdq1Ga00UZRaDu3hCHeDG -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:10 2025 by rpki-client