$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: WKJ/wS1GRWDbEOAFQaxCErcFE4Ri9qLCtMWuAL+LtkQ= Subject key identifier: B8:BD:1C:AE:C1:47:FF:D1:61:4E:41:BC:97:CC:73:CE:2E:45:ED:80 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:15:14 +0000 Manifest this update: Sat 23 Aug 2025 02:15:13 +0000 Manifest next update: Sat 30 Aug 2025 02:15:13 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: ZVbaZP38uO72O69w09zRXNbm5IV2Yy9GfmbCYxEMkpc=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Aug 23 02:15:13 2025 GMT Not After : Aug 30 02:15:13 2025 GMT Subject: CN=68a92431-0250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:67:73:01:51:33:f6:39:16:6d:51:ed:ee: 48:61:40:40:48:73:d3:8e:43:5c:22:82:c7:b4:cc: 65:50:ad:c7:3e:2f:ad:e4:3e:70:41:d5:53:2b:8d: e4:b6:e9:58:b7:83:c7:3c:10:ae:11:33:69:8c:cc: 9b:b4:6f:52:77:a7:cd:be:e3:83:3f:e7:46:ab:e5: 3d:86:9b:6f:fd:90:9b:3a:e2:2e:29:fb:d2:b5:1c: b6:76:89:88:c2:da:a6:bc:d7:14:36:6e:c0:fd:50: 7b:38:34:c7:8b:da:03:b3:4c:26:eb:5a:c2:99:46: b2:08:78:b8:85:6a:4f:77:db:96:cd:21:9d:8b:5a: b5:31:4d:b0:f8:a3:aa:29:ac:c8:0b:86:69:6c:53: 7e:ce:e2:60:fd:f4:92:31:cd:a5:9b:a2:f3:3b:3b: 5b:8d:13:36:ac:cd:d3:de:dd:18:aa:e0:07:ef:f9: 3c:27:a0:94:e1:1c:41:dc:be:85:6e:0c:f8:06:cc: c7:49:95:96:4e:87:4c:38:b4:01:dc:d3:2a:e3:8d: ad:ca:4c:9f:05:e8:a5:74:90:94:80:3f:87:ce:4b: 2d:7c:79:9d:a3:aa:8a:90:b2:38:db:87:9c:d8:2d: b7:d2:ca:e4:61:2b:c1:d5:47:16:9a:fc:79:fd:20: 37:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:1C:AE:C1:47:FF:D1:61:4E:41:BC:97:CC:73:CE:2E:45:ED:80 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2e:f2:b8:91:c5:4c:98:34:9e:60:92:95:5c:8e:8e:24:f7: aa:5c:f8:3b:53:de:18:ab:5d:54:cd:25:c8:e6:2d:47:84:d0: 21:87:31:2c:7f:db:08:05:e9:cf:38:d5:16:90:e1:af:a3:be: 22:e9:8a:56:ce:7e:b1:09:3a:d4:bf:93:4b:9d:af:be:43:04: 1d:f9:11:68:6f:01:d1:01:13:50:85:1b:b7:a1:65:a5:de:c6: fb:23:63:b9:0f:09:bb:f7:9c:78:1b:0d:7a:be:5e:bb:73:a6: c6:ae:0f:20:97:dc:89:5b:ce:28:c2:13:c3:e8:49:d5:4b:13: 32:93:d8:3a:3f:1c:01:1d:03:f0:90:6c:1b:80:b2:3e:fc:9e: 7f:30:0b:ff:e0:20:cc:08:ee:70:c8:4e:8f:01:46:69:c6:06: 48:80:df:1c:a7:ce:02:5f:b7:2c:d9:4f:53:91:0f:73:5b:4b: 5a:22:e8:8a:d2:24:bb:d3:2a:e5:f7:2d:de:f8:9a:f0:41:a1: 0c:ef:e8:48:3d:9e:0f:89:7e:08:22:0c:b1:cb:32:44:fa:db: 36:fe:80:08:df:f1:75:c6:9f:04:5e:d0:fe:da:b0:f6:d6:f8: 10:3c:d8:dc:87:58:0f:5c:7e:eb:39:c8:52:f6:c8:23:b3:09: 79:30:ce:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUwODIzMDIxNTEzWhcNMjUwODMwMDIxNTEzWjAYMRYwFAYD VQQDEw02OGE5MjQzMS0wMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYpncwFRM/Y5Fm1R7e5IYUBASHPTjkNcIoLHtMxlUK3HPi+t5D5wQdVTK43k tulYt4PHPBCuETNpjMybtG9Sd6fNvuODP+dGq+U9hptv/ZCbOuIuKfvStRy2domI wtqmvNcUNm7A/VB7ODTHi9oDs0wm61rCmUayCHi4hWpPd9uWzSGdi1q1MU2w+KOq KazIC4ZpbFN+zuJg/fSSMc2lm6LzOztbjRM2rM3T3t0YquAH7/k8J6CU4RxB3L6F bgz4BszHSZWWTodMOLQB3NMq442tykyfBeildJCUgD+HzkstfHmdo6qKkLI424ec 2C230srkYSvB1UcWmvx5/SA3HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi9HK7B R//RYU5BvJfMc84uRe2AMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZLvK4kcVMmDSeYJKVXI6OJPeqXPg7U94Yq11UzSXI5i1HhNAhhzEs f9sIBenPONUWkOGvo74i6YpWzn6xCTrUv5NLna++QwQd+RFobwHRARNQhRu3oWWl 3sb7I2O5Dwm795x4Gw16vl67c6bGrg8gl9yJW84owhPD6EnVSxMyk9g6PxwBHQPw kGwbgLI+/J5/MAv/4CDMCO5wyE6PAUZpxgZIgN8cp84CX7cs2U9TkQ9zW0taIuiK 0iS70yrl9y3e+JrwQaEM7+hIPZ4PiX4IIgyxyzJE+ts2/oAI3/F1xp8EXtD+2rD2 1vgQPNjch1gPXH7rOchS9sgjswl5MM6C -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:26 2025 by rpki-client