$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: LX8IUbYyfHsvjo0ElV5FMZeTjK+mMF4pDCq5TCiU9H8= Subject key identifier: B2:8E:06:43:91:D6:DD:91:BC:8E:64:0D:E2:E7:A3:24:59:5F:91:99 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01F1 Signing time: Sat 23 Aug 2025 02:38:53 +0000 Manifest this update: Sat 23 Aug 2025 02:38:53 +0000 Manifest next update: Sat 30 Aug 2025 02:38:53 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: yyhp6BFcBwH6J7arLvD6+czEzwN9DlFflBnnaGvTaPY=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Aug 23 02:38:53 2025 GMT Not After : Aug 30 02:38:53 2025 GMT Subject: CN=68a929bd-6fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:4c:f9:a8:b9:78:a5:0f:50:29:9d:57:a1: 0b:e2:6a:11:0f:d0:ba:bf:70:e4:cf:ef:52:bc:e6: 99:54:2b:da:8b:5b:95:c7:a0:9a:4c:5c:a9:71:4e: b6:b3:0c:83:c8:34:87:24:fc:d8:f3:45:a8:82:8a: 86:a2:c9:3d:75:2b:c2:8f:56:f5:d1:97:76:8b:95: 5c:c8:4f:33:f7:ca:bc:4c:1d:d3:c3:ec:05:94:97: 91:94:cc:f7:f5:44:e6:47:ff:7a:8c:d0:c7:c8:f1: 17:c6:78:35:cb:78:b3:f4:6d:18:db:46:0a:2e:50: bd:74:da:d2:c7:74:36:5f:ea:c5:f3:01:9b:c2:6c: 7c:73:4a:6e:18:95:34:d9:10:52:aa:5b:d1:1d:65: 46:9e:56:a5:d8:db:ec:d3:86:78:24:3f:c8:2f:56: ca:11:ea:ec:18:dc:39:93:e6:32:a9:f4:25:70:9d: 72:63:5e:b2:7f:8c:89:78:e1:d3:d6:9b:cd:ec:ff: 55:93:c4:0b:6d:e2:f9:0a:fa:c1:72:d8:6c:4a:48: c0:7b:57:bc:c4:a3:d9:b6:88:af:f0:c5:43:e4:64: 18:af:ba:01:92:93:88:00:8a:53:50:11:90:dd:b7: 31:da:57:11:a0:97:d1:e3:be:cf:57:f7:ed:1d:da: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:06:43:91:D6:DD:91:BC:8E:64:0D:E2:E7:A3:24:59:5F:91:99 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:e8:4e:33:61:d6:e6:80:77:04:b9:f6:58:16:b1:3e:b5: 72:da:f5:25:b7:a0:6f:7d:9c:d7:76:1b:eb:2d:a3:ee:6d:d2: 88:26:d5:71:22:6a:2b:42:6e:a9:47:df:36:94:6b:b8:63:9b: 2d:05:9a:2c:3c:5c:60:15:30:2c:b0:a9:e8:aa:e2:13:ba:eb: d1:58:29:b2:d4:06:ce:ef:fd:1e:6e:9f:58:25:b1:28:50:dd: 24:60:2b:a9:b5:b1:24:68:5e:4b:2f:97:15:d6:3a:fb:0d:71: 02:4d:88:2e:54:15:50:d6:3b:1c:02:be:72:88:1e:1c:ae:b6: 01:0a:96:21:2f:d0:ad:8b:06:48:08:93:ce:d4:95:19:00:4d: b8:38:30:2c:a7:d3:dd:92:12:3f:84:f5:5f:ce:61:30:84:a4: 26:f0:59:67:27:3c:6a:58:a3:5d:ec:d4:6b:45:26:88:2f:a7: 8d:3a:db:e0:01:19:f5:3b:ee:64:0b:3e:d1:f1:2e:0c:83:2e: 31:4e:ec:dc:26:50:87:1c:3a:de:53:75:b7:0b:2b:24:a4:f6: 60:48:39:cf:ca:2c:47:56:fa:0e:63:65:ef:c6:27:74:fd:b4: 9e:69:21:a9:fe:64:09:90:e6:b5:e7:9d:4a:fc:77:56:4f:9c: 68:91:52:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwODIzMDIzODUzWhcNMjUwODMwMDIzODUzWjAYMRYwFAYD VQQDEw02OGE5MjliZC02ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DJM+ai5eKUPUCmdV6EL4moRD9C6v3Dkz+9SvOaZVCvai1uVx6CaTFypcU62 swyDyDSHJPzY80WogoqGosk9dSvCj1b10Zd2i5VcyE8z98q8TB3Tw+wFlJeRlMz3 9UTmR/96jNDHyPEXxng1y3iz9G0Y20YKLlC9dNrSx3Q2X+rF8wGbwmx8c0puGJU0 2RBSqlvRHWVGnlal2Nvs04Z4JD/IL1bKEersGNw5k+YyqfQlcJ1yY16yf4yJeOHT 1pvN7P9Vk8QLbeL5CvrBcthsSkjAe1e8xKPZtoiv8MVD5GQYr7oBkpOIAIpTUBGQ 3bcx2lcRoJfR477PV/ftHdouRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKOBkOR 1t2RvI5kDeLnoyRZX5GZMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAEuhOM2HW5oB3BLn2WBaxPrVy2vUlt6BvfZzXdhvrLaPubdKIJtVx ImorQm6pR982lGu4Y5stBZosPFxgFTAssKnoquITuuvRWCmy1AbO7/0ebp9YJbEo UN0kYCuptbEkaF5LL5cV1jr7DXECTYguVBVQ1jscAr5yiB4crrYBCpYhL9CtiwZI CJPO1JUZAE24ODAsp9PdkhI/hPVfzmEwhKQm8FlnJzxqWKNd7NRrRSaIL6eNOtvg ARn1O+5kCz7R8S4Mgy4xTuzcJlCHHDreU3W3CyskpPZgSDnPyixHVvoOY2Xvxid0 /bSeaSGp/mQJkOa1551K/HdWT5xokVJk -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:15 2025 by rpki-client