$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: GLWUolN94r4Ta1V6Ifib6gCrZZuKqLM4Z/5LCjvcKCM= Subject key identifier: FD:4D:63:69:74:99:DA:A8:6E:1E:26:D5:D6:F2:8B:87:B0:85:CD:E8 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:38:49 +0000 Manifest this update: Sat 23 Aug 2025 06:38:48 +0000 Manifest next update: Sat 30 Aug 2025 06:38:48 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: oiT9KvA61sdtqdEbBoRYNyb91Ly3dYDqysf5/h6xfx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Aug 23 06:38:48 2025 GMT Not After : Aug 30 06:38:48 2025 GMT Subject: CN=68a961f8-97a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:df:72:e0:26:39:62:c6:f8:e3:5f:68:3f: be:15:c3:59:1a:ed:5c:44:89:fb:21:60:33:23:b8: bd:1b:78:e5:69:fc:28:28:f4:8f:c5:df:ec:13:9c: eb:53:27:bf:5b:8a:a2:ed:8c:15:6d:55:4d:3e:be: dd:b3:fc:a2:64:70:7a:e3:ef:f1:26:bd:70:0f:1c: 03:58:33:59:1e:07:97:3b:f4:45:e2:cb:d1:65:0f: e7:9a:da:8c:e7:48:5e:91:c3:fd:8c:7d:ab:b6:f4: 37:b6:61:12:a1:7c:43:86:1e:e5:af:11:a7:62:4f: 79:dc:d7:45:20:33:f0:61:c8:da:17:e0:57:1b:b2: 83:36:63:33:61:dc:5a:5f:b5:67:a4:c4:00:ab:81: 01:18:71:a5:14:87:6e:9d:ba:16:ae:60:d4:97:f2: c5:d5:c4:d1:00:a7:7f:c8:d2:08:73:db:20:14:d9: 15:1d:7a:f3:f0:7c:3c:d0:24:e6:e4:a8:0b:56:a4: 61:c8:bc:68:02:4f:1f:37:c2:38:0c:92:2f:95:08: bb:ff:82:b2:6e:0d:8f:7e:11:31:26:9f:27:6f:de: 16:58:4a:8e:04:5e:09:46:bb:fc:3e:f4:23:17:f9: 9c:9d:72:b1:7c:90:38:29:85:ba:d3:e6:8f:31:27: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:63:69:74:99:DA:A8:6E:1E:26:D5:D6:F2:8B:87:B0:85:CD:E8 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b6:8c:6b:1e:f8:6c:d5:c6:d1:4f:cc:0b:38:7a:dc:55:d0: e8:c1:5f:77:2f:60:d7:57:94:3b:ea:10:82:b0:e0:12:63:ee: 4f:ac:0d:08:d6:ff:2b:7a:7c:e2:40:29:ad:15:49:97:9f:7a: b9:6b:bd:16:7d:6f:20:8e:75:9b:b0:4a:8a:88:83:7e:c5:1a: ca:dc:57:23:50:7b:e5:9d:85:de:95:15:c5:0f:c1:c0:f3:0c: a7:02:6e:9a:79:9c:d5:11:52:fb:8a:5a:41:ac:c4:4c:9a:bf: d1:26:90:b9:7f:a5:e0:89:eb:66:ed:31:f4:69:97:7e:4d:71: d4:51:f2:c7:b0:80:93:6e:96:aa:4d:5f:65:8b:ac:41:1d:ea: 43:5f:cf:ad:45:1b:76:77:76:d9:0b:75:87:0d:ff:7f:70:52: 3c:9b:00:f5:ae:d2:4a:75:1c:f6:c4:5d:4c:85:c4:32:dd:29: 9a:ae:3e:3b:b2:09:93:f9:8f:f0:52:76:10:d7:00:4f:a0:9f: fd:c5:fc:60:15:00:08:08:44:a5:37:6c:6f:0c:df:c1:9b:0c: 5a:d0:6b:de:9d:d9:86:eb:d5:54:9d:09:fe:ce:58:06:f5:f9: b0:87:5c:82:3b:48:00:03:ad:89:69:14:78:5d:55:78:77:0b: 0e:67:25:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUwODIzMDYzODQ4WhcNMjUwODMwMDYzODQ4WjAYMRYwFAYD VQQDEw02OGE5NjFmOC05N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTnfcuAmOWLG+ONfaD++FcNZGu1cRIn7IWAzI7i9G3jlafwoKPSPxd/sE5zr Uye/W4qi7YwVbVVNPr7ds/yiZHB64+/xJr1wDxwDWDNZHgeXO/RF4svRZQ/nmtqM 50hekcP9jH2rtvQ3tmESoXxDhh7lrxGnYk953NdFIDPwYcjaF+BXG7KDNmMzYdxa X7VnpMQAq4EBGHGlFIdunboWrmDUl/LF1cTRAKd/yNIIc9sgFNkVHXrz8Hw80CTm 5KgLVqRhyLxoAk8fN8I4DJIvlQi7/4Kybg2PfhExJp8nb94WWEqOBF4JRrv8PvQj F/mcnXKxfJA4KYW60+aPMSf67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1NY2l0 mdqobh4m1dbyi4ewhc3oMB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBStoxrHvhs1cbRT8wLOHrcVdDowV93L2DXV5Q76hCCsOASY+5PrA0I 1v8renziQCmtFUmXn3q5a70WfW8gjnWbsEqKiIN+xRrK3FcjUHvlnYXelRXFD8HA 8wynAm6aeZzVEVL7ilpBrMRMmr/RJpC5f6Xgietm7TH0aZd+TXHUUfLHsICTbpaq TV9li6xBHepDX8+tRRt2d3bZC3WHDf9/cFI8mwD1rtJKdRz2xF1MhcQy3Smarj47 sgmT+Y/wUnYQ1wBPoJ/9xfxgFQAICESlN2xvDN/Bmwxa0GvendmG69VUnQn+zlgG 9fmwh1yCO0gAA62JaRR4XVV4dwsOZyW1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:35 2025 by rpki-client