$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: swsaGecY7efxVvo5IodV0BNErzEunl63fggneO35HeA= Subject key identifier: 66:52:B0:8E:01:E5:58:26:09:78:E5:91:8B:C7:3D:6B:DD:E4:79:78 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 1888 Signing time: Fri 08 Aug 2025 17:47:36 +0000 Manifest this update: Fri 08 Aug 2025 17:47:36 +0000 Manifest next update: Fri 15 Aug 2025 17:47:36 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: azV+/QOaEidTQtRVTvt18eu86+5+wk/PCQ6DFrPHzYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Aug 8 17:47:36 2025 GMT Not After : Aug 15 17:47:36 2025 GMT Subject: CN=68963838-3d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:90:13:c6:72:f4:91:75:43:5d:b5:4f:97: 18:cf:16:32:0b:95:33:a9:51:e8:6b:f1:9e:7f:4c: 7c:bb:e6:b8:92:ab:e7:b4:36:63:ce:64:38:20:cf: 56:15:ac:fe:f7:82:02:bf:7b:8d:7e:f8:88:d3:a2: f8:5c:d3:0f:a6:b4:63:98:e5:0e:34:be:e8:27:2f: 7e:c9:b1:fd:25:04:73:45:93:76:78:1a:e2:6e:40: 90:d3:d5:7e:34:21:82:7c:15:1d:61:9f:4a:78:fb: dd:8e:e1:6a:b5:f2:f9:6f:b6:e5:ed:a3:48:ac:7c: cf:91:c6:78:fc:b7:c9:df:64:a2:f8:16:5b:9b:05: 11:f7:f6:6c:03:ff:ae:27:75:e7:92:5a:a4:8c:21: 0b:f9:bc:44:dc:58:2b:35:6d:cd:36:51:59:b8:b2: 34:de:5a:dc:0f:b1:d9:87:e2:35:e1:22:31:c1:bd: f9:fe:fa:38:d9:db:ae:36:67:96:d8:e7:fe:39:e2: 97:45:95:d2:e0:73:31:22:9d:ad:c9:7f:0d:44:c1: 9c:6b:1d:d9:88:6e:f2:17:a7:6b:ed:d6:54:f8:6a: 7f:65:f0:fd:46:a1:bb:e2:fd:bc:db:cd:10:67:35: 19:47:d4:48:f3:f0:b0:35:a6:99:46:bd:92:55:bf: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:52:B0:8E:01:E5:58:26:09:78:E5:91:8B:C7:3D:6B:DD:E4:79:78 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:97:e2:06:43:ad:db:3b:b3:09:2d:bc:db:6e:47:be:07:3e: d2:39:f5:41:08:4b:11:60:c9:cb:95:a2:3d:49:1c:ee:6d:55: 6a:54:f3:44:75:cb:91:83:12:b0:f5:1e:b6:7f:f1:13:19:74: 38:f5:b2:88:56:3f:47:d9:f3:cc:3f:10:5a:27:f0:e2:a2:04: c3:eb:f2:6a:78:96:40:a8:48:6d:01:00:4d:50:8f:40:35:26: dd:eb:c5:69:6f:4a:ba:19:15:cd:64:ce:4c:b3:d4:87:9c:45: 14:a2:b6:4e:fc:4a:eb:ba:7a:73:a6:fd:2c:32:88:43:65:8d: 9e:9a:ec:03:34:b8:0f:8b:45:e5:18:8b:95:6d:60:da:0c:b2: df:97:6b:e2:1f:c4:a6:72:73:02:7c:dd:af:72:65:54:d5:37: 00:67:1d:04:0a:69:6f:92:99:0d:80:7d:00:c4:5f:4f:20:9b: 1f:f4:8e:fd:31:38:2c:4b:55:87:d6:41:e9:d4:d4:57:3e:e6: 46:09:77:c1:a1:b0:e5:ff:83:f4:b4:57:49:ea:f8:33:51:d2: 53:b3:0e:82:80:b3:93:2e:fd:3f:33:32:38:c8:7c:9e:47:10: a9:b7:29:1c:47:bd:b7:31:9e:0f:1f:3b:c6:46:d1:01:f0:f5: 38:d6:10:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUwODA4MTc0NzM2WhcNMjUwODE1MTc0NzM2WjAYMRYwFAYD VQQDEw02ODk2MzgzOC0zZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx2QE8Zy9JF1Q121T5cYzxYyC5UzqVHoa/Gef0x8u+a4kqvntDZjzmQ4IM9W Faz+94ICv3uNfviI06L4XNMPprRjmOUONL7oJy9+ybH9JQRzRZN2eBribkCQ09V+ NCGCfBUdYZ9KePvdjuFqtfL5b7bl7aNIrHzPkcZ4/LfJ32Si+BZbmwUR9/ZsA/+u J3XnklqkjCEL+bxE3FgrNW3NNlFZuLI03lrcD7HZh+I14SIxwb35/vo42duuNmeW 2Of+OeKXRZXS4HMxIp2tyX8NRMGcax3ZiG7yF6dr7dZU+Gp/ZfD9RqG74v28280Q ZzUZR9RI8/CwNaaZRr2SVb//owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZSsI4B 5VgmCXjlkYvHPWvd5Hl4MB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAml+IGQ63bO7MJLbzbbke+Bz7SOfVBCEsRYMnLlaI9SRzubVVqVPNE dcuRgxKw9R62f/ETGXQ49bKIVj9H2fPMPxBaJ/DiogTD6/JqeJZAqEhtAQBNUI9A NSbd68Vpb0q6GRXNZM5Ms9SHnEUUorZO/Errunpzpv0sMohDZY2emuwDNLgPi0Xl GIuVbWDaDLLfl2viH8SmcnMCfN2vcmVU1TcAZx0ECmlvkpkNgH0AxF9PIJsf9I79 MTgsS1WH1kHp1NRXPuZGCXfBobDl/4P0tFdJ6vgzUdJTsw6CgLOTLv0/MzI4yHye RxCptykcR723MZ4PHzvGRtEB8PU41hB+ -----END CERTIFICATE-----Generated at Sun Aug 10 18:32:03 2025 by rpki-client