$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: Uv7+3EWnkqm8K67Xkx3ZyGzFW9h8YEvF6fU9c2tM168= Subject key identifier: A7:BB:BE:41:4E:80:49:F3:D6:CC:5C:5E:F9:F7:D9:D3:17:4B:1F:A4 Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: CB Signing time: Sat 09 Aug 2025 06:09:58 +0000 Manifest this update: Sat 09 Aug 2025 06:09:58 +0000 Manifest next update: Sat 16 Aug 2025 06:09:58 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: AwMUBR2r2TqflmQeh/HiWqdndhQuESHQBn2UdgRW81w=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Aug 9 06:09:58 2025 GMT Not After : Aug 16 06:09:58 2025 GMT Subject: CN=6896e636-fcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:4c:d6:2a:77:91:9f:73:80:f2:5d:7f:ad: bc:c0:1f:e9:a8:ba:2f:9d:66:60:ce:99:51:2f:55: bf:1c:98:f5:99:6c:de:84:6b:9d:fb:8e:f6:3f:91: 64:fd:28:61:0f:34:07:d4:0a:b0:83:89:87:4e:f2: 23:1a:a9:81:2c:0f:31:31:bf:36:f7:6b:d5:24:66: 06:db:87:8f:f1:e0:d0:5d:ce:d1:fe:fa:bb:85:36: b8:2c:b5:99:9f:c0:16:55:9c:f0:1f:60:25:ae:cd: d8:45:0e:fb:2d:ab:cc:14:e8:24:60:01:ec:a9:c9: 93:82:b5:3c:ec:d1:a2:0f:45:bd:17:65:a7:52:f0: cf:d6:70:ab:be:4c:c9:63:0a:16:38:96:be:59:04: c3:93:14:0f:50:72:85:96:56:95:84:de:d0:46:b2: b8:00:01:a2:e6:67:86:be:14:42:d3:d6:12:96:7c: a5:6c:83:de:3e:b6:e3:aa:5d:a2:b1:21:0e:8c:f1: 2d:5c:b7:37:c1:30:32:e6:68:29:8a:71:af:f8:87: 2a:64:0d:aa:ac:18:ab:bf:fe:44:38:03:e7:1e:1d: 6f:58:3f:71:26:2b:16:1f:82:2d:79:c6:f1:4c:64: 80:01:70:3b:df:44:c4:b8:a1:3b:e9:1f:9b:1e:1f: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BB:BE:41:4E:80:49:F3:D6:CC:5C:5E:F9:F7:D9:D3:17:4B:1F:A4 X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bb:10:f1:91:02:f8:4d:f1:9e:4e:1d:af:83:83:0f:df:dc: ca:a0:dc:b1:02:3d:48:4d:b0:a9:d9:a6:3b:22:c4:13:23:29: 01:6a:60:c3:dc:45:4f:92:9f:7c:cb:eb:0d:db:3a:67:a0:c8: b3:11:db:d5:21:4b:28:34:60:af:59:0d:cc:73:ee:86:cb:de: 1f:8c:eb:1e:d6:15:33:f8:cd:60:17:a0:97:41:1e:e8:93:17: a7:6b:c1:d9:5b:d6:35:60:d3:a8:03:41:3e:10:53:b0:ce:7e: 00:61:64:9a:e4:94:03:6a:cd:8e:98:ba:5d:9e:53:76:79:34: cd:af:71:c7:f2:7f:b3:42:49:d4:e2:0d:0d:9e:74:d1:88:8b: bd:21:d7:30:55:dc:0a:31:8e:a0:37:ff:e2:a9:2b:4b:c0:f2: b1:fb:73:bb:5f:94:87:fa:1f:58:1b:49:64:75:24:71:61:42: 83:19:d3:d7:66:11:4a:d2:8d:87:5d:ab:5c:6c:5c:fd:48:61: 05:84:4c:04:f4:a2:ae:bf:92:7f:0a:04:be:1a:04:8d:15:db: a1:25:4f:d2:97:96:93:1c:ba:b2:d0:17:d3:f7:55:ad:a5:ab: 79:7b:e7:55:8f:35:7b:44:58:10:f9:d4:d1:dd:7d:f2:53:3d: 22:6f:73:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjUwODA5MDYwOTU4WhcNMjUwODE2MDYwOTU4WjAYMRYwFAYD VQQDEw02ODk2ZTYzNi1mY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7tM1ip3kZ9zgPJdf628wB/pqLovnWZgzplRL1W/HJj1mWzehGud+472P5Fk /ShhDzQH1Aqwg4mHTvIjGqmBLA8xMb8292vVJGYG24eP8eDQXc7R/vq7hTa4LLWZ n8AWVZzwH2Alrs3YRQ77LavMFOgkYAHsqcmTgrU87NGiD0W9F2WnUvDP1nCrvkzJ YwoWOJa+WQTDkxQPUHKFllaVhN7QRrK4AAGi5meGvhRC09YSlnylbIPePrbjql2i sSEOjPEtXLc3wTAy5mgpinGv+IcqZA2qrBirv/5EOAPnHh1vWD9xJisWH4Itecbx TGSAAXA730TEuKE76R+bHh8qLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe7vkFO gEnz1sxcXvn32dMXSx+kMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDuxDxkQL4TfGeTh2vg4MP39zKoNyxAj1ITbCp2aY7IsQTIykBamDD 3EVPkp98y+sN2zpnoMizEdvVIUsoNGCvWQ3Mc+6Gy94fjOse1hUz+M1gF6CXQR7o kxena8HZW9Y1YNOoA0E+EFOwzn4AYWSa5JQDas2OmLpdnlN2eTTNr3HH8n+zQknU 4g0NnnTRiIu9IdcwVdwKMY6gN//iqStLwPKx+3O7X5SH+h9YG0lkdSRxYUKDGdPX ZhFK0o2HXatcbFz9SGEFhEwE9KKuv5J/CgS+GgSNFduhJU/Sl5aTHLqy0BfT91Wt pat5e+dVjzV7RFgQ+dTR3X3yUz0ib3Nw -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:11 2025 by rpki-client