$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: x3rSpR05Y6/c/mIEG2jqJq2+J/5QroKMiLlBPJa2wTw= Subject key identifier: 35:03:A4:E0:71:83:C8:E7:48:58:B5:7E:E4:B5:9D:C7:11:7E:7C:A6 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 70 Signing time: Thu 07 Aug 2025 07:28:16 +0000 Manifest this update: Thu 07 Aug 2025 07:28:15 +0000 Manifest next update: Thu 14 Aug 2025 07:28:15 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: 4/uNbDFEnt2zo9SAJ2OEZ3lR9EMjojIO3lqUeKBZGXk=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Aug 7 07:28:15 2025 GMT Not After : Aug 14 07:28:15 2025 GMT Subject: CN=6894558f-0f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1e:40:25:90:e7:d8:96:ef:33:84:15:a2:79: ae:01:d5:15:31:cb:06:0f:8c:15:b0:12:e4:aa:a3: f5:91:29:06:b2:69:94:fe:71:6e:78:27:0e:29:23: 5f:5a:87:8c:cf:85:01:f0:51:2f:9f:99:d9:c8:0f: cc:3e:96:8f:2b:4e:c5:ad:ce:6d:ec:25:f8:1c:7b: b2:e3:20:c4:fd:b0:b8:89:3d:74:03:0b:5a:9c:5e: b4:61:e7:bf:e5:37:76:e3:3c:67:cf:94:1f:70:fb: 54:6e:85:90:d6:b5:99:ad:55:56:9c:bd:0a:15:82: 50:e6:3c:75:64:a5:8d:e8:ec:fa:40:1d:ea:ab:e7: 47:1f:81:8c:e1:2f:23:d7:80:b4:b2:50:98:01:44: f4:86:8c:d0:1c:54:cf:aa:8b:92:ca:3f:63:2f:e3: a5:cb:1a:ac:36:df:64:42:b1:9e:06:75:6a:bd:3f: 6c:05:0b:1c:ba:c6:f0:09:d1:e5:c9:de:01:6a:28: d2:61:80:dc:d7:f5:ba:d2:4e:84:7b:80:98:da:af: 89:2c:5c:66:b5:f0:01:bb:2f:00:62:8f:23:c2:ba: 8a:6d:cd:fd:7c:38:d1:62:ea:bc:a0:a7:66:43:5b: 8c:4b:0d:a6:ff:db:61:a5:ad:55:eb:72:3a:22:5c: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:A4:E0:71:83:C8:E7:48:58:B5:7E:E4:B5:9D:C7:11:7E:7C:A6 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:14:55:0b:c3:87:60:65:81:3d:24:77:db:70:b6:d3:20: aa:44:9c:96:b7:32:ab:72:01:56:2b:56:83:33:30:b5:a1:7d: e3:9a:5a:fc:8d:b2:2c:e6:51:f3:74:99:15:86:a0:45:88:9e: 5a:77:de:90:e3:f8:3f:68:94:5f:57:bb:a7:10:aa:51:5a:00: 43:be:c8:81:c6:ca:10:22:ef:29:21:db:f9:db:bc:22:07:9c: e8:39:26:04:71:83:89:9c:d3:5b:d0:40:33:90:63:86:52:f5: 01:34:b7:1e:88:0b:ae:b3:2c:8e:2b:28:2c:a2:7c:6e:08:ac: 4f:48:4a:40:22:01:1b:9f:30:c8:38:c5:f5:d3:67:5f:8e:51: b7:f4:e1:73:e8:49:1d:ff:43:0d:70:53:5e:9a:b9:99:1d:93: f7:f5:3a:18:bb:72:51:e3:5c:c2:71:3b:74:04:50:a0:27:ae: a2:99:e7:3c:56:7a:18:12:8e:3d:8f:f9:4b:4a:61:3b:4c:63: af:2b:d2:9a:a5:04:80:1d:55:84:01:cb:4f:75:57:4c:23:c7: 3f:a5:74:c1:10:a1:6e:02:68:c9:f4:a4:d9:90:2c:f1:f4:38: a5:62:6c:fc:2b:26:d9:03:34:16:c1:dc:ef:a4:e8:87:5c:3b: 31:48:01:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA4MDcwNzI4MTVaFw0yNTA4MTQwNzI4MTVaMBgxFjAUBgNV BAMTDTY4OTQ1NThmLTBmNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgHkAlkOfYlu8zhBWiea4B1RUxywYPjBWwEuSqo/WRKQayaZT+cW54Jw4pI19a h4zPhQHwUS+fmdnID8w+lo8rTsWtzm3sJfgce7LjIMT9sLiJPXQDC1qcXrRh57/l N3bjPGfPlB9w+1RuhZDWtZmtVVacvQoVglDmPHVkpY3o7PpAHeqr50cfgYzhLyPX gLSyUJgBRPSGjNAcVM+qi5LKP2Mv46XLGqw232RCsZ4GdWq9P2wFCxy6xvAJ0eXJ 3gFqKNJhgNzX9brSToR7gJjar4ksXGa18AG7LwBijyPCuoptzf18ONFi6rygp2ZD W4xLDab/22GlrVXrcjoiXCsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNQOk4HGD yOdIWLV+5LWdxxF+fKYwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlAFFULw4dgZYE9JHfbcLbTIKpEnJa3MqtyAVYrVoMzMLWhfeOaWvyN sizmUfN0mRWGoEWInlp33pDj+D9olF9Xu6cQqlFaAEO+yIHGyhAi7ykh2/nbvCIH nOg5JgRxg4mc01vQQDOQY4ZS9QE0tx6IC66zLI4rKCyifG4IrE9ISkAiARufMMg4 xfXTZ1+OUbf04XPoSR3/Qw1wU16auZkdk/f1Ohi7clHjXMJxO3QEUKAnrqKZ5zxW ehgSjj2P+UtKYTtMY68r0pqlBIAdVYQBy091V0wjxz+ldMEQoW4CaMn0pNmQLPH0 OKVibPwrJtkDNBbB3O+k6IdcOzFIAVI= -----END CERTIFICATE-----Generated at Sat Aug 9 02:56:18 2025 by rpki-client