$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: 3p9K+AkQLeVKH/tlO6ChMKQrMgqI6/YmMwVcThAP68A= Subject key identifier: 08:54:13:FC:AC:0E:2F:1C:65:C5:46:32:A9:DE:06:43:3A:2B:22:EB Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 07B0 Signing time: Fri 08 Aug 2025 21:38:30 +0000 Manifest this update: Fri 08 Aug 2025 21:38:29 +0000 Manifest next update: Fri 15 Aug 2025 21:38:29 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: TFnt+0Pxt3SWDCyiBeV8z3IdYI5OryOGQv6ZmMDumS0=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Aug 8 21:38:29 2025 GMT Not After : Aug 15 21:38:29 2025 GMT Subject: CN=68966e56-ed2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:63:23:cb:95:17:1f:39:b4:3b:50:f7:b5: e9:7a:f8:8f:fd:bd:89:a3:c6:c2:ae:23:01:28:cb: 3a:85:73:9c:c3:24:2d:73:81:e0:f0:78:71:49:e2: d3:b2:ed:62:1f:20:44:d6:b1:09:aa:e1:69:ee:0a: bd:86:d7:d1:63:61:aa:58:ec:db:84:2a:ab:39:23: e7:9a:b6:f9:3e:b7:84:bd:1e:cf:87:54:25:05:fd: b3:1a:23:fb:d8:7d:89:5e:b6:ba:f7:01:0c:f4:25: 71:c5:90:02:aa:c1:27:a4:b3:35:db:13:ae:99:8c: 7c:fd:91:4e:05:c6:85:ab:ac:cd:ed:3d:1e:5a:54: 2f:1d:2d:d9:a3:5a:88:1b:d2:20:aa:15:d1:53:18: a2:9f:bd:8f:09:06:aa:e6:41:b8:f9:24:e2:7e:92: 7d:ef:37:ea:d8:72:89:c0:6a:c3:10:05:95:fe:e9: cb:dc:22:30:2a:be:d9:b7:bd:b1:08:91:74:20:81: b0:dc:35:a5:ab:a0:59:78:fb:af:9d:f2:17:17:6f: d4:fd:11:fc:d1:d6:a0:ee:98:40:14:c6:fa:91:b3: 70:1a:c1:ac:aa:0b:1d:21:15:7e:cd:ed:e0:54:a1: c7:47:45:9d:18:49:b7:df:8b:24:7d:7c:ff:bd:76: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:13:FC:AC:0E:2F:1C:65:C5:46:32:A9:DE:06:43:3A:2B:22:EB X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e3:99:63:ba:6e:e0:0a:ae:41:de:3b:f9:ab:dc:86:27:48: 5a:18:f0:4f:f2:f8:67:0d:75:1b:03:13:e6:62:78:41:ab:3f: 60:36:59:92:81:45:98:78:aa:a0:96:5d:c2:45:24:80:30:e0: ce:97:ce:28:52:a2:15:9b:e6:58:ff:c3:75:89:19:ae:d6:cb: 56:38:84:8f:2b:9d:f0:bb:17:ce:ce:25:ca:24:9c:39:15:33: 4c:60:10:b7:f5:b8:07:f4:f5:11:e7:4d:9d:2e:9e:ae:77:e6: 29:61:70:f2:9c:7f:ef:7f:25:a9:c5:38:20:f2:6f:a8:32:36: fe:d8:5d:ad:c3:7f:96:e3:63:3f:b8:a7:90:37:16:b2:78:ce: aa:4e:0f:3e:44:c4:fd:ec:59:4c:d6:43:34:60:8d:a1:ad:c3: 80:be:17:49:3d:61:cc:05:a8:b8:87:92:91:f4:1f:9d:35:57: 2c:7e:a1:12:62:3f:16:42:b5:7e:b2:13:e5:bb:db:66:8a:5a: 33:21:5e:75:15:6c:2e:39:cb:e8:ea:67:83:c7:e7:50:bf:ca: 6d:b3:be:87:3f:81:ec:a6:f4:d6:f1:e7:ad:a2:f7:7c:8a:4a: c9:f2:5b:40:d7:4b:a1:00:29:97:2c:66:c4:8f:79:20:29:de: c0:d1:3e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUwODA4MjEzODI5WhcNMjUwODE1MjEzODI5WjAYMRYwFAYD VQQDEw02ODk2NmU1Ni1lZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3ZjI8uVFx85tDtQ97XpeviP/b2Jo8bCriMBKMs6hXOcwyQtc4Hg8HhxSeLT su1iHyBE1rEJquFp7gq9htfRY2GqWOzbhCqrOSPnmrb5PreEvR7Ph1QlBf2zGiP7 2H2JXra69wEM9CVxxZACqsEnpLM12xOumYx8/ZFOBcaFq6zN7T0eWlQvHS3Zo1qI G9IgqhXRUxiin72PCQaq5kG4+STifpJ97zfq2HKJwGrDEAWV/unL3CIwKr7Zt72x CJF0IIGw3DWlq6BZePuvnfIXF2/U/RH80dag7phAFMb6kbNwGsGsqgsdIRV+ze3g VKHHR0WdGEm334skfXz/vXbOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhUE/ys Di8cZcVGMqneBkM6KyLrMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+45ljum7gCq5B3jv5q9yGJ0haGPBP8vhnDXUbAxPmYnhBqz9gNlmS gUWYeKqgll3CRSSAMODOl84oUqIVm+ZY/8N1iRmu1stWOISPK53wuxfOziXKJJw5 FTNMYBC39bgH9PUR502dLp6ud+YpYXDynH/vfyWpxTgg8m+oMjb+2F2tw3+W42M/ uKeQNxayeM6qTg8+RMT97FlM1kM0YI2hrcOAvhdJPWHMBai4h5KR9B+dNVcsfqES Yj8WQrV+shPlu9tmilozIV51FWwuOcvo6meDx+dQv8pts76HP4HspvTW8eetovd8 ikrJ8ltA10uhACmXLGbEj3kgKd7A0T5e -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:21 2025 by rpki-client