$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: XgfzNn8D1yXiI/vAuUJVSBYgXUXcY7J+w5HjEMrSXgc= Subject key identifier: CD:4C:8C:AE:1D:77:A7:37:AF:78:46:7E:CD:F8:E9:92:B3:9A:73:BE Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 08F6 Signing time: Fri 08 Aug 2025 21:22:57 +0000 Manifest this update: Fri 08 Aug 2025 21:22:57 +0000 Manifest next update: Fri 15 Aug 2025 21:22:57 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: GrC3FaA6Nsu2X4JJF0alQ1+HlduGXt1h963LPpvZXoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Aug 8 21:22:57 2025 GMT Not After : Aug 15 21:22:57 2025 GMT Subject: CN=68966ab1-fce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:43:e3:0d:a7:09:95:0b:43:24:98:62:ec: 84:27:a3:86:41:dd:af:53:84:47:d3:20:54:f1:67: 8c:61:52:c6:e4:cc:47:73:a2:f8:06:66:91:7d:70: 07:e0:e8:99:81:7c:85:9a:ac:cc:37:de:0b:7f:46: 8c:df:a9:4e:e9:ba:32:30:b6:4e:b6:97:35:1d:a4: 33:ef:20:81:ae:33:12:91:02:45:c2:9a:52:76:a2: 52:81:f6:d5:bd:0c:1c:0e:dd:1b:85:f3:93:70:4e: 97:d0:d0:b0:45:b5:ae:16:e8:9c:a4:0c:2c:93:ca: d0:35:d5:a2:0c:08:17:ea:82:5e:11:d5:a3:9c:1d: d2:37:ce:e9:1c:16:54:d4:82:13:9d:0a:05:3e:59: 05:ef:84:a6:9f:43:9b:23:4b:93:56:5e:45:04:65: 58:dd:fa:fc:78:26:64:b7:80:a9:90:90:3f:d9:e9: a1:96:93:7f:46:97:06:bb:7a:19:37:6c:4e:27:d4: 60:80:a9:62:d2:6d:6e:65:f2:d2:43:1a:e3:ba:d0: fa:45:97:e9:a3:ba:33:48:44:f7:9e:85:3e:01:9f: 2d:cf:9c:74:68:13:9b:9b:94:5f:a1:5c:78:66:68: b3:ee:4f:a0:c7:90:16:37:0c:71:c5:51:66:a6:bf: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4C:8C:AE:1D:77:A7:37:AF:78:46:7E:CD:F8:E9:92:B3:9A:73:BE X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:73:53:4f:98:36:2c:58:a1:00:82:4a:50:3d:ac:88:58:ad: e0:46:5b:43:24:99:d6:0d:52:38:39:e1:78:3c:0b:11:c3:ec: 82:42:68:db:30:a0:af:98:e1:77:d8:d3:2a:fa:3c:1a:82:dc: c6:5c:eb:f8:75:4f:dc:9a:52:d0:18:89:30:ac:24:ad:fd:7e: 6b:a3:96:cd:b7:b2:f1:aa:62:49:4d:93:9d:45:b6:72:05:9f: a0:5b:a0:5b:ea:2a:5e:af:fd:b4:a5:69:7a:28:d5:e0:65:2a: 63:b8:57:79:f8:44:64:a9:a3:37:18:81:4d:da:ab:8e:07:fe: ef:0a:04:2d:12:86:ac:39:2a:c4:61:33:db:3b:d2:12:b0:27: af:5a:7d:b4:58:82:22:d7:41:5c:1b:be:9d:93:8e:44:a4:ac: 46:59:13:db:a4:01:d9:a5:93:60:a6:b6:da:68:c8:4f:46:2b: 39:8c:db:97:96:64:36:ed:21:10:17:e5:eb:a6:83:fb:e7:32: 62:fc:bd:89:27:5f:56:2e:71:ad:1a:e1:f8:db:23:a8:cc:22: 17:fd:f1:d8:29:fb:f5:5c:02:dc:32:73:f3:68:8f:4f:1c:5a: ba:9f:86:03:68:c8:53:90:a3:c3:1a:25:8d:1b:50:3d:29:25: 4a:61:05:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwODA4MjEyMjU3WhcNMjUwODE1MjEyMjU3WjAYMRYwFAYD VQQDEw02ODk2NmFiMS1mY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIlD4w2nCZULQySYYuyEJ6OGQd2vU4RH0yBU8WeMYVLG5MxHc6L4BmaRfXAH 4OiZgXyFmqzMN94Lf0aM36lO6boyMLZOtpc1HaQz7yCBrjMSkQJFwppSdqJSgfbV vQwcDt0bhfOTcE6X0NCwRbWuFuicpAwsk8rQNdWiDAgX6oJeEdWjnB3SN87pHBZU 1IITnQoFPlkF74Smn0ObI0uTVl5FBGVY3fr8eCZkt4CpkJA/2emhlpN/RpcGu3oZ N2xOJ9RggKli0m1uZfLSQxrjutD6RZfpo7ozSET3noU+AZ8tz5x0aBObm5RfoVx4 Zmiz7k+gx5AWNwxxxVFmpr+CywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1MjK4d d6c3r3hGfs346ZKzmnO+MB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCec1NPmDYsWKEAgkpQPayIWK3gRltDJJnWDVI4OeF4PAsRw+yCQmjb MKCvmOF32NMq+jwagtzGXOv4dU/cmlLQGIkwrCSt/X5ro5bNt7LxqmJJTZOdRbZy BZ+gW6Bb6iper/20pWl6KNXgZSpjuFd5+ERkqaM3GIFN2quOB/7vCgQtEoasOSrE YTPbO9ISsCevWn20WIIi10FcG76dk45EpKxGWRPbpAHZpZNgprbaaMhPRis5jNuX lmQ27SEQF+XrpoP75zJi/L2JJ19WLnGtGuH42yOozCIX/fHYKfv1XALcMnPzaI9P HFq6n4YDaMhTkKPDGiWNG1A9KSVKYQXc -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:31 2025 by rpki-client