$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: p63w9zM7zqX4TDUQjZJfFiyAF/FRAtiQ4868EDrRYWM= Subject key identifier: 4B:8B:BD:2C:93:0E:20:CD:EF:A9:8A:37:27:18:57:F0:7B:8B:61:B8 Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 05DA Signing time: Sun 10 Aug 2025 23:06:07 +0000 Manifest this update: Sun 10 Aug 2025 23:06:06 +0000 Manifest next update: Sun 17 Aug 2025 23:06:06 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: UpRCfaTUHXC9ZsbX0YKZuNNf8m30oiLBz9xhKwe8GjQ=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Aug 10 23:06:06 2025 GMT Not After : Aug 17 23:06:06 2025 GMT Subject: CN=689925df-2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:1f:c3:00:29:65:03:10:ca:c2:ef:9d:db: 9c:77:bd:31:d1:ef:d0:19:77:db:d2:4a:0e:4f:d5: 76:39:51:53:b6:de:40:da:0d:9a:4c:98:29:8d:01: f7:73:8c:f0:9a:66:36:82:81:ce:a5:e9:f0:55:19: db:79:c6:46:94:ef:c4:6f:d0:2c:fe:a8:2c:0f:f2: cf:8a:46:68:a9:61:06:58:6a:cb:dd:29:54:1f:81: 91:32:d1:0e:cf:f3:c7:e2:1b:46:0a:57:5b:40:25: 72:15:c2:19:ac:f0:80:35:86:53:18:1d:f8:1e:7b: b6:ed:9a:c5:5d:d9:75:ac:29:fb:62:12:fa:23:8e: db:ec:44:19:0a:2e:da:62:2c:50:80:0a:1d:5c:fc: 7d:5c:bc:3b:f3:96:aa:ad:6c:4f:17:ef:cd:ba:18: 65:26:4a:04:4f:02:bd:68:1b:86:4c:28:e5:b7:fa: cd:09:fe:f2:25:05:f3:59:9b:3b:28:ba:52:90:83: ed:d7:4e:5d:68:10:c7:38:0b:5d:5c:d3:b5:f6:22: 02:7d:12:35:fb:5b:02:a5:57:d1:84:bc:4b:60:50: b2:c6:83:7a:54:8c:aa:dc:6f:76:be:bb:16:59:c6: 05:1b:17:e1:97:db:51:1c:cb:97:38:9b:27:85:64: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:BD:2C:93:0E:20:CD:EF:A9:8A:37:27:18:57:F0:7B:8B:61:B8 X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a9:f1:17:24:9e:2f:92:cb:a8:ea:ce:1c:04:a7:0f:1b:f5: 1a:dc:1d:d9:f6:e8:ba:a7:8c:1b:9d:aa:e8:e7:e4:f2:fc:7d: 28:2b:94:a1:44:09:3f:85:e7:d9:f2:62:48:7c:b0:22:f2:0c: 35:38:08:e2:ad:51:d3:8a:fe:58:d0:dc:d7:b8:a9:87:d5:1c: 0b:d0:4e:ed:51:66:d0:61:85:1b:72:fd:91:a5:f3:10:f8:8c: dc:e8:19:3d:d6:90:cc:81:21:2b:81:58:cc:36:aa:a9:9f:62: fa:d1:ba:06:7e:97:3e:45:65:b6:dd:a1:ea:73:b1:e1:c5:b8: c4:be:64:13:05:a6:4f:89:0c:b1:ac:10:7a:0c:6d:d6:fb:1b: 5f:b7:22:b1:4f:ac:83:be:c2:9b:d7:20:c0:0b:82:4c:98:cc: c7:39:ad:1a:a0:e2:c4:d9:60:0a:2f:9a:26:5b:c3:48:12:ce: 3a:67:28:8e:56:ba:29:bf:b9:db:f2:32:2e:b5:e2:e2:1e:35: e9:7b:d6:c1:af:70:4a:d5:8a:03:e1:43:3e:cd:71:cc:01:de: 61:e7:b7:ed:01:42:d3:a5:52:85:a9:39:10:10:01:c3:2d:01: 1c:81:73:58:ca:ee:ee:4a:8d:a4:0d:85:5b:44:8e:1c:f8:e8: 38:c5:36:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUwODEwMjMwNjA2WhcNMjUwODE3MjMwNjA2WjAYMRYwFAYD VQQDEw02ODk5MjVkZi0yNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvQfwwApZQMQysLvnducd70x0e/QGXfb0koOT9V2OVFTtt5A2g2aTJgpjQH3 c4zwmmY2goHOpenwVRnbecZGlO/Eb9As/qgsD/LPikZoqWEGWGrL3SlUH4GRMtEO z/PH4htGCldbQCVyFcIZrPCANYZTGB34Hnu27ZrFXdl1rCn7YhL6I47b7EQZCi7a YixQgAodXPx9XLw785aqrWxPF+/NuhhlJkoETwK9aBuGTCjlt/rNCf7yJQXzWZs7 KLpSkIPt105daBDHOAtdXNO19iICfRI1+1sCpVfRhLxLYFCyxoN6VIyq3G92vrsW WcYFGxfhl9tRHMuXOJsnhWTw7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuLvSyT DiDN76mKNycYV/B7i2G4MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeqfEXJJ4vksuo6s4cBKcPG/Ua3B3Z9ui6p4wbnaro5+Ty/H0oK5Sh RAk/hefZ8mJIfLAi8gw1OAjirVHTiv5Y0NzXuKmH1RwL0E7tUWbQYYUbcv2RpfMQ +Izc6Bk91pDMgSErgVjMNqqpn2L60boGfpc+RWW23aHqc7HhxbjEvmQTBaZPiQyx rBB6DG3W+xtftyKxT6yDvsKb1yDAC4JMmMzHOa0aoOLE2WAKL5omW8NIEs46ZyiO Vropv7nb8jIuteLiHjXpe9bBr3BK1YoD4UM+zXHMAd5h57ftAULTpVKFqTkQEAHD LQEcgXNYyu7uSo2kDYVbRI4c+Og4xTag -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:59 2025 by rpki-client