$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: 2mtytoiRiH75SlRW48Z+HlNwgo8nyTFMWVZ4eUsrMVU= Subject key identifier: 74:25:FE:B3:51:6D:04:EF:4E:E3:DC:E5:A3:02:6E:DE:6B:94:A6:E0 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 0491 Signing time: Sat 09 Aug 2025 00:30:22 +0000 Manifest this update: Sat 09 Aug 2025 00:30:22 +0000 Manifest next update: Sat 16 Aug 2025 00:30:22 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: m5Bp6ggH6a+fKb+gFbZqeo6ECRlqN0YDXRDyfTX6Xw8=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Aug 9 00:30:22 2025 GMT Not After : Aug 16 00:30:22 2025 GMT Subject: CN=6896969e-2924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:a0:c4:2b:ec:dd:55:97:a1:6c:37:ee:2b: 04:6f:7a:9a:09:f1:a9:95:8a:e3:43:20:e7:6e:e3: 2b:9b:fa:e4:ad:d7:5d:ed:9f:b6:47:52:8f:72:77: 0c:62:4d:f3:c7:05:f0:01:a1:13:28:0d:e7:a7:0d: b4:07:cc:2a:25:be:6d:83:af:be:f8:de:cb:e4:cb: 4c:30:b4:01:3b:48:6c:84:7d:0c:59:b4:58:8a:32: 61:13:d1:5c:bc:68:02:09:0d:22:8f:c0:d3:e7:eb: 45:bf:ac:41:03:77:8b:72:66:ae:42:f9:cb:ca:bc: 77:a9:1d:89:51:e4:04:2a:16:60:7c:b9:34:05:31: 6d:eb:c7:bb:74:6f:c0:d1:99:e4:5b:27:a5:9e:76: 07:ce:b9:62:90:d2:f6:51:c0:ee:80:68:b4:82:20: 1a:3e:cc:1a:68:be:f9:1e:73:6a:45:b0:1c:fa:2e: 68:09:6c:01:3b:e2:cc:79:35:e7:15:75:e0:7b:fe: 38:68:7b:f0:3c:83:10:4e:9b:07:1b:22:27:01:a5: c2:f7:9e:b8:70:c5:a6:a8:76:56:2e:b3:c6:17:17: 68:be:76:ea:6d:e9:82:9d:27:8e:e5:ce:67:63:7a: e0:9d:26:ca:1c:41:95:3e:aa:43:a4:f8:29:da:f5: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:FE:B3:51:6D:04:EF:4E:E3:DC:E5:A3:02:6E:DE:6B:94:A6:E0 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2f:88:99:ec:19:b1:64:4b:23:c3:9f:cd:0c:8d:9d:63:7a: 2d:24:42:6e:57:4d:0b:1b:1e:19:e5:2d:fb:88:18:fa:0c:79: c0:cc:9e:38:c7:2b:a4:ae:00:78:73:80:7b:99:06:60:c6:13: 5e:1a:ad:60:7e:45:06:12:e8:49:37:c6:31:4b:de:19:3a:3f: b4:dc:ef:dd:6d:73:26:09:4a:b6:d6:86:22:60:65:06:b7:c4: 1c:df:e9:48:04:84:17:0a:d8:62:44:73:82:19:16:fe:5a:87: a0:e2:f1:88:f5:f8:c2:e1:c5:c0:04:45:11:00:77:7e:64:14: e8:4a:59:e3:b6:b7:6c:d4:d3:55:43:dc:59:df:81:06:46:ef: 6f:0c:47:72:cb:cc:1d:16:9d:80:36:d2:66:45:b9:ad:ae:71: ba:95:d0:a3:07:77:f6:de:91:cf:5b:12:50:ac:d0:26:91:ff: 48:98:d0:0a:ef:ac:fa:75:2b:a3:a7:4a:54:c8:34:6e:23:48: 5f:32:cf:39:f9:a8:bf:de:bd:29:fa:6b:a2:b8:9c:9b:64:51: 0a:64:f9:b6:98:6b:11:fb:ad:08:6d:40:98:17:b6:10:4c:64: 64:1c:39:e5:0c:df:96:f3:9e:a2:bb:4c:4b:2d:33:ee:89:0b: e9:a2:0a:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwODA5MDAzMDIyWhcNMjUwODE2MDAzMDIyWjAYMRYwFAYD VQQDEw02ODk2OTY5ZS0yOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPCgxCvs3VWXoWw37isEb3qaCfGplYrjQyDnbuMrm/rkrddd7Z+2R1KPcncM Yk3zxwXwAaETKA3npw20B8wqJb5tg6+++N7L5MtMMLQBO0hshH0MWbRYijJhE9Fc vGgCCQ0ij8DT5+tFv6xBA3eLcmauQvnLyrx3qR2JUeQEKhZgfLk0BTFt68e7dG/A 0ZnkWyelnnYHzrlikNL2UcDugGi0giAaPswaaL75HnNqRbAc+i5oCWwBO+LMeTXn FXXge/44aHvwPIMQTpsHGyInAaXC9564cMWmqHZWLrPGFxdovnbqbemCnSeO5c5n Y3rgnSbKHEGVPqpDpPgp2vU80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQl/rNR bQTvTuPc5aMCbt5rlKbgMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsL4iZ7BmxZEsjw5/NDI2dY3otJEJuV00LGx4Z5S37iBj6DHnAzJ44 xyukrgB4c4B7mQZgxhNeGq1gfkUGEuhJN8YxS94ZOj+03O/dbXMmCUq21oYiYGUG t8Qc3+lIBIQXCthiRHOCGRb+Woeg4vGI9fjC4cXABEURAHd+ZBToSlnjtrds1NNV Q9xZ34EGRu9vDEdyy8wdFp2ANtJmRbmtrnG6ldCjB3f23pHPWxJQrNAmkf9ImNAK 76z6dSujp0pUyDRuI0hfMs85+ai/3r0p+muiuJybZFEKZPm2mGsR+60IbUCYF7YQ TGRkHDnlDN+W856iu0xLLTPuiQvpogqZ -----END CERTIFICATE-----Generated at Sun Aug 10 18:51:39 2025 by rpki-client