$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: ROH4zBqIHQhQU+HVBUnHZyu3s2Mbc9koEuKQg27avY0= Subject key identifier: 6B:C4:0E:A8:3D:2C:9E:3D:46:A4:70:BF:2B:8B:28:3B:41:DE:C6:83 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 0477 Signing time: Wed 18 Jun 2025 23:55:47 +0000 Manifest this update: Wed 18 Jun 2025 23:55:47 +0000 Manifest next update: Wed 25 Jun 2025 23:55:47 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: tgfpADGE0eg4QgASafBD6sahHbwvTuI/zVwq2hXHZz4=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Jun 18 23:55:47 2025 GMT Not After : Jun 25 23:55:47 2025 GMT Subject: CN=68535203-e6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:cc:45:08:87:23:20:0e:e2:e6:80:d6:f7: 36:c8:0c:a7:6c:ed:c6:25:e1:f7:29:ad:27:73:2d: 79:35:43:ef:28:04:d1:8c:ad:e5:51:c7:e5:75:21: b3:8d:cb:c0:3d:7f:77:52:e8:44:1a:34:06:63:9a: 1e:a7:be:9b:a2:3c:7b:97:9a:60:b3:69:0b:dd:d6: b8:b2:38:8a:7c:94:1a:1a:68:99:e6:01:c4:e9:c0: 74:60:ab:d3:c5:e9:c3:04:1b:a7:b0:4b:a6:8b:65: 96:5c:db:75:aa:50:53:5b:89:91:ca:5f:7a:ea:5a: ca:8a:fd:32:49:fc:ca:95:76:7f:2b:d7:54:8d:cc: 4b:19:2f:05:ef:17:1f:81:ec:af:88:c6:22:44:5b: f7:3e:f3:b2:69:e8:64:04:eb:c5:3e:b3:df:3d:38: 13:09:e1:ac:37:dc:80:7c:f7:06:ce:32:da:de:b3: 67:e1:c0:7d:41:1f:51:76:03:5b:4a:53:fd:38:46: 06:32:51:14:5a:09:77:a7:74:0c:c4:07:35:42:92: 38:9e:8d:7c:47:46:95:24:7a:c8:8a:f9:c5:11:84: 44:3a:bf:cf:55:96:53:60:d2:47:4b:77:df:e8:0f: 20:e2:05:3d:ee:5b:bd:ee:f1:2f:87:38:6e:a6:61: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:0E:A8:3D:2C:9E:3D:46:A4:70:BF:2B:8B:28:3B:41:DE:C6:83 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:d4:81:b9:c4:e2:37:c6:8d:36:65:81:27:b7:ce:5b:bc: 05:41:b4:cd:e1:81:51:5c:9a:27:20:0f:c3:4c:26:2c:a5:0d: 7a:1a:4f:24:d8:77:bb:e7:ce:fb:22:38:38:4b:9e:a0:42:0c: cc:80:f4:96:53:57:7f:ae:44:97:07:58:ea:47:c0:24:9c:56: ea:39:4f:cf:45:c1:10:06:ef:2b:41:03:1b:0b:99:93:57:0b: 72:f8:14:a1:1f:ff:d1:ed:ab:d8:51:3a:77:ec:c5:0e:0e:63: ea:3f:d4:d6:aa:86:16:bc:4d:38:1e:0f:a5:3b:04:f4:2d:89: 09:94:6f:2e:14:f8:11:43:18:e1:69:63:68:fc:5e:ad:12:fa: 2c:ea:df:c2:51:46:60:7b:89:d9:e8:4b:ba:3b:b0:56:d7:0f: 31:16:c1:73:c1:7a:36:b1:17:83:61:9d:3d:7b:85:41:21:58: 5c:01:49:f1:80:d9:f6:dc:bf:21:dd:f4:b3:4e:49:20:b1:42: f7:d0:bd:4a:7d:4f:74:e7:dc:6f:8c:6d:cc:46:73:2c:47:df: 3e:5c:43:60:0d:44:4f:ba:0f:06:3f:5e:19:97:90:6f:31:e8: 0b:e4:66:82:fa:b4:d9:dc:d4:1a:29:2f:9e:58:a2:10:60:55: 10:6d:1c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwNjE4MjM1NTQ3WhcNMjUwNjI1MjM1NTQ3WjAYMRYwFAYD VQQDEw02ODUzNTIwMy1lNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJfMRQiHIyAO4uaA1vc2yAynbO3GJeH3Ka0ncy15NUPvKATRjK3lUcfldSGz jcvAPX93UuhEGjQGY5oep76bojx7l5pgs2kL3da4sjiKfJQaGmiZ5gHE6cB0YKvT xenDBBunsEumi2WWXNt1qlBTW4mRyl966lrKiv0ySfzKlXZ/K9dUjcxLGS8F7xcf geyviMYiRFv3PvOyaehkBOvFPrPfPTgTCeGsN9yAfPcGzjLa3rNn4cB9QR9RdgNb SlP9OEYGMlEUWgl3p3QMxAc1QpI4no18R0aVJHrIivnFEYREOr/PVZZTYNJHS3ff 6A8g4gU97lu97vEvhzhupmFJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvEDqg9 LJ49RqRwvyuLKDtB3saDMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+NSBucTiN8aNNmWBJ7fOW7wFQbTN4YFRXJonIA/DTCYspQ16Gk8k 2He75877Ijg4S56gQgzMgPSWU1d/rkSXB1jqR8AknFbqOU/PRcEQBu8rQQMbC5mT Vwty+BShH//R7avYUTp37MUODmPqP9TWqoYWvE04Hg+lOwT0LYkJlG8uFPgRQxjh aWNo/F6tEvos6t/CUUZge4nZ6Eu6O7BW1w8xFsFzwXo2sReDYZ09e4VBIVhcAUnx gNn23L8h3fSzTkkgsUL30L1KfU9059xvjG3MRnMsR98+XENgDURPug8GP14Zl5Bv MegL5GaC+rTZ3NQaKS+eWKIQYFUQbRx3 -----END CERTIFICATE-----Generated at Fri Jun 20 17:35:03 2025 by rpki-client