$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: 9l9DfNr0tCl/XIwl5bitiEqgKo0jsiuzPg7oZl5vypw= Subject key identifier: 5C:E9:FF:F9:52:22:DF:66:12:63:2E:F7:92:B7:40:EC:C2:7F:E3:F0 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 5A Signing time: Sat 09 Aug 2025 07:40:24 +0000 Manifest this update: Sat 09 Aug 2025 07:40:23 +0000 Manifest next update: Sat 16 Aug 2025 07:40:23 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: 3SKuPhu7dxBp7lnIHMPc6w74dE3gJXvhxvaxEpOA6Jg=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Aug 9 07:40:23 2025 GMT Not After : Aug 16 07:40:23 2025 GMT Subject: CN=6896fb67-87c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:08:ca:8b:d5:1b:ed:5a:e8:fc:94:62:7d: bb:f2:dd:4e:58:29:6c:6f:22:3e:c9:04:ef:b4:f3: b5:6c:36:f8:6a:57:d9:bd:39:ee:ae:92:11:33:ab: 2e:ee:b3:45:60:42:37:49:bc:13:3d:2e:e5:2f:2f: 12:3a:1e:cd:bd:9b:ac:3f:e8:e4:20:d6:41:01:34: 3c:86:fd:65:bc:8e:80:88:ad:76:74:55:6f:15:c9: 73:5d:6b:17:97:7c:04:cc:e7:63:4e:f1:43:9d:51: 58:de:85:9d:ba:c3:2a:41:67:dc:f2:57:68:18:88: 74:24:41:13:f1:63:ad:a5:6f:dc:b3:80:09:43:42: 47:c2:1f:bd:5f:ce:7a:17:d1:2f:90:d6:95:88:2b: 52:db:b9:93:a9:6f:63:c8:d8:5a:9e:89:7f:a4:e1: 3b:7d:0e:0b:00:11:54:b1:f7:20:b8:a7:ab:1e:e1: ed:ad:81:b6:8e:52:ef:a9:c0:56:f5:a8:a3:36:e5: e8:4e:bc:84:3b:13:4b:12:d1:42:05:7b:1d:21:0a: aa:76:c0:f8:6a:18:3b:3c:33:7c:ec:a2:3c:cc:ee: de:0a:b2:f8:e7:8c:8a:82:2f:36:b9:89:1e:a8:28: 48:3a:3c:54:f9:66:4d:e2:22:fa:91:7c:5c:e8:09: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E9:FF:F9:52:22:DF:66:12:63:2E:F7:92:B7:40:EC:C2:7F:E3:F0 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:97:57:60:df:d2:80:72:55:1c:ad:0b:4c:d7:5a:8f:d2: 6b:e4:f3:f6:d9:99:93:5d:ca:9e:1b:2c:05:14:35:97:e1:ef: 7e:ff:8f:17:59:0d:f7:78:a7:ab:0e:19:95:e0:af:9c:cd:ff: ee:ea:6e:89:1e:45:71:18:a4:08:08:f1:a7:a6:19:73:9f:f1: f3:e8:c1:46:78:1d:0b:d8:45:a7:98:0f:06:60:80:3a:a9:eb: 5b:fb:7e:75:31:aa:8d:b1:ea:d3:32:c6:cb:9a:5f:a7:45:65: a4:01:12:8b:9b:60:3c:8e:6f:25:fc:be:4f:56:85:4d:54:6e: eb:b6:be:1d:7b:92:be:46:42:bd:c6:ac:2b:24:d2:7a:4f:27: d1:98:e4:86:0a:84:3e:08:cd:7c:89:8a:1a:d5:3f:bf:87:c8: 8e:dd:1e:82:71:78:1a:fd:32:9a:19:f9:41:6d:7c:2e:a0:2c: 80:a2:af:28:18:68:59:91:0b:bf:28:af:93:4e:d7:77:d7:6a: bb:1a:01:f4:33:c6:f4:c6:57:f1:bb:67:ea:b4:92:fb:df:09: de:05:be:06:01:0c:f5:9a:1a:4a:27:66:c2:2b:9e:eb:3c:8b: 6d:70:d1:0d:7a:71:b9:26:9c:fd:a0:93:46:64:cd:a7:c2:5b: 6a:8a:ca:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDNFMTExMC8GA1UEBRMoODk5MzkzOEM4NTc1MDAyODBFOEY1RTUzREMwQjNFOTMw N0FFRDRBNzAeFw0yNTA4MDkwNzQwMjNaFw0yNTA4MTYwNzQwMjNaMBgxFjAUBgNV BAMTDTY4OTZmYjY3LTg3YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQngjKi9Ub7Vro/JRifbvy3U5YKWxvIj7JBO+087VsNvhqV9m9Oe6ukhEzqy7u s0VgQjdJvBM9LuUvLxI6Hs29m6w/6OQg1kEBNDyG/WW8joCIrXZ0VW8VyXNdaxeX fATM52NO8UOdUVjehZ26wypBZ9zyV2gYiHQkQRPxY62lb9yzgAlDQkfCH71fznoX 0S+Q1pWIK1LbuZOpb2PI2FqeiX+k4Tt9DgsAEVSx9yC4p6se4e2tgbaOUu+pwFb1 qKM25ehOvIQ7E0sS0UIFex0hCqp2wPhqGDs8M3zsojzM7t4KsvjnjIqCLza5iR6o KEg6PFT5Zk3iIvqRfFzoCTX/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXOn/+VIi 32YSYy73krdA7MJ/4/AwHwYDVR0jBBgwFoAUiZOTjIV1ACgOj15T3As+kweu1Kcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEM0UxLzdDRjA3QkM2RUY0 NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVpPVGpJVjFBQ2dPajE1VDNBcy1rd2V1MUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE M0UxLzdDRjA3QkM2RUY0NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNn T2oxNVQzQXMta3dldTFLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJZrl1dg39KAclUcrQtM11qP0mvk8/bZmZNdyp4bLAUUNZfh737/jxdZ Dfd4p6sOGZXgr5zN/+7qbokeRXEYpAgI8aemGXOf8fPowUZ4HQvYRaeYDwZggDqp 61v7fnUxqo2x6tMyxsuaX6dFZaQBEoubYDyObyX8vk9WhU1Ubuu2vh17kr5GQr3G rCsk0npPJ9GY5IYKhD4IzXyJihrVP7+HyI7dHoJxeBr9MpoZ+UFtfC6gLICirygY aFmRC78or5NO13fXarsaAfQzxvTGV/G7Z+q0kvvfCd4FvgYBDPWaGkonZsIrnus8 i21w0Q16cbkmnP2gk0ZkzafCW2qKyow= -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:58 2025 by rpki-client