$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json) Hash identifier: kL+/qgqtGJgGa5sjazXPOiu+xk/Ka5VA8L4bg958SsQ= Subject key identifier: 7E:64:2F:D3:66:80:51:3A:82:5B:9A:9B:90:7E:31:FD:C9:78:ED:2E Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft Manifest number: F5 Signing time: Sat 09 Aug 2025 05:39:37 +0000 Manifest this update: Sat 09 Aug 2025 05:39:37 +0000 Manifest next update: Sat 16 Aug 2025 05:39:37 +0000 Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: l8k+BuQEx0cUCFsnUfpyaB6xFCMh8XNtTgSctTN77RU=) 2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: rdcsVeSD/0uRXsupB+gdsyd8ZZ4QY82jQKGKV8TuBBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Validity Not Before: Aug 9 05:39:37 2025 GMT Not After : Aug 16 05:39:37 2025 GMT Subject: CN=6896df19-c2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:c2:6f:8a:f1:12:d4:d9:cd:63:98:df:df: 53:d7:42:a7:8e:4e:e0:f1:c7:5f:85:58:77:4e:15: 5b:93:35:3c:f5:d1:b0:68:a3:cb:51:a1:bd:4d:e0: f4:3c:e6:9c:c2:89:69:0f:f3:e1:e4:ae:1a:9f:ac: d6:e6:0d:d8:22:03:26:2f:9f:89:09:61:b4:ad:93: 0f:a9:e6:f8:e9:a3:72:37:0f:66:f8:23:df:44:19: 11:0f:7f:9d:30:db:49:ac:89:81:50:2e:40:8d:9d: c0:32:f4:60:8c:3c:4d:ad:a3:ca:ef:c9:a5:ef:f9: ea:89:b2:86:61:96:77:a7:b7:8b:a8:d0:a2:00:bb: 6f:db:ce:c5:d9:ab:65:10:17:f4:27:f9:51:ef:f7: 40:73:fd:4c:aa:b9:64:8e:81:ef:f1:a0:9d:9e:83: 43:13:f0:0c:6f:58:b9:30:df:21:dc:97:7b:9e:d0: dd:cc:d0:23:ea:92:de:94:82:75:99:0b:13:41:5e: c0:46:db:4f:29:58:29:f7:73:5c:8f:dc:11:6b:6a: af:ea:05:5a:85:19:f9:3d:5a:56:da:53:fb:9c:88: 33:07:1b:a0:0c:c5:af:e9:0b:06:71:43:1a:cf:65: 1e:90:21:6b:a7:4e:e5:85:9b:20:d0:8d:55:72:66: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:64:2F:D3:66:80:51:3A:82:5B:9A:9B:90:7E:31:FD:C9:78:ED:2E X509v3 Authority Key Identifier: keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:95:02:f5:e1:3c:1a:32:88:61:b7:15:26:7d:d5:6e:7a:77: 8c:27:cd:13:aa:fc:b5:10:04:25:ac:1b:9a:87:31:d7:ec:67: 97:3f:0b:b4:17:32:35:77:c2:5d:62:8c:f0:07:c7:84:fb:70: 66:b4:60:4f:e6:f9:78:ae:0e:1e:e6:41:46:47:36:bb:ed:60: ad:8a:e3:c4:f7:58:ae:b3:ca:22:b0:b3:e4:a8:f0:e6:39:3f: 72:b2:14:e3:0f:05:d7:5b:c2:a9:0c:e3:cb:be:ab:10:12:97: ac:5a:a5:1d:ca:6f:09:ee:e7:5c:1f:30:8d:a6:cf:0b:c5:b3: ca:27:ab:5f:aa:7a:00:b6:68:73:2f:15:c8:b1:26:f4:38:a0: 1d:ff:22:9e:79:87:b3:fd:53:c5:17:1d:d1:cb:d1:61:88:39: 34:4b:ea:67:65:0c:6d:d9:65:1b:60:ff:cd:f0:06:7b:a9:52: 63:6a:0f:4b:f5:7b:4d:1c:a5:da:dc:96:33:f6:13:75:27:43: da:40:fc:47:6c:b0:d1:f5:a4:77:a0:93:94:fe:54:ff:68:c8: 7f:18:23:3a:43:05:8d:06:61:3f:b3:b7:8c:b8:c5:1b:b4:6d: 44:47:30:e2:04:be:43:11:3a:c3:ae:57:96:9c:57:2b:3e:9c: 89:d2:01:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz MkZBQkQ2QzkwHhcNMjUwODA5MDUzOTM3WhcNMjUwODE2MDUzOTM3WjAYMRYwFAYD VQQDEw02ODk2ZGYxOS1jMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvPCb4rxEtTZzWOY399T10Knjk7g8cdfhVh3ThVbkzU89dGwaKPLUaG9TeD0 POacwolpD/Ph5K4an6zW5g3YIgMmL5+JCWG0rZMPqeb46aNyNw9m+CPfRBkRD3+d MNtJrImBUC5AjZ3AMvRgjDxNraPK78ml7/nqibKGYZZ3p7eLqNCiALtv287F2atl EBf0J/lR7/dAc/1MqrlkjoHv8aCdnoNDE/AMb1i5MN8h3Jd7ntDdzNAj6pLelIJ1 mQsTQV7ARttPKVgp93Ncj9wRa2qv6gVahRn5PVpW2lP7nIgzBxugDMWv6QsGcUMa z2UekCFrp07lhZsg0I1VcmZeIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5kL9Nm gFE6gluam5B+Mf3JeO0uMB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH SFNkYmpQeDVSWTB5LXIxc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVlQL14TwaMohhtxUmfdVueneMJ80Tqvy1EAQlrBuahzHX7GeXPwu0 FzI1d8JdYozwB8eE+3BmtGBP5vl4rg4e5kFGRza77WCtiuPE91ius8oisLPkqPDm OT9yshTjDwXXW8KpDOPLvqsQEpesWqUdym8J7udcHzCNps8LxbPKJ6tfqnoAtmhz LxXIsSb0OKAd/yKeeYez/VPFFx3Ry9FhiDk0S+pnZQxt2WUbYP/N8AZ7qVJjag9L 9XtNHKXa3JYz9hN1J0PaQPxHbLDR9aR3oJOU/lT/aMh/GCM6QwWNBmE/s7eMuMUb tG1ERzDiBL5DETrDrleWnFcrPpyJ0gHl -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:20 2025 by rpki-client