$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: /5HUupbKh+/q93GYIz0gTaDnPWPFpiMHrWtqF0JdPQw= Subject key identifier: 1A:19:97:41:64:7F:08:A4:A9:49:7F:3E:45:8D:87:68:D3:8F:FC:1B Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: D3 Signing time: Fri 15 Aug 2025 06:11:56 +0000 Manifest this update: Fri 15 Aug 2025 06:11:55 +0000 Manifest next update: Fri 22 Aug 2025 06:11:55 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: 514HCmlJ9G2Fp8KogEMzYf7V1/C38o/g+3UuxHUFtt8=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: AwYKGbCuVNqR5TnlD+W51Ob1Ci3CK6EmFUtU8criHKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 06:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: Aug 15 06:11:55 2025 GMT Not After : Aug 22 06:11:55 2025 GMT Subject: CN=689ecfab-3c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:da:3a:94:e4:da:75:fb:c1:4a:2e:68:7a: bc:90:a0:27:84:26:85:4b:60:4d:57:a1:e4:f3:20: 4e:8d:ca:e1:1a:a6:47:e1:39:78:06:0c:ee:72:ac: 3a:11:d0:0a:8d:9e:c5:cd:a3:23:6e:09:c7:b5:5f: ea:c1:27:cc:a4:c5:20:f3:f5:f8:ae:7a:44:05:63: 64:39:8f:be:e3:42:12:25:c8:9a:40:83:c3:35:42: 50:09:ee:73:15:e1:7f:61:cb:55:32:d3:72:6e:0a: 11:99:bc:ad:c2:55:c8:72:54:01:84:90:04:1f:e2: 05:ad:61:4c:13:a4:b3:42:06:94:1e:d4:84:83:bf: 6f:4c:34:99:60:fd:73:5d:3f:96:3b:28:80:f9:f2: 2c:18:ec:d4:27:bd:6d:a7:cc:81:fe:5a:82:6a:fe: 5e:5a:5d:15:a6:dc:c6:24:bb:95:49:0d:cf:9a:34: 95:8d:1a:c3:67:88:ad:cb:f8:56:19:fb:95:69:97: 3e:e2:c7:7d:4d:b4:23:c4:a2:8f:9b:46:23:97:4c: fa:2b:8d:4f:64:43:09:b3:4f:b4:a4:a0:d0:1d:0b: b3:88:44:31:2d:44:dc:60:c7:69:5f:c6:37:b7:6f: 1a:43:f5:00:3e:da:ad:04:48:9c:f6:99:05:8b:f2: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:19:97:41:64:7F:08:A4:A9:49:7F:3E:45:8D:87:68:D3:8F:FC:1B X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:5a:be:62:c8:d9:a8:e8:3d:4e:0b:5e:2b:05:11:4d:35:04: a4:a8:27:12:60:fb:b3:45:3f:6c:b6:4d:06:c7:13:d4:20:56: 98:30:37:72:d1:39:6a:7b:ae:2a:58:ec:44:29:40:fc:79:6a: 62:cf:57:cb:e4:b4:b5:ba:f6:ba:c5:4a:d8:87:0f:a2:8b:b0: 24:5f:34:be:2b:da:c7:25:36:ce:f5:74:15:b7:2b:4d:83:cd: ae:06:40:9b:11:ae:07:8a:0c:64:f4:5e:b5:ef:8d:b3:9a:41: 80:de:cb:96:55:d5:0a:e3:d2:b1:52:fe:cd:c2:8d:0f:ad:7c: 61:d1:30:20:7c:1f:e7:86:54:8d:86:0c:15:ed:82:13:63:0c: d8:49:21:20:50:84:a9:ac:93:3e:b6:83:98:4b:ee:e8:ad:22: 5c:7b:32:c6:18:52:16:4f:ac:26:3e:6a:15:b4:81:85:af:a7: 8b:31:9a:71:d4:05:d2:a0:f7:90:0f:93:7b:86:f5:25:bf:97: ed:0e:4c:cc:23:85:ed:ac:9b:46:a4:3a:20:d2:f3:58:7c:6b: 16:72:cd:fc:a8:ec:f8:cc:e2:bf:d1:04:c9:4e:56:d9:47:60: 26:c9:69:25:d7:a0:c2:a1:57:b2:3f:8d:79:7a:2d:33:57:39: 28:5a:21:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwODE1MDYxMTU1WhcNMjUwODIyMDYxMTU1WjAYMRYwFAYD VQQDEw02ODllY2ZhYi0zYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFLaOpTk2nX7wUouaHq8kKAnhCaFS2BNV6Hk8yBOjcrhGqZH4Tl4Bgzucqw6 EdAKjZ7FzaMjbgnHtV/qwSfMpMUg8/X4rnpEBWNkOY++40ISJciaQIPDNUJQCe5z FeF/YctVMtNybgoRmbytwlXIclQBhJAEH+IFrWFME6SzQgaUHtSEg79vTDSZYP1z XT+WOyiA+fIsGOzUJ71tp8yB/lqCav5eWl0VptzGJLuVSQ3PmjSVjRrDZ4ity/hW GfuVaZc+4sd9TbQjxKKPm0Yjl0z6K41PZEMJs0+0pKDQHQuziEQxLUTcYMdpX8Y3 t28aQ/UAPtqtBEic9pkFi/L9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoZl0Fk fwikqUl/PkWNh2jTj/wbMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmWr5iyNmo6D1OC14rBRFNNQSkqCcSYPuzRT9stk0GxxPUIFaYMDdy 0Tlqe64qWOxEKUD8eWpiz1fL5LS1uva6xUrYhw+ii7AkXzS+K9rHJTbO9XQVtytN g82uBkCbEa4Higxk9F61742zmkGA3suWVdUK49KxUv7Nwo0PrXxh0TAgfB/nhlSN hgwV7YITYwzYSSEgUISprJM+toOYS+7orSJcezLGGFIWT6wmPmoVtIGFr6eLMZpx 1AXSoPeQD5N7hvUlv5ftDkzMI4XtrJtGpDog0vNYfGsWcs38qOz4zOK/0QTJTlbZ R2AmyWkl16DCoVeyP415ei0zVzkoWiEg -----END CERTIFICATE-----Generated at Sat Aug 16 05:36:56 2025 by rpki-client