$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: lTgOhiarT/9PuuOPX3hCNL2iBbrdu5UAGp05nmyOaaE= Subject key identifier: 07:16:35:4F:1D:00:97:C0:09:AC:CA:F9:FD:9A:1D:88:7B:23:36:77 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01EB Signing time: Mon 11 Aug 2025 02:41:51 +0000 Manifest this update: Mon 11 Aug 2025 02:41:50 +0000 Manifest next update: Mon 18 Aug 2025 02:41:50 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: q9HYpJf6BBWAbb1a3S9q3ZK0MF6Il1pTqQg+4SX/674=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Aug 11 02:41:50 2025 GMT Not After : Aug 18 02:41:50 2025 GMT Subject: CN=6899586e-49de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:9e:79:26:36:81:f1:02:11:63:e3:f3:06: d8:e9:7f:10:f8:96:6e:d9:95:34:15:b7:2a:19:08: 3d:c5:c3:10:53:f7:4b:15:52:c8:99:c8:88:48:d4: 28:26:c8:40:76:ff:b6:92:b6:1d:4e:98:88:9d:0d: 2d:3c:29:96:b9:6c:db:60:32:4c:a9:e5:e4:23:2c: a2:44:e7:61:62:35:b2:53:98:61:a1:bc:72:ab:27: b9:d2:00:da:d2:d4:1c:14:d4:24:cc:0f:6b:35:46: 76:ab:b3:b5:1c:7f:9c:c7:86:16:b0:25:6e:2a:09: 36:74:1b:88:e7:58:d2:d9:2c:d7:c5:6b:49:6a:db: e7:a2:41:8e:1c:24:95:7a:c3:ab:27:74:40:89:e3: 3f:56:8f:99:31:be:56:db:c0:22:07:23:3b:7f:51: 04:92:94:bf:e8:2b:e0:aa:91:cb:08:6f:c3:58:45: 26:30:af:40:01:6b:f1:fb:a4:1e:ee:eb:ff:50:d3: 80:33:b3:d1:4c:9e:96:7c:6e:ea:f8:26:64:99:df: f4:2c:d0:f2:96:1c:95:1b:f1:ac:83:7f:31:92:13: 97:f1:d5:f4:f2:8e:fa:39:bb:2f:b5:66:7e:4a:ea: 2e:68:4f:33:65:58:17:13:1f:d3:a0:e5:2e:9c:67: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:35:4F:1D:00:97:C0:09:AC:CA:F9:FD:9A:1D:88:7B:23:36:77 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f1:10:09:ea:78:66:8e:b8:2c:b9:83:c1:dd:44:65:01:56: df:b2:c6:b5:9b:f4:4d:38:9f:9b:f5:3c:13:01:83:42:5a:b3: 82:40:c3:07:66:2a:c3:8a:2c:a7:b2:8b:62:be:fd:be:a8:3b: bf:ad:62:1f:c0:28:f6:7a:6d:7b:32:55:e2:06:be:e8:51:d4: 40:f3:e3:23:e1:7a:1b:26:72:b1:7f:e9:7c:68:ab:49:16:6a: fe:c9:dd:50:1c:90:42:96:5f:5a:8a:04:c9:9f:3c:b0:93:1d: 4a:6d:28:c6:02:dd:95:3e:8d:09:13:01:91:47:cb:b3:d0:0f: 04:d1:f4:0b:f0:ac:80:a4:60:bd:31:27:64:3b:39:9c:db:93: b8:b2:b0:10:1b:c9:4b:5b:1d:d3:31:e4:12:a7:4e:da:5f:11: f5:24:f2:ea:76:b1:56:09:c3:5d:90:d4:02:1a:56:92:d4:f2: bd:5a:57:f1:b8:99:c4:f3:94:9e:7c:61:eb:eb:ff:d6:5b:8f: 29:be:5b:0f:b9:87:75:2e:07:30:97:96:9f:f7:fe:2a:9f:6e: 02:1c:6f:7b:cd:99:ca:be:e3:19:d6:1b:6c:b2:15:f5:d9:a5: cd:c8:7b:3b:aa:5d:bf:d2:c9:04:43:59:3b:e9:42:1b:8c:c3: c3:df:d3:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwODExMDI0MTUwWhcNMjUwODE4MDI0MTUwWjAYMRYwFAYD VQQDEw02ODk5NTg2ZS00OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnWeeSY2gfECEWPj8wbY6X8Q+JZu2ZU0FbcqGQg9xcMQU/dLFVLImciISNQo JshAdv+2krYdTpiInQ0tPCmWuWzbYDJMqeXkIyyiROdhYjWyU5hhobxyqye50gDa 0tQcFNQkzA9rNUZ2q7O1HH+cx4YWsCVuKgk2dBuI51jS2SzXxWtJatvnokGOHCSV esOrJ3RAieM/Vo+ZMb5W28AiByM7f1EEkpS/6CvgqpHLCG/DWEUmMK9AAWvx+6Qe 7uv/UNOAM7PRTJ6WfG7q+CZkmd/0LNDylhyVG/Gsg38xkhOX8dX08o76ObsvtWZ+ SuouaE8zZVgXEx/ToOUunGe2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcWNU8d AJfACazK+f2aHYh7IzZ3MB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN8RAJ6nhmjrgsuYPB3URlAVbfssa1m/RNOJ+b9TwTAYNCWrOCQMMH ZirDiiynsotivv2+qDu/rWIfwCj2em17MlXiBr7oUdRA8+Mj4XobJnKxf+l8aKtJ Fmr+yd1QHJBCll9aigTJnzywkx1KbSjGAt2VPo0JEwGRR8uz0A8E0fQL8KyApGC9 MSdkOzmc25O4srAQG8lLWx3TMeQSp07aXxH1JPLqdrFWCcNdkNQCGlaS1PK9Wlfx uJnE85SefGHr6//WW48pvlsPuYd1Lgcwl5af9/4qn24CHG97zZnKvuMZ1htsshX1 2aXNyHs7ql2/0skEQ1k76UIbjMPD39Ni -----END CERTIFICATE-----Generated at Mon Aug 11 09:58:58 2025 by rpki-client