$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: BxWwQelUW6N1zjspMHYKsUuPAksBOwL3AYZNKqzh4Ok= Subject key identifier: 6B:51:82:D8:F8:47:DE:54:A5:CD:1E:A4:F5:70:6A:32:75:4B:B2:9D Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 8E Signing time: Mon 11 Aug 2025 06:42:52 +0000 Manifest this update: Mon 11 Aug 2025 06:42:52 +0000 Manifest next update: Mon 18 Aug 2025 06:42:52 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: iHHbOOk+jsZoKcV+PqqYISktMBX9lowPTjNvpTD605g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Aug 11 06:42:52 2025 GMT Not After : Aug 18 06:42:52 2025 GMT Subject: CN=689990ec-3e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:5c:1a:fc:08:ee:69:4e:3f:26:dc:16:0f: bb:ae:6c:9c:cf:93:44:80:f3:9b:cc:74:2e:57:2e: ea:d3:5d:aa:e3:49:31:53:d9:41:a2:fb:a8:d0:9d: 76:2a:56:4b:b2:43:59:c1:fd:a2:47:60:3e:4b:cf: d4:62:d4:5f:52:54:e7:a2:16:58:d5:a1:e6:11:c3: e5:c7:65:cd:dc:5a:66:2b:35:1b:53:cb:1e:f3:4d: 17:b3:77:04:ff:45:f0:e1:6b:b7:d0:29:5c:86:e0: aa:f1:61:6a:9c:d1:8e:eb:c9:54:ca:0f:a6:39:6b: 3f:1b:3f:da:0d:66:70:2b:90:0d:3f:26:2a:11:b6: 52:c9:23:6b:e1:87:08:5f:92:4b:d4:fa:41:2d:5e: 32:bb:6d:2b:7a:ee:82:74:b7:d6:a7:80:ee:94:9b: 2e:0f:ee:92:3e:da:56:cd:37:59:c0:9c:3f:ff:19: a9:9a:8f:b8:69:bd:77:9c:85:5a:bd:b8:5f:b6:5f: 07:20:f0:fb:b1:4a:2d:fd:9b:d0:76:60:b8:94:59: 08:00:cd:70:3c:22:32:ff:b3:5f:09:a3:22:2b:f3: ee:b0:2c:2a:5d:4f:c3:66:51:bf:71:57:8b:60:63: 86:9e:57:67:05:f0:51:3e:01:f6:93:3d:68:d1:9b: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:82:D8:F8:47:DE:54:A5:CD:1E:A4:F5:70:6A:32:75:4B:B2:9D X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d4:20:25:8c:75:f8:8a:d7:31:b5:7b:c1:23:d2:9e:7e:d2: a1:44:7b:d0:f9:6d:df:8d:73:fd:d6:8b:f6:c2:81:eb:c6:ab: 0a:be:45:74:7f:67:32:c6:93:7f:f0:84:30:70:25:b2:c9:d4: 4c:b8:b3:e0:4f:4f:33:2d:98:d5:d8:bd:43:6b:96:2e:51:44: 44:0a:f1:4b:7a:37:e3:66:0c:de:0b:89:9c:a5:0f:e0:42:a4: 47:2b:65:97:b8:0a:6a:93:a2:21:59:b3:e2:2a:5c:77:26:9a: c8:d9:dd:83:83:2e:69:15:21:71:3a:a9:9a:e7:ef:2f:10:e7: f3:90:12:f9:07:5d:e9:86:f6:21:0f:41:52:3b:88:da:38:6e: cc:23:50:f3:bf:bc:2f:d7:0d:67:6b:60:fc:62:b9:d1:e8:1c: 59:da:72:df:ec:87:6f:22:36:31:29:fb:77:21:04:0a:6e:6e: 91:56:e0:bb:1f:ec:bb:99:64:87:75:5a:6b:26:53:90:53:16: de:18:60:9f:3e:44:7b:fd:36:15:d6:7a:e4:5a:79:63:10:8a: 51:3f:63:f7:92:27:4a:f5:d4:ac:78:81:29:20:16:f6:48:c9: 56:13:d2:50:e9:0e:16:ef:a6:d6:f5:0f:0e:ee:38:9d:1c:38: d5:e2:e5:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUwODExMDY0MjUyWhcNMjUwODE4MDY0MjUyWjAYMRYwFAYD VQQDEw02ODk5OTBlYy0zZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5FcGvwI7mlOPybcFg+7rmycz5NEgPObzHQuVy7q012q40kxU9lBovuo0J12 KlZLskNZwf2iR2A+S8/UYtRfUlTnohZY1aHmEcPlx2XN3FpmKzUbU8se800Xs3cE /0Xw4Wu30ClchuCq8WFqnNGO68lUyg+mOWs/Gz/aDWZwK5ANPyYqEbZSySNr4YcI X5JL1PpBLV4yu20reu6CdLfWp4DulJsuD+6SPtpWzTdZwJw//xmpmo+4ab13nIVa vbhftl8HIPD7sUot/ZvQdmC4lFkIAM1wPCIy/7NfCaMiK/PusCwqXU/DZlG/cVeL YGOGnldnBfBRPgH2kz1o0ZssNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtRgtj4 R95Upc0epPVwajJ1S7KdMB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG1CAljHX4itcxtXvBI9KeftKhRHvQ+W3fjXP91ov2woHrxqsKvkV0 f2cyxpN/8IQwcCWyydRMuLPgT08zLZjV2L1Da5YuUURECvFLejfjZgzeC4mcpQ/g QqRHK2WXuApqk6IhWbPiKlx3JprI2d2Dgy5pFSFxOqma5+8vEOfzkBL5B13phvYh D0FSO4jaOG7MI1Dzv7wv1w1na2D8YrnR6BxZ2nLf7IdvIjYxKft3IQQKbm6RVuC7 H+y7mWSHdVprJlOQUxbeGGCfPkR7/TYV1nrkWnljEIpRP2P3kidK9dSseIEpIBb2 SMlWE9JQ6Q4W76bW9Q8O7jidHDjV4uWd -----END CERTIFICATE-----Generated at Mon Aug 11 08:53:55 2025 by rpki-client