$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: kng460TeMAtkicZcv8YOCJVBTIKnMwizozYuczuaVOM= Subject key identifier: 5F:CB:5E:A9:45:CD:E6:94:50:8D:53:F3:87:2C:58:84:0F:2C:A1:EF Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 06D0 Signing time: Sat 19 Jul 2025 00:02:54 +0000 Manifest this update: Sat 19 Jul 2025 00:02:53 +0000 Manifest next update: Sat 26 Jul 2025 00:02:53 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: 2bVknME+KDvGRaCm/nG8AhTkCizdRogNz6saVvRE35k=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Jul 19 00:02:53 2025 GMT Not After : Jul 26 00:02:53 2025 GMT Subject: CN=687ae0ad-d42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:a0:8f:e9:96:59:e4:b1:64:32:6b:73:20: 7a:ad:e5:0f:a5:5c:c9:74:61:a5:03:f7:39:f4:e4: 85:e4:86:94:bf:f2:be:bd:d4:df:ad:9e:44:d6:a0: b2:dc:2a:d4:ce:96:30:5a:e0:c3:bc:df:fb:52:29: df:cd:ef:92:21:4f:04:e0:d4:2e:64:da:0f:5e:95: 22:1f:fa:a6:2b:6a:9d:21:a8:4a:54:b5:28:08:5e: df:18:ad:b5:6c:6a:5e:ed:0c:d0:fe:6e:35:c9:e2: 62:43:6a:2d:49:bf:e2:b8:cb:14:f5:64:cc:f8:d9: 5f:72:19:d5:1b:9b:60:84:eb:34:57:50:e0:93:e8: 7f:e4:8b:cb:20:a5:5e:17:ae:af:20:f6:25:f4:ad: 9d:37:39:8a:0a:d3:c0:ca:7e:8e:20:1f:ca:25:fd: cf:67:bb:be:7d:67:96:c5:d3:5d:02:55:36:6c:ee: 9d:2b:ee:b8:ff:15:76:0c:9f:a4:6f:d9:11:fc:51: 08:cd:e8:cb:70:5e:ce:90:33:1a:e1:5a:c3:a4:1d: c3:3b:04:cd:f0:52:9f:30:3e:a9:e7:69:8e:2f:b6: 6b:bd:5e:4f:49:66:42:ef:d7:0f:93:54:15:07:06: ff:92:0d:ab:ac:85:8c:f5:27:75:9a:48:20:ad:a8: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:5E:A9:45:CD:E6:94:50:8D:53:F3:87:2C:58:84:0F:2C:A1:EF X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:53:50:9f:1a:c0:ef:66:f7:5d:53:09:b5:67:3d:de:1c:d7: a5:77:a7:5a:15:42:d7:b0:ae:f7:2f:92:3f:36:46:c3:da:7a: 1b:f8:ce:1c:48:c7:4f:ef:03:79:67:e7:6d:80:5e:38:55:95: bf:00:3e:3d:56:a9:fd:5c:21:69:fd:ac:b9:6f:67:4a:16:2c: c3:07:7e:af:21:af:1c:73:9c:cc:de:cd:c4:4b:fb:dc:bf:30: b6:5b:88:94:7b:b2:9f:fb:68:b7:bc:cc:f4:25:fd:f6:e9:99: 10:18:f1:4c:d0:24:dc:98:0b:da:c9:82:7f:f2:01:e7:01:f3: 4c:7f:31:f0:a0:76:91:61:3e:da:d3:9e:3a:e0:a4:4b:b9:a1: fb:a8:47:72:d0:b9:85:b2:21:9c:b5:78:28:94:eb:bf:3f:0e: 6d:94:54:8d:7e:32:ae:08:4d:ee:26:31:6b:04:96:54:e0:b2: 4a:d4:ce:b3:31:c8:7d:fa:f0:05:7a:b3:31:d7:e4:57:1a:7f: d9:af:39:1a:0a:f7:17:15:2f:13:38:f2:8b:53:63:2c:2a:ab: f8:84:a4:5a:50:dd:55:a0:c2:04:c2:58:a6:f9:fb:1d:71:41: 2d:83:8d:8f:36:47:81:b6:95:46:59:74:bf:b2:d7:f1:34:7d: a4:a9:af:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjUwNzE5MDAwMjUzWhcNMjUwNzI2MDAwMjUzWjAYMRYwFAYD VQQDEw02ODdhZTBhZC1kNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+ugj+mWWeSxZDJrcyB6reUPpVzJdGGlA/c59OSF5IaUv/K+vdTfrZ5E1qCy 3CrUzpYwWuDDvN/7Uinfze+SIU8E4NQuZNoPXpUiH/qmK2qdIahKVLUoCF7fGK21 bGpe7QzQ/m41yeJiQ2otSb/iuMsU9WTM+NlfchnVG5tghOs0V1Dgk+h/5IvLIKVe F66vIPYl9K2dNzmKCtPAyn6OIB/KJf3PZ7u+fWeWxdNdAlU2bO6dK+64/xV2DJ+k b9kR/FEIzejLcF7OkDMa4VrDpB3DOwTN8FKfMD6p52mOL7ZrvV5PSWZC79cPk1QV Bwb/kg2rrIWM9Sd1mkggrajpHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/LXqlF zeaUUI1T84csWIQPLKHvMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZU1CfGsDvZvddUwm1Zz3eHNeld6daFULXsK73L5I/NkbD2nob+M4c SMdP7wN5Z+dtgF44VZW/AD49Vqn9XCFp/ay5b2dKFizDB36vIa8cc5zM3s3ES/vc vzC2W4iUe7Kf+2i3vMz0Jf326ZkQGPFM0CTcmAvayYJ/8gHnAfNMfzHwoHaRYT7a 05464KRLuaH7qEdy0LmFsiGctXgolOu/Pw5tlFSNfjKuCE3uJjFrBJZU4LJK1M6z Mch9+vAFerMx1+RXGn/ZrzkaCvcXFS8TOPKLU2MsKqv4hKRaUN1VoMIEwlim+fsd cUEtg42PNkeBtpVGWXS/stfxNH2kqa8m -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:30 2025 by rpki-client