$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: xqO2bURbOsYy3Vr8krdVp5XjRmB/shPvE/bA3kK4LCI= Subject key identifier: 26:7C:03:A2:3C:FF:6E:2F:4C:2F:24:16:55:22:7A:35:3C:76:F5:53 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 065E Signing time: Sun 20 Jul 2025 22:39:53 +0000 Manifest this update: Sun 20 Jul 2025 22:39:53 +0000 Manifest next update: Sun 27 Jul 2025 22:39:53 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: nz7KM0pvOE3sObWP5SbnxTcPuyhsjVO5u2lRdGUJKas=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Jul 20 22:39:53 2025 GMT Not After : Jul 27 22:39:53 2025 GMT Subject: CN=687d7039-792a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:1a:38:22:4a:71:9e:c4:5a:cc:d0:d0:cd: d4:3c:33:9e:82:b4:b7:93:83:fb:25:2b:32:af:94: 1b:9e:2c:0e:94:3c:f8:a9:76:b4:15:b5:41:0a:f8: 29:98:d5:59:6e:6a:0d:1b:61:1f:2b:68:f9:ea:4b: db:66:ab:56:fc:10:f7:44:dc:84:3f:b7:ee:65:69: a8:9b:31:20:c4:f1:d0:45:48:34:1c:f4:c1:b7:6a: 9a:fb:79:40:31:ae:51:4a:d7:fd:8f:cc:d3:54:60: 2c:6f:5c:13:a2:f4:2f:63:44:19:25:38:c1:14:eb: 00:43:e0:aa:3c:db:ed:16:d9:23:d5:34:f3:98:4d: 81:18:78:72:d4:bc:32:53:3e:ce:a2:56:04:b1:6e: 19:a1:4b:60:1b:58:e9:67:dc:f5:1b:0d:15:a6:09: 79:63:6a:e0:5e:f7:d9:39:f6:f4:90:0d:9e:0f:4a: df:4e:d8:74:00:93:88:91:b4:f8:ad:43:df:2e:9a: 64:88:bd:03:61:0f:bb:a0:c0:61:0c:31:fc:b6:3c: dc:56:89:46:ba:c8:27:f2:fc:b5:b8:e2:62:14:9d: 01:32:00:20:e9:76:8c:b0:c2:c8:1e:61:a1:d8:47: a7:8a:8e:32:5a:91:17:f1:ec:56:79:5b:f8:78:bc: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7C:03:A2:3C:FF:6E:2F:4C:2F:24:16:55:22:7A:35:3C:76:F5:53 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:62:e0:2c:b5:9c:21:9e:a9:b3:86:15:bb:dc:db:1d:e2:01: d5:4b:5a:26:31:8d:71:ff:37:e6:be:d3:88:76:4d:ce:0c:86: b0:50:2d:b2:4f:39:67:b6:ba:6e:f8:fc:32:49:01:d2:8e:95: 22:ff:e1:4c:b7:bc:1d:9e:fc:73:50:ba:4e:93:9a:32:10:8c: 99:ef:dc:2c:2a:cc:f4:dd:6a:4a:c0:75:e0:f6:f4:8e:b3:7c: ca:36:f3:57:27:0f:ba:9a:3f:40:07:f0:97:ee:d7:a9:5f:0c: 54:16:7a:a7:2f:5f:6f:27:ab:d8:03:4d:94:c2:6f:b1:a4:eb: 0f:70:54:83:a2:e1:6d:37:c4:37:60:33:42:ea:33:f9:16:f0: f5:18:2c:f7:c3:f7:91:2c:3f:10:11:b6:97:3b:4b:1e:7f:d7: d9:16:83:ee:8d:32:12:ec:79:0f:8d:1c:9e:38:70:81:bd:b2: 39:d5:68:43:90:60:ec:07:80:5a:af:34:d0:e8:ca:6e:d7:cf: a2:c2:f8:29:bd:9b:72:65:8e:2e:19:4d:c5:b0:d5:a9:f1:cd: 38:ac:21:d6:ba:81:a5:a9:05:22:5a:9b:b6:97:66:5d:8d:30: 13:12:96:55:0a:b6:56:1e:ec:1d:f8:79:8a:f2:47:95:88:7b: 6a:3e:ab:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwNzIwMjIzOTUzWhcNMjUwNzI3MjIzOTUzWjAYMRYwFAYD VQQDEw02ODdkNzAzOS03OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPcaOCJKcZ7EWszQ0M3UPDOegrS3k4P7JSsyr5QbniwOlDz4qXa0FbVBCvgp mNVZbmoNG2EfK2j56kvbZqtW/BD3RNyEP7fuZWmomzEgxPHQRUg0HPTBt2qa+3lA Ma5RStf9j8zTVGAsb1wTovQvY0QZJTjBFOsAQ+CqPNvtFtkj1TTzmE2BGHhy1Lwy Uz7OolYEsW4ZoUtgG1jpZ9z1Gw0Vpgl5Y2rgXvfZOfb0kA2eD0rfTth0AJOIkbT4 rUPfLppkiL0DYQ+7oMBhDDH8tjzcVolGusgn8vy1uOJiFJ0BMgAg6XaMsMLIHmGh 2Eenio4yWpEX8exWeVv4eLzTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ8A6I8 /24vTC8kFlUiejU8dvVTMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtYuAstZwhnqmzhhW73Nsd4gHVS1omMY1x/zfmvtOIdk3ODIawUC2y Tzlntrpu+PwySQHSjpUi/+FMt7wdnvxzULpOk5oyEIyZ79wsKsz03WpKwHXg9vSO s3zKNvNXJw+6mj9AB/CX7tepXwxUFnqnL19vJ6vYA02Uwm+xpOsPcFSDouFtN8Q3 YDNC6jP5FvD1GCz3w/eRLD8QEbaXO0sef9fZFoPujTIS7HkPjRyeOHCBvbI51WhD kGDsB4BarzTQ6Mpu18+iwvgpvZtyZY4uGU3FsNWp8c04rCHWuoGlqQUiWpu2l2Zd jTATEpZVCrZWHuwd+HmK8keViHtqPqt4 -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:10 2025 by rpki-client