$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json) Hash identifier: gL2qBaRLXHoCaUL7IKjJSdZ2cITLaOkWGnqcKhWMa+k= Subject key identifier: 92:80:E3:CC:B5:47:DA:67:1B:AF:18:71:A5:92:E6:3A:BA:9E:78:6B Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft Manifest number: 1391 Signing time: Fri 18 Jul 2025 19:49:39 +0000 Manifest this update: Fri 18 Jul 2025 19:49:39 +0000 Manifest next update: Fri 25 Jul 2025 19:49:39 +0000 Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: VG2CQpOR3cOYoGl6Xq8jZSiz08olMl4cwGjjjL6EfpY=) 2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: /dfKSmCCPzovaQnLyJDXl3OjPhb/TsvQWem8YYEiMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Jul 18 19:49:39 2025 GMT Not After : Jul 25 19:49:39 2025 GMT Subject: CN=687aa553-25e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:d7:e8:d9:a6:c3:e3:80:54:7e:a8:c4:4f: 25:e0:81:a2:bc:c9:cf:b1:2a:5b:aa:6b:03:1c:09: 36:05:30:b3:2e:e1:a6:cf:c3:9b:6f:9b:46:f0:69: a6:c9:44:6d:02:20:8a:60:c4:29:a2:97:41:f8:6d: 12:6c:e5:67:72:eb:3d:48:68:f4:38:6b:7f:38:17: 53:04:da:6f:4a:6a:a1:b5:9a:0d:47:3e:74:ca:ae: 5f:12:73:cb:4b:cb:7e:dc:bf:fa:bb:43:88:72:a9: 31:13:0c:5f:e7:97:2e:48:c1:02:f6:30:8d:11:08: 5a:5d:92:6c:49:a4:ac:22:f9:23:7a:f6:2d:88:1e: c3:d4:0b:c3:bf:6f:81:1c:65:80:23:32:55:c4:e2: 5e:56:f6:1b:6b:98:6f:3e:06:0a:cb:4c:9f:a0:ac: 1c:61:f5:37:cd:6f:fa:cd:eb:69:29:e9:18:49:b7: cd:48:b8:71:e8:f7:01:83:03:89:a7:6c:46:53:bb: 5e:c3:c9:90:a4:60:f1:64:1d:61:ae:b8:c0:f3:c7: 5a:f7:af:c2:e1:ba:f2:b7:ae:84:25:94:b0:05:69: a6:e1:5a:42:e6:46:e4:ff:a5:9e:89:f0:c8:84:cb: 46:ff:c8:1b:65:80:0a:e0:80:fb:96:f6:1b:2a:f9: eb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:E3:CC:B5:47:DA:67:1B:AF:18:71:A5:92:E6:3A:BA:9E:78:6B X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b1:06:c2:24:5f:ac:ac:de:38:f4:1b:7c:89:d0:18:c7:02: 20:65:9c:40:4e:c9:29:f9:74:20:56:6c:33:a0:69:4c:28:6e: 44:02:48:e9:cf:cb:15:65:8d:12:19:a8:63:d4:0d:fb:c6:76: 92:e5:45:4e:65:28:62:62:52:c0:f9:9d:73:02:b9:23:7e:b5: b7:97:a6:f3:b2:ae:99:52:fd:b9:38:46:a4:70:ce:84:d1:b7: 15:90:50:af:2c:54:5d:be:e8:f0:c2:23:06:a0:fb:26:af:fe: 51:ed:cb:91:8c:d0:01:16:1b:04:74:9b:95:d0:ea:37:4c:8f: 3a:62:96:fc:8a:05:93:c2:3f:2f:de:c7:cf:b5:0e:e9:5c:fb: f4:7b:5c:80:3c:14:fc:7d:30:d1:9f:96:d4:58:98:e4:94:2d: 9f:43:80:65:99:f0:f1:46:46:c4:d1:8d:c1:0e:fd:da:22:1a: 61:43:f2:7f:a3:21:43:b5:92:38:f4:bd:d7:9d:19:4c:05:7c: f0:9c:3a:64:7e:d4:9c:57:2f:0f:31:cc:1a:94:fb:5a:d8:8e: 42:e5:0f:9a:11:d2:9b:2e:64:fe:d5:9c:40:8f:d6:50:10:77: eb:b6:f1:b6:5e:ea:15:11:ac:58:68:f2:e2:f1:35:cb:3d:f5: 8f:cc:fe:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjUwNzE4MTk0OTM5WhcNMjUwNzI1MTk0OTM5WjAYMRYwFAYD VQQDEw02ODdhYTU1My0yNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzXX6Nmmw+OAVH6oxE8l4IGivMnPsSpbqmsDHAk2BTCzLuGmz8Obb5tG8Gmm yURtAiCKYMQpopdB+G0SbOVncus9SGj0OGt/OBdTBNpvSmqhtZoNRz50yq5fEnPL S8t+3L/6u0OIcqkxEwxf55cuSMEC9jCNEQhaXZJsSaSsIvkjevYtiB7D1AvDv2+B HGWAIzJVxOJeVvYba5hvPgYKy0yfoKwcYfU3zW/6zetpKekYSbfNSLhx6PcBgwOJ p2xGU7tew8mQpGDxZB1hrrjA88da96/C4bryt66EJZSwBWmm4VpC5kbk/6WeifDI hMtG/8gbZYAK4ID7lvYbKvnrUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKA48y1 R9pnG68YcaWS5jq6nnhrMB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZt dklUZkViVEZjWk5kSmRyTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKsQbCJF+srN449Bt8idAYxwIgZZxATskp+XQgVmwzoGlMKG5EAkjp z8sVZY0SGahj1A37xnaS5UVOZShiYlLA+Z1zArkjfrW3l6bzsq6ZUv25OEakcM6E 0bcVkFCvLFRdvujwwiMGoPsmr/5R7cuRjNABFhsEdJuV0Oo3TI86Ypb8igWTwj8v 3sfPtQ7pXPv0e1yAPBT8fTDRn5bUWJjklC2fQ4BlmfDxRkbE0Y3BDv3aIhphQ/J/ oyFDtZI49L3XnRlMBXzwnDpkftScVy8PMcwalPta2I5C5Q+aEdKbLmT+1ZxAj9ZQ EHfrtvG2XuoVEaxYaPLi8TXLPfWPzP75 -----END CERTIFICATE-----Generated at Sun Jul 20 06:21:53 2025 by rpki-client