$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: HIVEeTffo1qgkZQKPbFtarIivjJjDnzYTVx6jpcVZ8g= Subject key identifier: AA:CA:FD:BD:CF:E2:C5:0B:B4:29:0B:20:98:09:2E:BE:D4:D9:65:D8 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 01BA Signing time: Sat 19 Jul 2025 03:13:08 +0000 Manifest this update: Sat 19 Jul 2025 03:13:07 +0000 Manifest next update: Sat 26 Jul 2025 03:13:07 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: Qw+fBB+LB2Zo67UkRGUwpIFi7DoOBSdhXYUnXN/d1YI=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: ewiUnrO7XAgjqsA1wG//P3KoAbNdOVY4KG59Y9E54Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Jul 19 03:13:07 2025 GMT Not After : Jul 26 03:13:07 2025 GMT Subject: CN=687b0d44-23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:f5:82:25:c9:60:16:40:d2:74:0b:db:ec: 34:e2:45:37:cd:56:af:1e:19:14:b5:dd:3e:1c:87: 45:00:52:dd:9c:75:d5:17:42:37:f6:d0:be:a0:7b: 06:a6:cf:62:d5:d8:2a:fb:69:db:d7:ac:d5:d7:85: f2:fd:70:07:cf:13:08:33:78:83:80:ae:c9:a0:77: 6e:5f:02:f7:a8:d4:52:e1:55:f9:17:57:43:4c:6a: e9:ba:21:0e:1f:68:c6:69:ba:4f:52:ad:4d:a8:c2: b0:e1:5b:89:8d:93:bc:0a:f4:4d:4f:d2:af:25:20: c0:f6:d7:ce:5d:7b:5a:91:8b:8a:2b:7a:97:6b:f3: fb:40:dd:1e:ea:10:17:27:e8:df:20:10:f3:e5:b1: 11:e2:63:44:b3:9c:d2:62:8d:2f:e2:0b:b6:94:89: 95:da:aa:fb:4e:2a:16:e7:4c:f6:98:5c:24:1c:8a: 52:bd:74:7e:97:7f:f4:c9:07:a5:63:6f:10:04:c0: 94:00:70:a8:21:b6:b4:a1:fc:8c:b5:44:1a:6d:da: e6:48:54:a5:fd:d9:98:07:df:4b:25:c6:f9:49:17: 11:c2:98:c8:ec:92:21:be:cb:dd:d3:16:4c:90:0e: a6:d9:5d:d2:ff:12:d5:ba:82:6c:52:a3:0e:b9:dd: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:FD:BD:CF:E2:C5:0B:B4:29:0B:20:98:09:2E:BE:D4:D9:65:D8 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:55:d2:ab:9b:54:19:1b:b4:c1:9b:51:1d:74:20:ef:3c:14: 02:28:81:2a:91:e2:bc:91:18:07:88:35:6b:82:de:4e:81:e7: 1b:d5:90:80:18:ae:b2:86:90:7a:10:3e:06:ad:ad:ce:c7:2e: d0:9a:ea:bd:2e:c5:5d:49:08:e2:99:d3:13:e2:d6:bc:f6:bf: 3d:05:73:61:3b:1f:3e:f1:34:be:28:d1:e1:09:fa:d9:9d:ca: 9b:38:10:4d:1a:a7:f6:2c:11:b2:a8:73:40:16:1e:94:4e:2d: 17:41:53:32:ba:89:91:f0:c5:72:27:c9:66:12:9d:df:c0:a9: e5:43:45:4f:f0:e2:61:1a:f5:e4:41:d6:bc:b0:2a:09:03:24: 16:18:5b:62:64:8d:2c:71:c9:9e:47:0f:d3:db:21:c3:82:fb: 0b:91:eb:10:98:f8:ad:c6:e2:5c:e9:f2:26:fa:46:b8:2f:e0: db:7a:f1:94:f5:ff:f6:b3:8e:ef:23:27:53:31:7a:2b:e7:76: 19:8d:10:a9:b4:46:85:bd:21:b8:86:a0:cf:50:99:55:60:8b: ba:93:65:06:dc:31:95:3d:49:31:f7:75:ed:84:68:37:3a:ce: 69:57:5d:72:f0:0a:00:f5:7c:69:d6:b2:45:60:1b:c6:85:91: a5:2b:09:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUwNzE5MDMxMzA3WhcNMjUwNzI2MDMxMzA3WjAYMRYwFAYD VQQDEw02ODdiMGQ0NC0yM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57X1giXJYBZA0nQL2+w04kU3zVavHhkUtd0+HIdFAFLdnHXVF0I39tC+oHsG ps9i1dgq+2nb16zV14Xy/XAHzxMIM3iDgK7JoHduXwL3qNRS4VX5F1dDTGrpuiEO H2jGabpPUq1NqMKw4VuJjZO8CvRNT9KvJSDA9tfOXXtakYuKK3qXa/P7QN0e6hAX J+jfIBDz5bER4mNEs5zSYo0v4gu2lImV2qr7TioW50z2mFwkHIpSvXR+l3/0yQel Y28QBMCUAHCoIba0ofyMtUQabdrmSFSl/dmYB99LJcb5SRcRwpjI7JIhvsvd0xZM kA6m2V3S/xLVuoJsUqMOud1wuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrK/b3P 4sULtCkLIJgJLr7U2WXYMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2VdKrm1QZG7TBm1EddCDvPBQCKIEqkeK8kRgHiDVrgt5Ogecb1ZCA GK6yhpB6ED4Gra3Oxy7Qmuq9LsVdSQjimdMT4ta89r89BXNhOx8+8TS+KNHhCfrZ ncqbOBBNGqf2LBGyqHNAFh6UTi0XQVMyuomR8MVyJ8lmEp3fwKnlQ0VP8OJhGvXk Qda8sCoJAyQWGFtiZI0sccmeRw/T2yHDgvsLkesQmPitxuJc6fIm+ka4L+DbevGU 9f/2s47vIydTMXor53YZjRCptEaFvSG4hqDPUJlVYIu6k2UG3DGVPUkx93XthGg3 Os5pV11y8AoA9Xxp1rJFYBvGhZGlKwmN -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:30 2025 by rpki-client