$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: nSxj8RNXaYxI9Ngg8ekCAaJnQUTugf785bfhvTrtko0= Subject key identifier: B1:67:B8:E6:88:CF:48:E8:08:B7:A0:B5:F7:1A:84:9D:34:62:F3:DC Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 67 Signing time: Sat 19 Jul 2025 07:13:13 +0000 Manifest this update: Sat 19 Jul 2025 07:13:13 +0000 Manifest next update: Sat 26 Jul 2025 07:13:13 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: V3doEirTCQX8B1w+FJ2X0wMH8iqt8JPlEon8+8rh3vg=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Validity Not Before: Jul 19 07:13:13 2025 GMT Not After : Jul 26 07:13:13 2025 GMT Subject: CN=687b4589-a8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:5b:7a:84:16:dd:c7:ae:13:f5:3d:d1:45: ed:2a:71:90:4c:8f:34:f5:b0:5f:52:64:b1:01:92: 6d:74:76:bb:58:00:e2:80:97:b7:62:20:c8:a6:1c: f2:61:4e:9d:af:00:19:7e:0a:93:d3:79:ea:fb:77: 4a:88:09:ba:bb:22:fa:fe:38:36:df:7b:31:57:02: 0e:0f:70:e9:7d:ed:bb:df:8b:ea:dd:5c:a6:f0:84: da:eb:b3:be:67:c0:5b:e7:f3:73:ad:25:59:8c:83: c7:f6:bd:c7:bd:88:fe:68:00:cd:5d:a2:ba:0d:da: dd:1c:85:1f:cc:82:d5:1d:8f:41:47:24:14:0c:e8: 78:07:38:10:65:ff:34:1a:30:7e:2f:d1:6a:91:a1: 8e:f2:49:c9:85:72:71:95:73:cf:83:60:97:55:e3: 18:a2:96:3c:7d:f9:c7:ea:b8:df:b9:c2:92:89:5b: a4:3a:2f:36:e2:e9:7d:02:6f:2c:0b:45:d6:0d:67: 84:4a:39:c8:68:2e:ae:6b:f3:e5:2d:a7:96:f2:20: 78:d4:c1:f3:39:9e:af:a1:fd:41:eb:2d:45:c5:16: cf:df:42:b6:51:53:cb:ad:ef:f3:17:83:da:67:42: 25:0e:8d:21:bf:31:d7:e3:09:fc:50:32:b5:1c:e6: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:B8:E6:88:CF:48:E8:08:B7:A0:B5:F7:1A:84:9D:34:62:F3:DC X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:d3:8c:de:5e:89:45:f3:00:4d:55:0c:7e:e8:21:20:90:f3: 78:e7:34:60:f4:98:6d:6e:9c:84:f6:5a:38:10:b1:2e:76:7f: 54:c9:65:b3:ce:54:6f:93:76:34:26:cb:a9:2c:14:b0:e5:4c: d9:e3:d7:75:28:ef:c6:40:f0:f1:18:a7:fa:ab:e5:46:b2:55: b0:71:d2:79:e7:19:fb:53:35:16:7e:23:dc:99:c4:49:d4:65: 2b:8f:c1:7a:2c:d5:99:13:55:72:fe:8f:d6:65:ea:eb:22:79: 0a:f0:47:58:9c:d2:9b:4d:ae:ec:45:12:a4:8f:82:18:0f:5a: 24:92:a6:b9:63:3f:2e:7e:7a:a7:3e:18:d1:7c:b6:1e:ac:a0: ae:7a:6b:00:3e:46:8d:3a:dd:ec:6e:6e:3c:aa:2e:08:5a:a4: f8:cf:12:ab:6a:8a:fb:52:4f:e9:9e:07:d2:33:64:8c:8a:c9: 54:64:e2:e3:2c:8f:78:eb:a6:a8:d7:da:80:b0:41:a3:8d:b5: 55:dd:4d:48:13:43:de:49:9f:74:7e:21:fc:97:25:52:fe:ea: ab:17:0c:91:9d:b4:73:bf:57:fe:1e:f9:0b:79:c8:1e:2b:e5: 15:f3:bd:d8:6f:2a:15:3a:c5:17:4c:ae:69:f7:3e:81:18:99: 24:17:ad:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTA3MTkwNzEzMTNaFw0yNTA3MjYwNzEzMTNaMBgxFjAUBgNV BAMTDTY4N2I0NTg5LWE4ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpA1t6hBbdx64T9T3RRe0qcZBMjzT1sF9SZLEBkm10drtYAOKAl7diIMimHPJh Tp2vABl+CpPTeer7d0qICbq7Ivr+ODbfezFXAg4PcOl97bvfi+rdXKbwhNrrs75n wFvn83OtJVmMg8f2vce9iP5oAM1doroN2t0chR/MgtUdj0FHJBQM6HgHOBBl/zQa MH4v0WqRoY7yScmFcnGVc8+DYJdV4xiiljx9+cfquN+5wpKJW6Q6Lzbi6X0CbywL RdYNZ4RKOchoLq5r8+Utp5byIHjUwfM5nq+h/UHrLUXFFs/fQrZRU8ut7/MXg9pn QiUOjSG/MdfjCfxQMrUc5kodAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsWe45ojP SOgIt6C19xqEnTRi89wwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANvTjN5eiUXzAE1VDH7oISCQ83jnNGD0mG1unIT2WjgQsS52f1TJZbPO VG+TdjQmy6ksFLDlTNnj13Uo78ZA8PEYp/qr5UayVbBx0nnnGftTNRZ+I9yZxEnU ZSuPwXos1ZkTVXL+j9Zl6usieQrwR1ic0ptNruxFEqSPghgPWiSSprljPy5+eqc+ GNF8th6soK56awA+Ro063exubjyqLghapPjPEqtqivtST+meB9IzZIyKyVRk4uMs j3jrpqjX2oCwQaONtVXdTUgTQ95Jn3R+IfyXJVL+6qsXDJGdtHO/V/4e+Qt5yB4r 5RXzvdhvKhU6xRdMrmn3PoEYmSQXrew= -----END CERTIFICATE-----Generated at Sun Jul 20 13:36:09 2025 by rpki-client