$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: cNWz7gRKo7Ctpd+Hfq90EepWpLCuF3UtnAe9krERmFM= Subject key identifier: C6:4B:00:0F:5A:FB:31:02:BC:A6:5A:6F:BF:71:E4:B6:07:70:87:8D Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1D35 Signing time: Fri 18 Jul 2025 16:15:22 +0000 Manifest this update: Fri 18 Jul 2025 16:15:22 +0000 Manifest next update: Fri 25 Jul 2025 16:15:22 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: W/n9WdC7YY2ePd0AocKX6HQEfz47fHjx5bF6b25JrV4=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: QN4dhYeOYexv58OGwmZdyDg8Z4B86G7ksX83Qid7CHk=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: oh/v7iVJL2nmvk/qjcAVXe7OglXKPf/jEhdssMeYp/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7490 (0x1d42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Jul 18 16:15:22 2025 GMT Not After : Jul 25 16:15:22 2025 GMT Subject: CN=687a731a-548f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:0f:ee:2a:58:1e:90:b1:6f:7a:47:57:60: a2:71:37:52:05:02:d4:6e:d4:f8:ff:12:30:fc:92: 0b:48:36:9b:fc:dd:77:2e:69:45:6f:16:30:58:e3: 92:fe:81:d8:c9:59:96:c3:a2:19:a2:b9:36:ba:3d: 5a:98:e9:1b:0e:0d:14:d4:c8:69:9d:f4:7d:15:5e: a4:64:b4:b6:9e:a4:68:c7:3b:f1:99:7a:59:6a:d5: 5f:ff:e8:46:20:0d:7b:38:d4:c1:7c:29:3e:1e:38: d4:8a:47:96:25:25:33:36:09:35:54:18:53:48:80: 59:6f:5a:d6:b8:8e:b3:b8:27:7b:ee:ec:7e:9a:46: 86:43:45:b0:a3:40:5f:b5:b1:cd:8f:d6:46:23:75: 01:c5:6a:c5:70:2e:50:d2:9a:d8:e9:3e:ca:a6:58: ab:db:57:f4:0f:29:74:54:a2:60:83:3e:e3:63:c0: 53:98:9c:2a:7c:24:78:8a:3e:f7:50:8d:04:c5:cc: ef:a3:a0:22:7d:11:cb:d0:9b:a2:ec:46:e2:b3:08: 4f:ec:5b:b1:dd:ed:a3:3f:63:f5:9b:f3:f5:cf:3f: d9:ff:2b:c8:e1:53:6c:2b:6a:ae:6a:1d:a1:08:f2: eb:12:ba:8d:ea:a2:b1:2c:fe:3c:3d:bf:99:f2:29: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:00:0F:5A:FB:31:02:BC:A6:5A:6F:BF:71:E4:B6:07:70:87:8D X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:82:89:d5:da:b6:bc:80:a0:1e:88:7c:ff:0a:15:24:07:4b: 8c:59:37:45:3d:32:0c:02:f9:6c:e4:a0:9f:32:c3:0f:40:ca: ee:40:fb:2c:47:5b:03:46:02:ed:00:32:cf:14:9a:54:fb:04: 3f:52:78:ba:34:4a:6c:66:7a:d9:9d:03:61:88:32:9a:1e:f7: 7e:27:2c:18:45:eb:82:b6:5a:fa:66:5c:d7:4d:d8:29:75:a5: 15:3c:84:a3:fb:ee:65:64:b5:07:23:f8:4b:c8:00:1b:73:da: 2b:1d:0f:78:3d:d3:1a:f4:e5:4a:a6:e0:f4:51:59:8c:81:6d: 5e:f1:74:0e:b4:e8:5a:0b:29:09:fd:a3:03:07:72:56:90:d8: d2:99:19:12:f2:d1:af:b5:50:1f:fc:d3:4c:59:65:b5:bc:6f: 49:7a:d3:5f:57:bf:d0:ea:97:a9:cd:36:2f:71:41:c5:9c:82: 70:bd:99:1b:77:e2:4a:cf:20:2d:3b:c2:82:db:d9:a2:58:05: 61:f7:e7:8b:ce:f6:d0:4a:37:2a:ac:fa:d0:66:cf:19:bb:ab: a6:52:8b:d3:9a:b8:c7:75:db:6e:ea:6f:82:d9:25:0a:67:e2: 3f:fa:fa:40:7e:c3:80:d7:79:fa:16:3f:ea:0c:dd:6d:96:84: 32:ff:bd:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjUwNzE4MTYxNTIyWhcNMjUwNzI1MTYxNTIyWjAYMRYwFAYD VQQDEw02ODdhNzMxYS01NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sgP7ipYHpCxb3pHV2CicTdSBQLUbtT4/xIw/JILSDab/N13LmlFbxYwWOOS /oHYyVmWw6IZork2uj1amOkbDg0U1MhpnfR9FV6kZLS2nqRoxzvxmXpZatVf/+hG IA17ONTBfCk+HjjUikeWJSUzNgk1VBhTSIBZb1rWuI6zuCd77ux+mkaGQ0Wwo0Bf tbHNj9ZGI3UBxWrFcC5Q0prY6T7Kplir21f0Dyl0VKJggz7jY8BTmJwqfCR4ij73 UI0Exczvo6AifRHL0Jui7EbiswhP7Fux3e2jP2P1m/P1zz/Z/yvI4VNsK2quah2h CPLrErqN6qKxLP48Pb+Z8imb5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZLAA9a +zECvKZab79x5LYHcIeNMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogonV2ra8gKAeiHz/ChUkB0uMWTdFPTIMAvls5KCfMsMPQMruQPss R1sDRgLtADLPFJpU+wQ/Uni6NEpsZnrZnQNhiDKaHvd+JywYReuCtlr6ZlzXTdgp daUVPISj++5lZLUHI/hLyAAbc9orHQ94PdMa9OVKpuD0UVmMgW1e8XQOtOhaCykJ /aMDB3JWkNjSmRkS8tGvtVAf/NNMWWW1vG9JetNfV7/Q6pepzTYvcUHFnIJwvZkb d+JKzyAtO8KC29miWAVh9+eLzvbQSjcqrPrQZs8Zu6umUovTmrjHddtu6m+C2SUK Z+I/+vpAfsOA13n6Fj/qDN1tloQy/72/ -----END CERTIFICATE-----Generated at Sun Jul 20 07:40:40 2025 by rpki-client