$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json) Hash identifier: 0JWH/A8gp/yTlVE9rvZseK0zS5oshEr+WFyNsQK2skw= Subject key identifier: 1F:93:CB:08:14:7E:62:90:28:34:5E:41:D9:B3:5D:86:FF:4C:3A:F0 Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft Manifest number: BD Signing time: Mon 21 Jul 2025 06:02:29 +0000 Manifest this update: Mon 21 Jul 2025 06:02:28 +0000 Manifest next update: Mon 28 Jul 2025 06:02:28 +0000 Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: X+S5r6rnYaIHgCUcK9vTlvOBr5N3gBa917LjtrzA6fE=) 2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: R0ve1rGoHZXsOYQBScXwsDxNaaTbtMNOWotF4DpFkvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Validity Not Before: Jul 21 06:02:28 2025 GMT Not After : Jul 28 06:02:28 2025 GMT Subject: CN=687dd7f5-9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:4e:2a:9d:0f:cc:1d:bf:34:84:b2:6d:74: 36:e3:a4:79:17:a2:e7:e7:d0:f2:3c:01:7b:c6:41: 68:52:8c:ad:90:dc:48:4e:63:2b:e3:06:41:07:11: 84:50:c1:d9:67:7c:df:bf:5c:ca:0d:52:aa:e3:e7: 8d:40:92:b4:35:b1:67:3d:ae:68:e0:a0:fb:5c:e8: c7:36:3b:66:6c:f5:d5:ce:3c:59:17:02:ba:d8:07: 0c:17:2d:05:90:7e:49:a3:6b:8b:c3:67:36:89:2d: 94:28:53:ae:20:0f:5e:be:a6:08:dc:4c:10:8e:36: 2c:86:f8:59:eb:55:da:a7:13:3b:9c:3a:9e:cc:72: 3c:3c:4c:79:bf:85:00:2d:44:ec:3d:81:89:96:ad: 2b:4e:f1:37:79:81:21:4c:95:41:c7:6f:45:a7:39: f4:02:57:58:c7:47:f4:9f:ff:22:22:98:1f:e7:d4: 11:f8:34:df:83:8b:e2:d6:30:bc:0b:7a:54:ab:2b: 5e:15:4c:42:f5:db:e7:50:55:73:84:91:56:eb:e3: 0d:78:b7:ad:6d:af:4a:17:06:8e:bf:83:d0:40:15: b5:07:8c:1f:c5:1d:e7:48:70:f3:14:e7:a5:43:1f: 70:9a:40:5e:74:39:85:6b:87:5c:f4:c0:3c:3e:5c: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:CB:08:14:7E:62:90:28:34:5E:41:D9:B3:5D:86:FF:4C:3A:F0 X509v3 Authority Key Identifier: keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f4:78:f8:3c:06:89:bb:b9:b3:08:4b:83:95:ee:a0:55:d2: f9:01:f8:14:ad:77:d5:e5:a1:f2:32:f9:2a:ae:56:36:5e:18: a6:ca:2e:c3:af:da:fe:b1:52:be:f1:e3:83:09:3f:c8:b2:5d: 56:6c:9a:af:ac:29:80:c3:aa:c4:66:86:38:50:a6:84:e3:30: 74:83:d0:87:fd:94:3d:5f:3f:57:d0:7f:36:eb:24:39:9a:76: 54:2a:11:62:aa:14:6a:d8:0c:67:8b:04:92:dd:72:84:6b:f2: b9:59:fb:6e:70:1e:12:88:54:d1:5f:65:82:91:13:69:19:1a: 27:05:bc:4b:2a:c9:e7:75:ec:12:db:30:d2:ca:62:15:90:de: 13:ce:7f:84:46:35:2a:b3:c0:00:5d:20:ff:4d:6d:e9:e0:25: 2d:20:b5:05:4e:9b:b7:10:e0:7c:10:2c:03:12:2d:46:81:73: 89:b2:ef:8c:81:3c:a6:a8:51:e0:5d:1e:09:14:dd:6f:9e:be: 62:e2:7f:ab:f8:ed:41:ed:22:bb:98:42:53:c2:77:28:10:f5: 05:f8:b8:c0:71:f8:6c:6a:e0:d2:27:99:78:3a:59:f4:b9:8d: ec:55:c1:9a:6c:89:cc:ae:2e:91:3d:e6:a5:c3:38:07:a3:04: 74:b7:46:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxRjMxMTAvBgNVBAUTKDc1MEZBNTdCNTkxNTY1MzlDQjE2RTU0QTYwQTZDRURC NUIxMEVCOUUwHhcNMjUwNzIxMDYwMjI4WhcNMjUwNzI4MDYwMjI4WjAYMRYwFAYD VQQDEw02ODdkZDdmNS05ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qxOKp0PzB2/NISybXQ246R5F6Ln59DyPAF7xkFoUoytkNxITmMr4wZBBxGE UMHZZ3zfv1zKDVKq4+eNQJK0NbFnPa5o4KD7XOjHNjtmbPXVzjxZFwK62AcMFy0F kH5Jo2uLw2c2iS2UKFOuIA9evqYI3EwQjjYshvhZ61XapxM7nDqezHI8PEx5v4UA LUTsPYGJlq0rTvE3eYEhTJVBx29Fpzn0AldYx0f0n/8iIpgf59QR+DTfg4vi1jC8 C3pUqyteFUxC9dvnUFVzhJFW6+MNeLetba9KFwaOv4PQQBW1B4wfxR3nSHDzFOel Qx9wmkBedDmFa4dc9MA8Plz40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+TywgU fmKQKDReQdmzXYb/TDrwMB8GA1UdIwQYMBaAFHUPpXtZFWU5yxblSmCmzttbEOue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjFGMy80Mjk3RDA1MjQ1 QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpUbkxGdVZLWUtiTzIxc1E2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRLWxlMWtWWlRuTEZ1VktZS2JPMjFzUTY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjFGMy80Mjk3RDA1MjQ1QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpU bkxGdVZLWUtiTzIxc1E2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj9Hj4PAaJu7mzCEuDle6gVdL5AfgUrXfV5aHyMvkqrlY2Xhimyi7D r9r+sVK+8eODCT/Isl1WbJqvrCmAw6rEZoY4UKaE4zB0g9CH/ZQ9Xz9X0H826yQ5 mnZUKhFiqhRq2AxniwSS3XKEa/K5WftucB4SiFTRX2WCkRNpGRonBbxLKsnndewS 2zDSymIVkN4Tzn+ERjUqs8AAXSD/TW3p4CUtILUFTpu3EOB8ECwDEi1GgXOJsu+M gTymqFHgXR4JFN1vnr5i4n+r+O1B7SK7mEJTwncoEPUF+LjAcfhsauDSJ5l4Oln0 uY3sVcGabInMri6RPealwzgHowR0t0ac -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:53 2025 by rpki-client