$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: O1VdiwOTAO9MyjZPtG9qOgLjQAb9MEYiibQ66G09vU8= Subject key identifier: 28:25:35:D3:01:A9:DF:AF:6F:A0:1B:C8:06:E6:02:C7:AD:A4:6A:73 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 12AA Signing time: Fri 18 Jul 2025 20:15:05 +0000 Manifest this update: Fri 18 Jul 2025 20:15:04 +0000 Manifest next update: Fri 25 Jul 2025 20:15:04 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: fCSQTro2DuEXtFTeqYzEhkyzncHr9y3iRR+3OBXGsvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Jul 18 20:15:04 2025 GMT Not After : Jul 25 20:15:04 2025 GMT Subject: CN=687aab48-52dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:00:3f:73:ac:44:83:73:0e:34:f6:11:f9: c2:31:e2:65:74:6e:d8:e4:1b:b3:46:09:f8:96:c4: 4a:9b:5a:bb:1d:b2:13:38:4c:8a:70:2b:ea:fc:0c: 54:a1:48:36:9e:0e:56:ca:6b:a7:cd:66:b7:cc:99: d4:91:80:25:89:d3:45:82:3a:71:1f:06:3c:3f:26: f3:3b:9d:a2:4f:9a:4d:f0:45:45:bd:86:bd:1c:44: e6:85:6e:a1:dd:e6:fa:e3:0c:79:65:d9:be:f5:d0: e9:71:fa:93:9f:62:69:46:7a:24:20:e9:00:3a:d9: d3:cb:a6:f7:b1:2d:3b:30:a1:2f:f6:0e:56:7c:e4: f8:40:d9:b2:21:3c:01:41:f6:00:14:45:d9:39:a6: 9c:5f:71:14:e8:20:f1:b7:bc:b1:3b:9b:05:de:d8: f6:9b:37:bd:f9:d3:7b:b4:6d:b5:d4:d8:23:ee:9e: 42:d8:66:0f:d4:39:51:4c:66:fc:86:e4:28:9e:cf: a9:f2:50:2f:11:14:bd:bc:0a:9b:c6:05:aa:81:fa: 4c:f1:c6:9c:af:a6:50:5f:27:7e:2f:36:a2:35:13: 97:2e:70:e3:af:f2:f9:c4:e9:ce:cb:69:58:19:e9: ae:9b:f1:3b:f1:64:5f:63:64:71:7d:2f:71:db:14: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:35:D3:01:A9:DF:AF:6F:A0:1B:C8:06:E6:02:C7:AD:A4:6A:73 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:dd:51:a2:74:07:51:c5:e2:03:4c:18:a7:d9:c1:19:63:9e: 2c:fb:11:95:4e:13:ce:84:c6:af:af:46:f8:c2:c8:44:83:b2: 4a:fe:06:9d:8b:20:b9:45:f6:ea:6e:aa:ca:bd:e5:a0:76:fb: 23:25:72:cb:d1:75:a7:32:54:83:ff:99:7f:cb:16:c6:5a:8a: 2f:f8:90:fa:bb:e9:c7:99:ae:47:d7:02:b4:6a:87:09:5e:94: ed:66:e1:4f:d5:b7:42:ee:df:39:1c:43:b3:73:94:d6:c1:47: de:b0:fc:2f:53:02:de:df:c6:ad:05:20:85:fc:85:56:e5:19: c6:67:90:42:0d:28:05:ca:fa:8f:18:e4:4d:b7:5d:1d:86:e8: 0d:31:4b:62:f5:0b:1b:37:f2:2e:63:7c:37:72:49:6c:af:05: 75:93:d4:a5:ff:0f:a6:be:20:69:45:07:72:d1:e3:2f:9f:92: a4:3c:cd:f8:a8:3e:2f:8f:51:3c:5a:81:e7:04:c7:e5:51:fc: 7f:1e:ea:0d:92:1d:a0:03:79:f6:84:a1:16:45:29:7d:18:db: 85:30:0d:00:0f:53:9c:db:5d:db:0e:7d:41:22:e3:f2:90:6b: e6:40:9f:91:7b:56:bc:40:5e:06:96:29:5e:82:f8:04:0d:c3: 85:14:c1:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNzE4MjAxNTA0WhcNMjUwNzI1MjAxNTA0WjAYMRYwFAYD VQQDEw02ODdhYWI0OC01MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne4AP3OsRINzDjT2EfnCMeJldG7Y5BuzRgn4lsRKm1q7HbITOEyKcCvq/AxU oUg2ng5WymunzWa3zJnUkYAlidNFgjpxHwY8PybzO52iT5pN8EVFvYa9HETmhW6h 3eb64wx5Zdm+9dDpcfqTn2JpRnokIOkAOtnTy6b3sS07MKEv9g5WfOT4QNmyITwB QfYAFEXZOaacX3EU6CDxt7yxO5sF3tj2mze9+dN7tG211Ngj7p5C2GYP1DlRTGb8 huQons+p8lAvERS9vAqbxgWqgfpM8cacr6ZQXyd+LzaiNROXLnDjr/L5xOnOy2lY Gemum/E78WRfY2RxfS9x2xQnfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCglNdMB qd+vb6AbyAbmAsetpGpzMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3VGidAdRxeIDTBin2cEZY54s+xGVThPOhMavr0b4wshEg7JK/gad iyC5RfbqbqrKveWgdvsjJXLL0XWnMlSD/5l/yxbGWoov+JD6u+nHma5H1wK0aocJ XpTtZuFP1bdC7t85HEOzc5TWwUfesPwvUwLe38atBSCF/IVW5RnGZ5BCDSgFyvqP GORNt10dhugNMUti9QsbN/IuY3w3cklsrwV1k9Sl/w+mviBpRQdy0eMvn5KkPM34 qD4vj1E8WoHnBMflUfx/HuoNkh2gA3n2hKEWRSl9GNuFMA0AD1Oc213bDn1BIuPy kGvmQJ+Re1a8QF4GlilegvgEDcOFFMGS -----END CERTIFICATE-----Generated at Sun Jul 20 03:25:11 2025 by rpki-client