$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json) Hash identifier: IsAOemZ8BmxuT7Bc+U/Mys8zwZ5KozvrAEDNE9MFLg8= Subject key identifier: 65:11:4B:72:E2:F7:4F:AA:D9:23:EE:B5:DB:68:2E:0F:69:74:C2:31 Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft Manifest number: 08DD Signing time: Fri 18 Jul 2025 22:00:29 +0000 Manifest this update: Fri 18 Jul 2025 22:00:28 +0000 Manifest next update: Fri 25 Jul 2025 22:00:28 +0000 Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: icY/1mxQlS3zNvk6S+9armGJYpmsBSp+LAZz63JcsiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Validity Not Before: Jul 18 22:00:28 2025 GMT Not After : Jul 25 22:00:28 2025 GMT Subject: CN=687ac3fc-5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:d9:2d:27:03:9d:bb:c9:5f:45:79:72:14: a8:b9:24:d2:56:58:de:a2:14:bd:1c:05:59:41:1a: 94:50:07:86:4a:1d:bb:5e:94:ca:d5:a5:25:db:00: 22:94:81:51:16:e1:c8:fb:26:59:0d:5d:bb:37:71: 0d:2c:28:f5:87:dc:5f:aa:cd:b4:d7:37:87:16:59: 6a:c6:21:f0:5b:d7:e7:65:6d:ff:c3:ad:a1:16:ee: fe:2b:ff:73:5b:5b:db:47:fd:f9:f1:3f:28:94:27: 8f:1c:28:df:91:33:93:6f:21:6e:8f:05:de:c8:f8: 0f:57:f1:79:22:5f:fa:c4:d5:d6:c0:6c:ba:47:87: ae:e3:1d:37:57:dc:e5:ac:90:3f:b8:73:df:c3:3b: 11:2a:c0:a5:97:62:d4:27:46:10:55:76:60:31:05: 2e:7d:80:5a:f3:69:c2:b8:a8:1b:55:13:c2:f7:3e: 9d:97:3b:18:97:bd:dd:e4:d0:ef:54:7f:58:cd:76: a8:e9:63:b2:21:cf:01:ac:24:76:16:e8:e9:be:c0: 07:c0:8b:8b:ac:fd:6e:a8:10:22:d5:9b:ae:f0:6b: 6b:65:b6:a2:79:86:28:f4:2d:98:e6:45:06:8b:22: 4b:6c:6e:06:49:84:67:93:22:23:d3:cb:56:39:8f: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:11:4B:72:E2:F7:4F:AA:D9:23:EE:B5:DB:68:2E:0F:69:74:C2:31 X509v3 Authority Key Identifier: keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9c:6b:e7:cc:cb:44:db:0d:d4:13:b8:0d:6f:8d:23:70:21: e5:8a:2c:31:b2:c9:a5:62:b4:aa:af:e2:07:99:a6:93:9b:68: af:8a:1e:56:42:9e:c1:de:49:0d:5e:c3:d7:f9:c5:8b:21:39: 49:42:ac:77:95:e0:22:d9:5d:c9:3a:29:1c:63:2b:7d:a2:c6: ac:71:8f:bd:7f:63:42:44:42:d4:bd:47:5a:6d:00:30:86:81: 30:55:33:5b:21:26:fd:12:d7:5f:3c:28:a1:7f:ad:50:11:02: 5f:83:5b:d6:f0:20:4b:4a:f0:ff:d0:c4:71:48:99:57:0d:23: 8b:56:db:2c:e8:4b:cf:fd:b9:ef:c5:a6:de:aa:ff:e9:8c:d8: 7c:50:fb:78:78:2b:51:6a:7a:ec:78:c2:c4:a6:72:4d:1c:0c: 51:17:a7:87:6a:c7:89:fb:41:4d:56:f8:ea:fc:66:69:15:e2: 9c:b3:23:9b:b5:e0:55:1a:a1:c4:51:49:3f:42:6f:77:33:a0: 9e:a9:d2:0e:41:ed:c3:28:6e:f4:22:41:00:19:ef:a6:86:57: 5a:0a:56:08:8a:3d:3a:c5:30:42:de:4b:2d:8f:8a:d9:bb:6a: 7e:90:33:a0:0c:ac:15:a3:c6:1e:42:ba:d2:13:44:b0:30:ae: 25:2d:07:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1 QTI1OEExNTIwHhcNMjUwNzE4MjIwMDI4WhcNMjUwNzI1MjIwMDI4WjAYMRYwFAYD VQQDEw02ODdhYzNmYy01ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzXZLScDnbvJX0V5chSouSTSVljeohS9HAVZQRqUUAeGSh27XpTK1aUl2wAi lIFRFuHI+yZZDV27N3ENLCj1h9xfqs201zeHFllqxiHwW9fnZW3/w62hFu7+K/9z W1vbR/358T8olCePHCjfkTOTbyFujwXeyPgPV/F5Il/6xNXWwGy6R4eu4x03V9zl rJA/uHPfwzsRKsCll2LUJ0YQVXZgMQUufYBa82nCuKgbVRPC9z6dlzsYl73d5NDv VH9YzXao6WOyIc8BrCR2FujpvsAHwIuLrP1uqBAi1Zuu8GtrZbaieYYo9C2Y5kUG iyJLbG4GSYRnkyIj08tWOY8tAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGURS3Li 90+q2SPutdtoLg9pdMIxMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqnGvnzMtE2w3UE7gNb40jcCHliiwxssmlYrSqr+IHmaaTm2ivih5W Qp7B3kkNXsPX+cWLITlJQqx3leAi2V3JOikcYyt9osascY+9f2NCRELUvUdabQAw hoEwVTNbISb9EtdfPCihf61QEQJfg1vW8CBLSvD/0MRxSJlXDSOLVtss6EvP/bnv xabeqv/pjNh8UPt4eCtRanrseMLEpnJNHAxRF6eHaseJ+0FNVvjq/GZpFeKcsyOb teBVGqHEUUk/Qm93M6CeqdIOQe3DKG70IkEAGe+mhldaClYIij06xTBC3kstj4rZ u2p+kDOgDKwVo8YeQrrSE0SwMK4lLQde -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:27 2025 by rpki-client