$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft File: daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json) Hash identifier: jxuBXhluH3ousz15cupLGkfl8aRdlSDcq1WoiLDtWNQ= Subject key identifier: 71:30:A8:2C:5A:1E:7B:11:8C:BF:90:32:F0:03:3E:D3:AD:0A:16:09 Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 Certificate issuer: /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Certificate serial: 1A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft Manifest number: 1A74 Signing time: Sun 20 Jul 2025 16:21:24 +0000 Manifest this update: Sun 20 Jul 2025 16:21:23 +0000 Manifest next update: Sun 27 Jul 2025 16:21:23 +0000 Files and hashes: 1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: skRZoBxWMwhYM5i/0RPjkRVUlw32QM0HEPnl74oPLTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6772 (0x1a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Validity Not Before: Jul 20 16:21:23 2025 GMT Not After : Jul 27 16:21:23 2025 GMT Subject: CN=687d1783-33fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:ac:4c:d0:0f:db:52:a2:62:d1:bb:6c:84: c1:6c:ba:b5:3d:00:24:05:80:a6:a8:4e:a0:1d:d0: 08:2d:29:84:3d:22:f4:9b:0d:43:9e:3c:ca:e8:33: 0d:4e:c1:0e:53:91:08:1a:76:3f:55:6a:79:af:f2: 19:8c:b6:1a:bd:58:f9:44:9c:b1:af:16:04:2a:43: 1a:94:81:1a:06:19:45:09:4d:89:f4:1a:d4:5c:b6: bf:be:74:18:64:07:f4:44:dd:cc:41:2f:95:19:25: a6:12:9a:2a:1c:d0:77:61:b9:4f:1c:b1:ab:e8:64: 5b:1e:67:81:ec:8d:77:ee:c1:b6:28:4a:a7:5f:03: 85:74:ce:62:2a:f0:d0:72:cd:2f:df:a3:8b:b2:ab: 09:f4:36:da:e4:15:f7:5c:6e:65:3b:10:d4:57:1f: 98:ef:d2:33:1b:44:df:51:08:27:af:94:57:6e:9b: 33:07:33:76:c9:8a:2e:28:07:ae:6d:f2:63:9b:a8: 11:51:19:ea:66:e1:d8:f0:dd:85:d0:01:5c:90:84: e4:34:7c:b2:15:18:70:78:dd:b8:19:2b:1b:c8:58: 1c:fc:2d:a3:3a:9d:c9:0e:b2:2f:c6:51:1f:46:cf: 4d:f2:2f:0b:f4:e5:cb:12:29:5e:37:99:d6:2d:10: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:A8:2C:5A:1E:7B:11:8C:BF:90:32:F0:03:3E:D3:AD:0A:16:09 X509v3 Authority Key Identifier: keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:66:7c:62:5a:52:2c:86:31:8d:80:77:0b:7c:ba:4e:57:99: f0:07:77:72:54:dc:b1:4e:a4:5a:08:5d:60:d7:10:2d:7b:f5: 41:28:ad:ce:a2:a0:fd:2d:2e:c8:5a:b6:1b:28:aa:3a:08:f2: 87:33:e5:f9:4d:bd:44:a8:44:e1:c5:e7:21:88:33:e9:2c:86: ce:54:a6:f0:18:5b:67:b0:98:1b:cf:20:86:32:a8:fb:d8:e7: f1:a6:3e:a8:e5:82:2f:ae:4c:75:b4:f2:f3:5b:2b:b5:81:8d: df:52:07:5c:52:3d:fc:fb:ca:d1:33:9c:f5:bc:ed:d6:82:4b: 09:02:0d:44:fa:79:d7:c0:fc:d1:28:c3:51:39:29:7d:14:39: 14:a8:0e:33:d5:b9:43:2d:6a:57:6d:6e:01:dc:3f:49:5c:eb: e4:d8:30:fe:83:f2:36:86:eb:47:53:e9:8d:fd:d8:1d:2b:db: 68:22:03:bb:3b:3b:b5:c6:05:2e:df:08:ac:05:3e:a4:14:0f: b2:c2:8e:11:c3:76:5f:b1:7f:e9:0f:d6:2d:90:19:ae:c8:8a: c2:d4:78:0f:d0:33:8b:e3:ff:e5:d2:54:6c:39:be:97:0c:47: 02:e7:5c:cd:fe:57:76:a1:ce:43:f4:2b:32:c7:ed:4d:7a:29: c9:b8:55:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND QzU4MURFNTcwHhcNMjUwNzIwMTYyMTIzWhcNMjUwNzI3MTYyMTIzWjAYMRYwFAYD VQQDEw02ODdkMTc4My0zM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1ysTNAP21KiYtG7bITBbLq1PQAkBYCmqE6gHdAILSmEPSL0mw1DnjzK6DMN TsEOU5EIGnY/VWp5r/IZjLYavVj5RJyxrxYEKkMalIEaBhlFCU2J9BrUXLa/vnQY ZAf0RN3MQS+VGSWmEpoqHNB3YblPHLGr6GRbHmeB7I137sG2KEqnXwOFdM5iKvDQ cs0v36OLsqsJ9Dba5BX3XG5lOxDUVx+Y79IzG0TfUQgnr5RXbpszBzN2yYouKAeu bfJjm6gRURnqZuHY8N2F0AFckITkNHyyFRhweN24GSsbyFgc/C2jOp3JDrIvxlEf Rs9N8i8L9OXLEileN5nWLRCtZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEwqCxa HnsRjL+QMvADPtOtChYJMB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm b3NObW1leGFSMnpNV0IzbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChZnxiWlIshjGNgHcLfLpOV5nwB3dyVNyxTqRaCF1g1xAte/VBKK3O oqD9LS7IWrYbKKo6CPKHM+X5Tb1EqEThxechiDPpLIbOVKbwGFtnsJgbzyCGMqj7 2Ofxpj6o5YIvrkx1tPLzWyu1gY3fUgdcUj38+8rRM5z1vO3WgksJAg1E+nnXwPzR KMNROSl9FDkUqA4z1blDLWpXbW4B3D9JXOvk2DD+g/I2hutHU+mN/dgdK9toIgO7 Ozu1xgUu3wisBT6kFA+ywo4Rw3ZfsX/pD9YtkBmuyIrC1HgP0DOL4//l0lRsOb6X DEcC51zN/ld2oc5D9Csyx+1NeinJuFUq -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:46 2025 by rpki-client