$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: t2O74xwFqT+iXLYSRa7kROdpLB0g5r3HNu8hC736TTM= Subject key identifier: 7F:2A:3F:62:02:31:F9:50:8F:66:B7:9C:65:4A:EF:8E:01:C3:B3:58 Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 086D Signing time: Sun 20 Jul 2025 20:47:12 +0000 Manifest this update: Sun 20 Jul 2025 20:47:11 +0000 Manifest next update: Sun 27 Jul 2025 20:47:11 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: NZkjzvZkoPqoc/DhkozIJYDXWwdVYF+G1sLyl+8PAMQ=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Jul 20 20:47:11 2025 GMT Not After : Jul 27 20:47:11 2025 GMT Subject: CN=687d55cf-ef38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:a9:ff:3c:3c:b4:e9:c3:53:7b:7e:e6:b4: ab:42:1d:53:5e:88:e7:f3:84:52:63:32:6b:7c:f6: 0b:c0:1b:b0:57:ed:1b:33:46:72:40:b6:e0:29:ca: 47:c6:6e:9a:92:cb:1e:4a:0f:88:a9:d4:36:a2:2a: db:f5:73:20:68:a5:36:53:ff:68:f1:0c:a8:94:15: e9:7f:cd:09:52:dd:db:d2:16:42:ef:7b:99:b7:a0: 8b:c3:f6:75:9b:22:63:b7:59:90:05:99:de:50:52: fc:f7:e4:b9:e3:57:29:9f:78:b3:17:41:4f:b1:c1: 98:84:78:bd:76:90:ff:5a:33:af:fe:00:d2:fe:32: db:a2:26:ce:d6:09:d7:ab:20:87:29:b5:60:60:bf: c4:75:82:54:e4:36:c9:5c:e1:a0:d0:22:f8:1f:d8: e3:83:b9:f6:c2:3b:32:b7:fc:1e:ff:8c:d5:24:ce: 08:60:48:74:e0:0c:ec:1f:1f:b1:c6:8a:4c:69:57: ae:ca:6d:8d:4b:a5:73:f1:18:df:75:0e:6a:4c:fa: 6e:3f:4d:88:cc:e4:45:ef:26:86:62:2c:ac:16:7c: 13:ab:33:09:b7:64:5f:17:c7:3e:5a:4d:85:4e:c4: 4f:f5:17:5a:66:f0:7c:bd:de:a8:17:ab:6c:4e:91: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2A:3F:62:02:31:F9:50:8F:66:B7:9C:65:4A:EF:8E:01:C3:B3:58 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:67:19:68:6a:32:47:23:f6:e6:46:9e:b9:77:93:eb:5f:bb: 41:e5:dd:24:3e:62:00:88:4c:39:ec:94:05:20:18:b4:be:0e: 2c:1d:15:22:4f:29:2f:70:5f:16:5b:26:de:28:b1:f8:56:c9: 33:ca:b4:5c:a7:94:58:d1:5b:8d:fa:ce:90:ad:b7:43:5c:c1: e6:78:ae:b8:08:cc:8a:2b:0b:66:4b:c3:97:97:3d:93:61:7c: 4e:e0:39:0b:3e:2c:ed:3a:95:04:0c:4e:96:af:bc:fd:58:86: 39:68:52:b6:db:0f:80:80:08:c8:17:c8:fe:01:c9:64:20:06: dd:52:d2:df:86:7d:4a:5b:d0:85:f6:77:05:a9:a8:1b:9a:60: a6:39:c9:2f:da:75:4e:7a:30:38:45:72:ad:c7:ed:58:d9:71: 10:df:fb:18:43:94:14:08:2d:c8:66:84:87:e8:8f:ac:49:31: 1d:a1:23:b5:a4:18:00:25:3d:9a:be:80:16:47:fa:7a:27:3c: 71:0c:24:19:29:0e:71:fc:2a:c2:17:23:4e:d8:02:e1:cb:81: 90:f0:fb:94:39:c9:b8:c6:0d:01:6b:bf:bb:14:61:a4:6b:97: cf:73:cf:65:74:fb:02:e5:5c:cc:23:30:e6:d7:8f:f1:81:a3: e3:2c:0b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwNzIwMjA0NzExWhcNMjUwNzI3MjA0NzExWjAYMRYwFAYD VQQDEw02ODdkNTVjZi1lZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzSp/zw8tOnDU3t+5rSrQh1TXojn84RSYzJrfPYLwBuwV+0bM0ZyQLbgKcpH xm6aksseSg+IqdQ2oirb9XMgaKU2U/9o8QyolBXpf80JUt3b0hZC73uZt6CLw/Z1 myJjt1mQBZneUFL89+S541cpn3izF0FPscGYhHi9dpD/WjOv/gDS/jLboibO1gnX qyCHKbVgYL/EdYJU5DbJXOGg0CL4H9jjg7n2wjsyt/we/4zVJM4IYEh04AzsHx+x xopMaVeuym2NS6Vz8RjfdQ5qTPpuP02IzORF7yaGYiysFnwTqzMJt2RfF8c+Wk2F TsRP9RdaZvB8vd6oF6tsTpHw5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8qP2IC MflQj2a3nGVK744Bw7NYMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZxloajJHI/bmRp65d5PrX7tB5d0kPmIAiEw57JQFIBi0vg4sHRUi TykvcF8WWybeKLH4VskzyrRcp5RY0VuN+s6QrbdDXMHmeK64CMyKKwtmS8OXlz2T YXxO4DkLPiztOpUEDE6Wr7z9WIY5aFK22w+AgAjIF8j+AclkIAbdUtLfhn1KW9CF 9ncFqagbmmCmOckv2nVOejA4RXKtx+1Y2XEQ3/sYQ5QUCC3IZoSH6I+sSTEdoSO1 pBgAJT2avoAWR/p6JzxxDCQZKQ5x/CrCFyNO2ALhy4GQ8PuUOcm4xg0Ba7+7FGGk a5fPc89ldPsC5VzMIzDm14/xgaPjLAvI -----END CERTIFICATE-----Generated at Tue Jul 22 04:10:57 2025 by rpki-client