$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: NGmiaxwSXDFwUG3YgHddNYaIeaBMp3RT+k4j7Utqnbk= Subject key identifier: DF:51:5D:C1:30:BF:A2:5E:AF:76:02:91:3F:FF:08:B1:88:6E:1D:69 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 0204 Signing time: Mon 21 Jul 2025 02:22:56 +0000 Manifest this update: Mon 21 Jul 2025 02:22:56 +0000 Manifest next update: Mon 28 Jul 2025 02:22:56 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: FQYjpJUKijCZTkCSsrTOM3PBZth9Nxv+eWFkLm8nBbg=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Jul 21 02:22:56 2025 GMT Not After : Jul 28 02:22:56 2025 GMT Subject: CN=687da480-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:73:5b:fe:fb:c1:af:95:98:37:61:cd:1c: fb:69:ab:bb:99:ea:df:5d:25:b3:89:1b:6d:c1:8b: 64:76:f3:fd:53:28:ab:a2:bb:40:59:73:8f:cd:25: 1c:b3:a2:e4:4a:0c:72:63:bc:10:db:6e:db:df:c4: 59:3e:7a:ad:35:0b:46:b6:92:dc:9a:66:32:5b:a8: eb:01:df:a0:d0:96:c8:ba:b9:30:33:96:19:45:cc: 43:de:ac:f3:45:2b:e3:91:fc:10:df:d9:99:46:e3: 6f:51:8c:c2:38:b1:d0:95:75:2b:ca:c7:18:d6:11: 0d:ca:99:33:35:3c:40:bb:94:b8:b5:cb:87:6a:77: 51:92:9a:01:7b:8b:68:86:c2:7e:71:6b:70:d7:c5: 14:33:00:8c:a0:e3:85:7b:23:50:74:70:31:8a:43: 4c:03:29:bb:8e:a3:ad:87:a6:a5:d5:36:97:04:43: 6d:87:05:a8:7c:15:11:d0:4d:07:4c:b8:ae:bf:4e: e3:69:50:1e:33:44:50:22:6b:d1:3e:cc:c5:72:ac: ab:02:1b:be:e3:11:d1:b7:d3:93:e3:51:1e:fe:0b: 3b:41:29:d1:f6:29:b6:20:5d:fe:24:65:45:6d:d5: 82:66:e1:30:82:f2:81:87:ef:06:90:fc:09:62:31: ed:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:51:5D:C1:30:BF:A2:5E:AF:76:02:91:3F:FF:08:B1:88:6E:1D:69 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ea:ce:bf:d4:ab:4c:de:53:85:d0:0f:26:5e:71:72:ab:95: 43:3a:2f:ee:9d:fb:0f:15:06:28:23:5f:fd:cc:e3:ae:1d:dc: c4:6f:24:4e:0b:1f:2a:5f:df:6a:8b:81:c9:3a:9f:b7:0a:26: 5e:2d:2c:66:3d:6e:04:a5:9b:d2:f2:c2:ff:6a:69:f0:1d:f3: 94:76:2a:9c:d0:b6:70:cb:8c:10:90:8e:36:6f:eb:49:2f:bc: b3:90:7b:b2:72:47:fa:39:46:ae:49:c2:06:a8:64:28:03:a5: 4e:a2:dd:10:c4:74:6d:2a:97:22:7c:35:d1:27:0f:c9:87:7d: 3c:f7:17:8d:3f:3b:ea:34:fc:fd:fe:d3:d5:28:28:96:e7:66: af:dc:39:df:19:49:37:51:92:a7:cf:96:1e:99:46:f1:19:dc: 3d:c6:06:64:4d:af:82:26:0b:63:1e:b5:00:21:67:a8:5e:88: cd:91:72:8b:1f:d3:1c:c4:7a:e4:63:b0:c5:55:c1:5d:bb:af: b4:a6:5f:6b:6f:7e:97:78:aa:06:87:43:36:16:d8:09:5b:ff: 03:89:c8:2b:de:25:07:c0:e7:1b:77:48:8f:90:f9:67:bc:c9: ec:b3:7a:7d:3f:c5:63:4f:4f:b8:93:f7:1f:bd:eb:d0:69:d7: 84:81:dc:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUwNzIxMDIyMjU2WhcNMjUwNzI4MDIyMjU2WjAYMRYwFAYD VQQDEw02ODdkYTQ4MC02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxspzW/77wa+VmDdhzRz7aau7merfXSWziRttwYtkdvP9UyirortAWXOPzSUc s6LkSgxyY7wQ227b38RZPnqtNQtGtpLcmmYyW6jrAd+g0JbIurkwM5YZRcxD3qzz RSvjkfwQ39mZRuNvUYzCOLHQlXUryscY1hENypkzNTxAu5S4tcuHandRkpoBe4to hsJ+cWtw18UUMwCMoOOFeyNQdHAxikNMAym7jqOth6al1TaXBENthwWofBUR0E0H TLiuv07jaVAeM0RQImvRPszFcqyrAhu+4xHRt9OT41Ee/gs7QSnR9im2IF3+JGVF bdWCZuEwgvKBh+8GkPwJYjHtcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9RXcEw v6Jer3YCkT//CLGIbh1pMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo6s6/1KtM3lOF0A8mXnFyq5VDOi/unfsPFQYoI1/9zOOuHdzEbyRO Cx8qX99qi4HJOp+3CiZeLSxmPW4EpZvS8sL/amnwHfOUdiqc0LZwy4wQkI42b+tJ L7yzkHuyckf6OUauScIGqGQoA6VOot0QxHRtKpcifDXRJw/Jh3089xeNPzvqNPz9 /tPVKCiW52av3DnfGUk3UZKnz5YemUbxGdw9xgZkTa+CJgtjHrUAIWeoXojNkXKL H9McxHrkY7DFVcFdu6+0pl9rb36XeKoGh0M2FtgJW/8Dicgr3iUHwOcbd0iPkPln vMnss3p9P8VjT0+4k/cfvevQadeEgdzz -----END CERTIFICATE-----Generated at Mon Jul 21 05:59:21 2025 by rpki-client