$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: tFR4VY8XKYP9mwFse17rGUCCku2lgimvpz0hstkOzug= Subject key identifier: 19:63:9C:3B:51:A7:92:87:5A:CA:F9:16:17:FD:4F:0A:16:86:E9:20 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0E1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0E13 Signing time: Fri 18 Jul 2025 17:59:25 +0000 Manifest this update: Fri 18 Jul 2025 17:59:24 +0000 Manifest next update: Fri 25 Jul 2025 17:59:24 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: fkpd6niSzbDCAgbIHhvct4EN/cL6mqdXhRqCV/sXb2c=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3612 (0xe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Jul 18 17:59:24 2025 GMT Not After : Jul 25 17:59:24 2025 GMT Subject: CN=687a8b7d-6bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:9f:b8:ea:53:ee:52:c7:8e:ec:87:04:8c: 2f:37:64:2f:78:49:30:46:64:65:20:25:56:fa:29: fc:7b:d5:26:9f:de:27:fe:f6:9e:a0:37:0b:50:d6: 62:a3:9e:b6:38:d6:0b:d7:42:08:c6:80:74:80:fc: d2:82:31:9f:b0:56:d0:f4:13:c4:77:cc:d0:56:55: bf:3e:ae:79:1e:72:db:95:cd:55:e7:d7:48:26:5b: 11:f6:c7:8f:59:e5:58:69:63:28:df:22:71:7b:67: 5f:e6:3e:82:8e:55:ed:fe:8b:93:19:91:05:03:02: 27:12:a8:c6:ee:7e:58:f4:2e:6f:0a:41:b9:3a:69: 02:a9:92:02:be:2b:b3:96:6c:d6:6b:db:e3:87:68: ca:d4:f2:6b:8c:3a:1a:cd:a0:32:20:37:5c:80:ac: c2:e7:f2:3d:50:87:23:72:96:4b:b5:13:51:34:65: 75:e0:03:19:7a:fd:60:e4:a4:72:98:e7:3c:17:e1: a7:bf:6a:0f:9c:c4:80:bb:35:dd:f8:65:11:a8:a7: 59:f5:6f:cf:3c:2e:75:4a:f1:15:de:69:a9:38:8c: 3e:55:77:6d:eb:30:9f:57:1f:73:4b:44:3a:59:2c: 63:2d:c3:df:f4:c5:1c:47:2e:95:55:1a:3f:5f:1a: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:63:9C:3B:51:A7:92:87:5A:CA:F9:16:17:FD:4F:0A:16:86:E9:20 X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:74:de:af:ad:9d:a1:65:4e:56:48:e4:6b:6d:03:b5:c2:6c: b7:20:2c:23:46:b0:0c:6e:bc:b0:69:79:cb:ad:f9:59:28:6e: 45:dd:74:8e:4a:52:f8:83:b9:e8:cc:73:0a:f9:40:31:93:0e: 08:1b:12:13:e0:1b:0a:3d:1b:0b:db:78:53:21:8a:ef:cd:85: 8b:81:73:96:eb:35:68:5f:25:c3:07:4c:2d:b1:72:eb:8e:30: db:da:50:ae:a6:5f:a3:ff:8d:4e:8a:b0:db:e4:1c:cc:82:05: 5d:a7:b7:6f:37:1c:42:fb:64:f9:57:b1:5e:32:bc:36:87:8d: 28:2d:4d:c0:57:e3:5b:a4:e2:db:a2:5d:66:cf:6d:84:28:43: b5:05:81:da:ef:46:b2:49:05:4f:79:17:e7:d3:b7:f9:2b:0f: 85:b2:70:ac:4d:d6:c6:21:87:30:8a:69:9e:cb:3e:aa:e7:a7: ad:ec:67:ca:c9:40:56:f1:b6:39:0f:a3:ba:c9:3d:ea:18:7d: 77:74:b7:a2:a9:e4:68:76:08:af:19:8d:4d:e4:b3:21:22:50: 2f:94:b5:f1:41:e8:9a:d4:65:ca:71:e9:2b:2b:a6:bd:b5:2b: 9b:ca:4a:99:c2:a2:70:55:0a:9d:01:d8:d9:4b:42:80:81:d2: c2:84:7f:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUwNzE4MTc1OTI0WhcNMjUwNzI1MTc1OTI0WjAYMRYwFAYD VQQDEw02ODdhOGI3ZC02YmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscqfuOpT7lLHjuyHBIwvN2QveEkwRmRlICVW+in8e9Umn94n/vaeoDcLUNZi o562ONYL10IIxoB0gPzSgjGfsFbQ9BPEd8zQVlW/Pq55HnLblc1V59dIJlsR9seP WeVYaWMo3yJxe2df5j6CjlXt/ouTGZEFAwInEqjG7n5Y9C5vCkG5OmkCqZICviuz lmzWa9vjh2jK1PJrjDoazaAyIDdcgKzC5/I9UIcjcpZLtRNRNGV14AMZev1g5KRy mOc8F+Gnv2oPnMSAuzXd+GURqKdZ9W/PPC51SvEV3mmpOIw+VXdt6zCfVx9zS0Q6 WSxjLcPf9MUcRy6VVRo/Xxq46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBljnDtR p5KHWsr5Fhf9TwoWhukgMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbdN6vrZ2hZU5WSORrbQO1wmy3ICwjRrAMbrywaXnLrflZKG5F3XSO SlL4g7nozHMK+UAxkw4IGxIT4BsKPRsL23hTIYrvzYWLgXOW6zVoXyXDB0wtsXLr jjDb2lCupl+j/41OirDb5BzMggVdp7dvNxxC+2T5V7FeMrw2h40oLU3AV+NbpOLb ol1mz22EKEO1BYHa70aySQVPeRfn07f5Kw+FsnCsTdbGIYcwimmeyz6q56et7GfK yUBW8bY5D6O6yT3qGH13dLeiqeRodgivGY1N5LMhIlAvlLXxQeia1GXKcekrK6a9 tSubykqZwqJwVQqdAdjZS0KAgdLChH8P -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:31 2025 by rpki-client