$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: dez9pywF77UUTnpp+UUZ8einAkQJdG0wuf2tsNYjL+I= Subject key identifier: 3E:66:76:81:6E:43:D6:B6:D6:35:D7:5D:AC:B2:4E:E9:23:E1:43:13 Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 060D Signing time: Fri 18 Jul 2025 23:11:48 +0000 Manifest this update: Fri 18 Jul 2025 23:11:48 +0000 Manifest next update: Fri 25 Jul 2025 23:11:48 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: nnXKcR3XSRTiMjFASsiP75XRCfo1dUTqBRgma/uoH8M=) 2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: MNI4tMTnWERKtqUoO+1DtINRz6vPCPMkYFmwGLJDwJM=) 3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: DLHOhN7MxK0HNTrL76H062J5sW6+LyM3CKGkbsKyA38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: Jul 18 23:11:48 2025 GMT Not After : Jul 25 23:11:48 2025 GMT Subject: CN=687ad4b4-62f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:b5:e6:c3:7e:cc:b8:87:01:b8:27:f2:4a: 16:2d:3f:53:7a:3d:ce:19:6d:73:58:eb:54:16:a9: 03:92:2c:df:49:0b:dc:2e:ef:69:ca:3a:57:3f:3c: 1b:43:51:ce:e9:80:d2:5f:66:0e:79:83:8f:ac:01: 61:7e:7a:30:9e:be:17:3d:37:41:dc:d4:39:af:7c: 41:aa:08:b2:92:c9:1a:de:98:16:6e:cb:3d:bf:c5: 5e:85:be:65:eb:0a:12:a2:b2:9e:f8:e2:48:af:aa: de:1f:7e:c1:23:01:06:2a:00:37:b8:83:2d:fd:d2: 46:08:a4:a5:bf:bf:16:30:3b:ee:63:6e:fa:bf:9c: f0:65:bb:f0:7c:0e:9a:d9:c0:73:55:da:93:3e:3e: 00:59:50:94:65:54:84:a2:fb:82:75:d0:fa:43:6d: 45:e8:5b:43:33:4e:7d:52:10:14:5f:af:90:7c:ac: 89:f7:11:5c:b6:2d:c3:8d:38:5a:44:94:cf:fa:59: 46:9e:2e:8f:03:60:89:d6:fb:62:33:ea:f1:1d:69: 30:40:af:af:3e:72:2a:63:cc:4e:01:1f:7d:52:a4: 7f:ec:0a:80:dd:4d:66:15:4c:fe:1e:42:a1:8e:07: 08:5b:29:ac:de:13:31:40:07:ca:a2:17:68:e4:10: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:66:76:81:6E:43:D6:B6:D6:35:D7:5D:AC:B2:4E:E9:23:E1:43:13 X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:36:da:07:83:35:cb:7c:24:29:6c:5a:91:6d:dc:4e:ce:09: 88:b2:74:32:6a:9e:98:91:73:5c:95:b2:28:c3:00:5d:e2:88: c2:38:ad:3c:e2:d7:93:ae:83:de:3f:fe:d2:42:e0:0b:c4:1a: ff:4c:b8:30:43:84:82:44:b5:77:f4:11:0c:3a:d3:7e:7f:fd: 2a:ea:ab:57:13:e1:df:18:51:ef:56:9c:53:03:a6:2f:ab:f6: b6:06:32:48:f2:bd:be:44:3b:92:35:03:c6:9a:08:44:30:3c: 86:6d:76:76:ca:07:e4:75:a9:41:40:33:5b:c0:b3:55:92:25: fe:08:2c:06:14:95:23:0a:6f:03:67:1a:a8:5d:56:d4:9a:da: 09:55:94:7c:18:16:39:1d:58:57:13:0b:42:92:16:11:e5:ec: b9:cc:12:7c:8f:f2:66:f8:df:a0:98:af:f1:ad:28:48:ee:45: a1:03:ff:e0:52:a4:84:c8:61:fa:c4:ca:70:d7:69:c3:30:33: 06:a4:23:2a:be:6b:3b:4b:0a:5e:c3:06:0a:7a:00:92:43:02: cb:75:50:14:4c:7f:ba:8f:36:2a:65:c2:17:dd:b3:df:01:2a: 83:32:5d:56:91:15:1d:c6:84:8a:ed:d5:1c:32:92:bd:95:db: 76:71:02:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjUwNzE4MjMxMTQ4WhcNMjUwNzI1MjMxMTQ4WjAYMRYwFAYD VQQDEw02ODdhZDRiNC02MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqu15sN+zLiHAbgn8koWLT9Tej3OGW1zWOtUFqkDkizfSQvcLu9pyjpXPzwb Q1HO6YDSX2YOeYOPrAFhfnownr4XPTdB3NQ5r3xBqgiykska3pgWbss9v8Vehb5l 6woSorKe+OJIr6reH37BIwEGKgA3uIMt/dJGCKSlv78WMDvuY276v5zwZbvwfA6a 2cBzVdqTPj4AWVCUZVSEovuCddD6Q21F6FtDM059UhAUX6+QfKyJ9xFcti3DjTha RJTP+llGni6PA2CJ1vtiM+rxHWkwQK+vPnIqY8xOAR99UqR/7AqA3U1mFUz+HkKh jgcIWyms3hMxQAfKohdo5BAc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5mdoFu Q9a21jXXXayyTukj4UMTMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQNtoHgzXLfCQpbFqRbdxOzgmIsnQyap6YkXNclbIowwBd4ojCOK08 4teTroPeP/7SQuALxBr/TLgwQ4SCRLV39BEMOtN+f/0q6qtXE+HfGFHvVpxTA6Yv q/a2BjJI8r2+RDuSNQPGmghEMDyGbXZ2ygfkdalBQDNbwLNVkiX+CCwGFJUjCm8D ZxqoXVbUmtoJVZR8GBY5HVhXEwtCkhYR5ey5zBJ8j/Jm+N+gmK/xrShI7kWhA//g UqSEyGH6xMpw12nDMDMGpCMqvms7SwpewwYKegCSQwLLdVAUTH+6jzYqZcIX3bPf ASqDMl1WkRUdxoSK7dUcMpK9ldt2cQIu -----END CERTIFICATE-----Generated at Sun Jul 20 10:53:48 2025 by rpki-client