$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: //VuSmu8A7af/dRlw+gm0Dqav6G0WtfP3taISYEOLfI= Subject key identifier: 89:F1:60:AC:07:E3:3D:1C:82:95:64:6D:7C:C7:76:D9:13:1B:D9:F0 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: A1 Signing time: Sat 19 Jul 2025 06:29:10 +0000 Manifest this update: Sat 19 Jul 2025 06:29:09 +0000 Manifest next update: Sat 26 Jul 2025 06:29:09 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: nWfDBI0wjei2WMPxtf3gxBnz0qeeNbcRITjaRxLwyC8=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Jul 19 06:29:09 2025 GMT Not After : Jul 26 06:29:09 2025 GMT Subject: CN=687b3b36-81c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:c0:da:f8:7a:41:9a:4e:7f:02:98:b9:4d: 1e:97:53:2c:76:76:17:96:b2:7f:90:17:90:a9:a5: 5b:d6:fc:27:40:c7:a7:e9:b7:5c:05:20:58:0a:30: 85:dd:b6:16:ef:cb:98:60:a4:80:79:6b:86:60:6e: d9:1c:ef:65:d9:41:2e:d2:86:49:26:f3:d3:3b:53: 19:f4:06:47:6c:79:54:48:87:38:ec:98:ca:9d:4d: 4e:28:55:c0:15:49:ac:e1:85:4d:42:bd:8c:23:dd: e1:7d:fd:98:bc:79:da:3e:bf:24:8a:8a:a1:63:ea: da:1e:e1:d7:a3:c8:bb:86:7b:32:6c:dc:9e:ed:6a: 8c:17:ca:57:d7:0a:1e:a8:3c:53:9a:42:d8:5c:1e: 0e:8b:3e:16:93:89:65:0e:ff:82:23:a1:3f:75:6c: c1:a0:c4:db:63:d9:55:8f:ee:b5:fd:f9:d4:af:8c: 81:89:cf:94:64:dc:61:f3:43:54:96:12:03:9c:4a: e2:65:ac:a9:92:d0:33:ee:ad:20:c4:df:d1:b8:98: bb:5d:a6:8b:29:05:4b:57:6c:75:d5:ea:b7:fd:ff: 67:07:1d:2c:5d:71:42:48:86:86:cf:7b:b9:e7:c8: 28:5e:80:75:e7:22:a9:dc:72:08:13:e9:dd:7f:ac: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:60:AC:07:E3:3D:1C:82:95:64:6D:7C:C7:76:D9:13:1B:D9:F0 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:d8:7f:2c:4f:1f:54:75:3f:d4:58:4b:b6:a0:83:cb:74: 8a:70:6e:e6:12:f8:81:45:d5:59:30:71:d0:ba:64:68:3e:50: fe:dd:d9:9e:84:d0:3b:c6:36:83:d3:f4:b9:4a:69:4e:a4:5d: 12:80:43:d1:53:8b:91:f2:18:61:93:78:cb:04:13:ae:0c:f1: 6c:31:96:0c:89:11:f1:b9:29:08:17:fc:a9:da:6e:ab:b4:cc: 31:6b:b9:b5:b9:9a:e4:95:81:d7:f7:7b:d8:2a:20:4b:0d:1e: 97:8b:65:c8:f5:4f:04:d1:22:48:b9:7f:b3:86:52:c8:4c:f2: f9:f6:17:60:71:a5:80:fa:ae:7a:8e:e5:c1:f6:15:71:7e:e4: 8d:1a:84:b5:2f:2f:c5:82:8a:e2:76:2d:ce:6a:a7:9d:b4:12: 65:c6:90:04:47:7b:6d:2b:1f:f1:ab:4c:0f:af:86:f5:88:04: 50:50:bf:16:42:26:b4:57:cf:9d:fe:78:c7:5b:d5:e8:78:1a: 70:37:fa:78:e1:61:6e:47:f1:10:53:6a:07:8d:02:b5:49:fe: 32:a6:4c:31:6a:25:66:4e:cd:cd:24:25:50:5a:a4:d2:f5:65: dd:da:d9:31:3b:60:95:5e:92:e1:3f:6b:37:6d:03:75:6b:00: 78:a0:1e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjUwNzE5MDYyOTA5WhcNMjUwNzI2MDYyOTA5WjAYMRYwFAYD VQQDEw02ODdiM2IzNi04MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwebA2vh6QZpOfwKYuU0el1MsdnYXlrJ/kBeQqaVb1vwnQMen6bdcBSBYCjCF 3bYW78uYYKSAeWuGYG7ZHO9l2UEu0oZJJvPTO1MZ9AZHbHlUSIc47JjKnU1OKFXA FUms4YVNQr2MI93hff2YvHnaPr8kioqhY+raHuHXo8i7hnsybNye7WqMF8pX1woe qDxTmkLYXB4Oiz4Wk4llDv+CI6E/dWzBoMTbY9lVj+61/fnUr4yBic+UZNxh80NU lhIDnEriZaypktAz7q0gxN/RuJi7XaaLKQVLV2x11eq3/f9nBx0sXXFCSIaGz3u5 58goXoB15yKp3HIIE+ndf6wLuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInxYKwH 4z0cgpVkbXzHdtkTG9nwMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdbNh/LE8fVHU/1FhLtqCDy3SKcG7mEviBRdVZMHHQumRoPlD+3dme hNA7xjaD0/S5SmlOpF0SgEPRU4uR8hhhk3jLBBOuDPFsMZYMiRHxuSkIF/yp2m6r tMwxa7m1uZrklYHX93vYKiBLDR6Xi2XI9U8E0SJIuX+zhlLITPL59hdgcaWA+q56 juXB9hVxfuSNGoS1Ly/Fgoridi3OaqedtBJlxpAER3ttKx/xq0wPr4b1iARQUL8W Qia0V8+d/njHW9XoeBpwN/p44WFuR/EQU2oHjQK1Sf4ypkwxaiVmTs3NJCVQWqTS 9WXd2tkxO2CVXpLhP2s3bQN1awB4oB4V -----END CERTIFICATE-----Generated at Sun Jul 20 06:43:23 2025 by rpki-client