$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: CGlFFpluAKRRIAVizACVqrqSrjgFNv2aJlWmkm4o+QQ= Subject key identifier: BC:90:D6:62:7C:36:3C:85:6F:E3:60:75:59:57:97:8E:02:7B:D7:32 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 2003 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1882 Signing time: Fri 30 May 2025 17:27:26 +0000 Manifest this update: Fri 30 May 2025 17:27:25 +0000 Manifest next update: Fri 06 Jun 2025 17:27:25 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: jAF7fj5kjHDKX5KTpPhLqIxRznHALACEyOsiA79ORv8=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8195 (0x2003) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: May 30 17:27:25 2025 GMT Not After : Jun 6 17:27:25 2025 GMT Subject: CN=6839ea7e-1d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:69:0a:20:87:65:c5:c9:32:02:d3:7b:ea: 41:ad:9c:97:65:45:d4:b6:3a:95:0b:cd:cd:97:23: c8:8d:40:2e:3a:5c:b9:e9:37:6a:f7:ca:f4:17:c2: da:fa:65:49:45:67:8f:0e:5f:23:eb:1f:cf:67:b1: 07:85:ea:84:f6:ed:ab:8e:90:b9:4d:83:ee:01:0d: bb:c6:b9:06:6f:00:fd:a5:6a:1b:2d:96:c7:bb:a1: 74:ba:39:8d:34:bd:16:74:e9:89:d6:e7:44:65:2d: 7a:6c:b4:24:20:e7:b4:35:a7:e9:9e:54:85:84:63: 91:f0:fc:dc:48:6a:a5:6f:94:8a:0a:f5:81:33:58: bb:f0:b7:8d:cc:aa:ff:ed:2c:5a:05:94:41:e3:39: fb:dd:f4:db:4f:89:3f:a0:ed:d0:e3:34:1c:6a:be: 80:17:92:33:4f:2d:2d:31:c6:c4:87:36:b0:7a:0c: 0a:2d:28:78:1b:9f:e8:b4:27:cc:21:e4:77:55:db: ec:7d:ae:10:d4:42:32:33:6d:b6:83:c4:a4:ef:17: 71:8b:f7:07:85:ec:d5:95:bc:21:7b:a0:8e:0d:a2: d0:05:02:e8:e6:cd:e1:55:16:bf:e8:ca:fb:b2:c9: 76:b1:8f:eb:38:e7:af:b1:ec:c0:8f:f7:c7:86:d3: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:90:D6:62:7C:36:3C:85:6F:E3:60:75:59:57:97:8E:02:7B:D7:32 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f9:97:34:af:da:40:a7:a6:25:9e:6f:39:3d:34:58:f0:a9: c6:be:b1:81:f0:db:f7:76:b0:15:39:26:41:44:5d:be:c1:d0: d4:0d:a8:b6:47:15:f3:f5:81:04:14:d2:04:11:b6:37:00:a6: f5:98:4f:71:41:6c:2c:fb:83:c7:21:2a:99:61:b5:69:84:00: 4d:3d:58:86:8d:bc:90:f3:93:6f:bf:73:17:35:d9:ee:b9:fe: 3f:63:3e:ce:72:4e:11:4d:cf:9b:2b:0e:cd:36:04:57:7f:47: 28:03:56:c4:e9:1e:83:81:8b:53:f8:b7:e8:11:f3:f9:3d:ee: dd:96:dd:4e:ea:09:c5:0d:c5:9a:07:11:10:bd:ae:cb:d4:39: bf:b2:de:36:6b:37:d6:7a:ab:c0:38:23:90:79:15:87:62:79: e7:51:19:9c:e3:54:ec:08:6e:4d:37:37:c7:d7:d4:4f:c0:b3: 63:9e:54:58:71:00:89:e8:50:8a:58:fc:6a:96:f3:a2:03:98: a0:4d:f9:c9:32:fa:7a:32:1b:7a:93:18:06:74:68:20:6c:6b: 91:25:8c:1b:44:e4:f3:3b:3a:9d:8d:0c:5f:68:b0:69:91:d1: 18:32:91:84:cc:f5:18:ec:af:10:1a:a6:5f:9a:24:cb:79:60: 16:38:25:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwNTMwMTcyNzI1WhcNMjUwNjA2MTcyNzI1WjAYMRYwFAYD VQQDEw02ODM5ZWE3ZS0xZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOFpCiCHZcXJMgLTe+pBrZyXZUXUtjqVC83NlyPIjUAuOly56Tdq98r0F8La +mVJRWePDl8j6x/PZ7EHheqE9u2rjpC5TYPuAQ27xrkGbwD9pWobLZbHu6F0ujmN NL0WdOmJ1udEZS16bLQkIOe0NafpnlSFhGOR8PzcSGqlb5SKCvWBM1i78LeNzKr/ 7SxaBZRB4zn73fTbT4k/oO3Q4zQcar6AF5IzTy0tMcbEhzawegwKLSh4G5/otCfM IeR3Vdvsfa4Q1EIyM222g8Sk7xdxi/cHhezVlbwhe6CODaLQBQLo5s3hVRa/6Mr7 ssl2sY/rOOevsezAj/fHhtMGxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyQ1mJ8 NjyFb+NgdVlXl44Ce9cyMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk+Zc0r9pAp6Ylnm85PTRY8KnGvrGB8Nv3drAVOSZBRF2+wdDUDai2 RxXz9YEEFNIEEbY3AKb1mE9xQWws+4PHISqZYbVphABNPViGjbyQ85Nvv3MXNdnu uf4/Yz7Ock4RTc+bKw7NNgRXf0coA1bE6R6DgYtT+LfoEfP5Pe7dlt1O6gnFDcWa BxEQva7L1Dm/st42azfWeqvAOCOQeRWHYnnnURmc41TsCG5NNzfH19RPwLNjnlRY cQCJ6FCKWPxqlvOiA5igTfnJMvp6Mht6kxgGdGggbGuRJYwbROTzOzqdjQxfaLBp kdEYMpGEzPUY7K8QGqZfmiTLeWAWOCV1 -----END CERTIFICATE-----Generated at Sat May 31 17:54:48 2025 by rpki-client