$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft File: daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json) Hash identifier: FOHtCgwVDrlaI+6/eLeBBk9g3WjtTFp/EmMbxz35HFc= Subject key identifier: DC:28:8B:34:96:80:0E:AD:3B:47:73:4C:A2:DA:9D:AE:DC:E7:90:8F Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 Certificate issuer: /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft Manifest number: 0678 Signing time: Sun 24 Aug 2025 15:04:38 +0000 Manifest this update: Sun 24 Aug 2025 15:04:38 +0000 Manifest next update: Sun 31 Aug 2025 15:04:38 +0000 Files and hashes: 1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: z/bUxHznyPKYs9RHQocitYAMRkpoRSrSi/zxaWT/eZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Validity Not Before: Aug 24 15:04:38 2025 GMT Not After : Aug 31 15:04:38 2025 GMT Subject: CN=68ab2a06-328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:03:46:f2:39:d5:e1:e6:f3:80:fe:1c:29: 96:86:aa:6c:99:b5:1a:69:32:4a:14:cd:01:7a:d8: cf:b3:71:e0:cf:fa:3a:71:7a:e5:5f:36:22:b4:af: 8f:c2:83:5a:d7:8a:c2:3b:ee:92:6d:14:7f:52:3b: 9d:8a:7d:fa:b5:9f:e5:a0:db:f6:e2:32:bb:68:e8: dc:64:85:be:b0:27:f2:d7:9d:3c:03:f8:86:94:95: 49:05:b5:e0:cd:33:bc:70:49:d1:96:b5:7d:f0:3d: 23:32:29:f5:62:79:dd:fd:c6:0d:0b:59:12:8d:a2: d2:4f:88:52:96:11:60:94:e7:ba:d8:41:96:21:c8: 9a:62:5a:af:ed:0c:24:b1:18:21:aa:24:08:f9:c4: 88:5f:af:61:e3:0d:4c:1b:f5:2f:b4:0d:86:57:a3: ee:12:4a:25:0b:76:36:d0:20:49:82:08:e8:48:bc: 03:31:63:5e:a8:c4:4e:14:b8:5a:e8:58:80:5e:a6: b3:d0:dc:7a:98:76:96:1e:00:3c:c6:53:d0:23:77: 0f:d0:6d:06:87:c2:93:fa:b1:46:91:07:c9:b9:75: fd:c4:1a:9d:31:eb:db:4e:bb:89:bd:7e:e3:1e:e4: d6:ba:26:00:d2:f2:3e:d9:26:28:40:e8:d5:8c:af: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:8B:34:96:80:0E:AD:3B:47:73:4C:A2:DA:9D:AE:DC:E7:90:8F X509v3 Authority Key Identifier: keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:91:53:7d:b6:f7:52:66:1b:cc:d5:2f:6e:ab:bd:51:bb: fe:74:8b:e2:24:8a:f0:db:5b:c4:09:c0:ed:46:31:09:f4:39: 37:b2:89:fc:77:89:60:59:90:27:b7:3e:90:ff:ce:e9:34:cb: d3:e2:4e:4d:98:41:dc:43:c1:fc:a0:7e:a6:ff:c9:94:f4:4c: 34:78:bd:23:96:17:d7:c5:34:56:71:be:06:c5:da:f0:96:fc: cf:6c:e8:fa:12:15:04:8d:3d:b8:a8:55:b5:4f:c4:f2:3f:d7: 5f:b8:1c:c6:f4:a0:86:d1:a4:d2:53:ec:b8:da:01:32:94:0a: 80:11:4b:34:17:27:ba:dd:b2:0c:e1:77:70:a8:b4:03:21:c1: b8:17:74:42:4b:dc:7e:fe:96:37:59:53:95:64:b2:ab:56:77: 67:84:64:38:9c:04:46:f8:63:b7:12:1d:cc:80:8d:c0:89:bb: be:8c:6e:99:75:e8:be:d5:30:c3:8f:a6:03:5c:56:92:1d:d0: e3:b5:0f:a8:b8:07:4f:e6:b6:28:a9:59:b4:27:0b:75:51:8a: e3:5e:69:58:84:e6:99:90:06:9b:46:83:b6:0b:f4:5b:f2:56: 8c:fb:6b:ab:d4:43:a7:c2:58:c8:31:6d:6c:e1:ae:24:94:b3: b4:5b:38:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2MjYxMTAvBgNVBAUTKDc1QTE3RUFCOTA0MUI2NERCMzc0NzFDRkI0RUJGRjU5 MUU4RjY5OTMwHhcNMjUwODI0MTUwNDM4WhcNMjUwODMxMTUwNDM4WjAYMRYwFAYD VQQDEw02OGFiMmEwNi0zMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3voDRvI51eHm84D+HCmWhqpsmbUaaTJKFM0BetjPs3Hgz/o6cXrlXzYitK+P woNa14rCO+6SbRR/Ujudin36tZ/loNv24jK7aOjcZIW+sCfy1508A/iGlJVJBbXg zTO8cEnRlrV98D0jMin1Ynnd/cYNC1kSjaLST4hSlhFglOe62EGWIciaYlqv7Qwk sRghqiQI+cSIX69h4w1MG/UvtA2GV6PuEkolC3Y20CBJggjoSLwDMWNeqMROFLha 6FiAXqaz0Nx6mHaWHgA8xlPQI3cP0G0Gh8KT+rFGkQfJuXX9xBqdMevbTruJvX7j HuTWuiYA0vI+2SYoQOjVjK9wIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwoizSW gA6tO0dzTKLana7c55CPMB8GA1UdIwQYMBaAFHWhfquQQbZNs3Rxz7Tr/1kej2mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDYyNi82MDA4MUVBQzhE N0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRrMnpkSEhQdE92X1dSNlBh Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhRi1xNUJCdGsyemRISFB0T3ZfV1I2UGFaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDYyNi82MDA4MUVBQzhEN0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRr MnpkSEhQdE92X1dSNlBhWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLpFTfbb3UmYbzNUvbqu9Ubv+dIviJIrw21vECcDtRjEJ9Dk3son8 d4lgWZAntz6Q/87pNMvT4k5NmEHcQ8H8oH6m/8mU9Ew0eL0jlhfXxTRWcb4Gxdrw lvzPbOj6EhUEjT24qFW1T8TyP9dfuBzG9KCG0aTSU+y42gEylAqAEUs0Fye63bIM 4XdwqLQDIcG4F3RCS9x+/pY3WVOVZLKrVndnhGQ4nARG+GO3Eh3MgI3Aibu+jG6Z dei+1TDDj6YDXFaSHdDjtQ+ouAdP5rYoqVm0Jwt1UYrjXmlYhOaZkAabRoO2C/Rb 8laM+2ur1EOnwljIMW1s4a4klLO0Wzgc -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:14 2025 by rpki-client