$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: SS69/jKd14ZG/p7+kXb7yRuz3VJ+cAziBZD6RoPiqoc= Subject key identifier: DA:2F:D1:D2:FE:25:18:DD:36:1B:D7:68:15:C9:93:87:3C:DC:17:D4 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 66 Signing time: Fri 05 Sep 2025 07:30:30 +0000 Manifest this update: Fri 05 Sep 2025 07:30:30 +0000 Manifest next update: Fri 12 Sep 2025 07:30:30 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: ajF/Bm1z3YpDf/vDyDItcZYdjMsf7ygQLYi6LJ1U8GA=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Sep 5 07:30:30 2025 GMT Not After : Sep 12 07:30:30 2025 GMT Subject: CN=68ba9196-0998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:56:5b:de:c0:25:94:1b:43:ad:ca:00:90: 63:34:4e:58:26:23:80:15:2c:9d:fb:c3:48:1b:ba: af:5f:ef:1e:bc:cb:4e:8e:bf:8c:3b:fc:11:59:04: f6:42:03:ff:49:aa:50:fd:04:a2:af:43:c1:50:d8: 5d:67:6a:4e:3b:3d:0b:fb:67:bf:5f:f4:02:87:28: 69:a6:e3:ed:77:b8:89:31:a9:d9:0b:ed:b9:34:e4: 57:b0:f0:0b:f7:80:0f:43:a4:3f:5e:39:65:fe:7d: 5d:3a:91:1d:89:2d:13:fa:1c:ab:ee:b2:4e:91:7b: 6f:92:23:ca:67:b0:db:e3:0b:d2:d4:25:4d:07:0f: 53:4e:31:13:80:21:3f:ef:a3:e2:07:1b:c8:78:51: ee:b8:d9:2d:17:a9:1f:d4:55:a5:a2:0a:47:21:62: 94:79:e0:2d:2b:d4:8d:3e:82:a8:63:03:36:4e:76: a6:c7:56:fd:0d:3d:7b:e3:d0:4f:77:2b:af:f5:ec: 43:7f:f1:60:d5:18:4c:c0:3a:12:7f:cc:d0:55:3c: 5f:2b:c2:b4:52:4b:1b:1e:28:45:46:8f:77:36:78: 0d:f1:e8:ad:de:56:05:44:b2:12:75:67:4a:45:ca: 6d:59:e6:a1:fc:06:39:ff:2c:fb:88:a8:11:01:30: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2F:D1:D2:FE:25:18:DD:36:1B:D7:68:15:C9:93:87:3C:DC:17:D4 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:56:09:4a:da:47:ce:fa:47:87:39:9a:50:f7:26:cd:85:82: 10:f8:52:04:b3:2d:c1:6b:24:83:68:8f:e5:31:82:53:ea:32: a9:2a:ea:0c:db:d1:ae:97:c0:22:15:2e:31:bc:76:27:d2:7b: 3d:0a:2c:8a:49:0b:18:9d:b3:01:e3:f9:fd:c5:19:3b:84:09: 35:e1:48:9e:b5:06:aa:93:0b:d4:21:97:71:c7:6b:f0:8e:74: 23:ec:96:84:73:83:bc:e1:34:54:1c:3c:c1:06:ae:c9:52:3b: e9:98:02:57:3c:a1:83:5e:57:75:3b:9a:c9:3a:62:26:b1:50: c2:f2:c0:88:5d:e8:3a:11:8d:fa:e6:7b:ad:d6:52:0a:2a:bd: e3:67:6e:f8:0f:e6:81:f5:53:89:80:e9:fb:3b:20:b4:d4:96: f4:b4:93:49:0f:eb:14:0e:38:c6:1c:e5:cb:f6:b8:ba:ce:18: 28:65:55:91:ce:ca:03:79:a3:2a:b2:5f:d5:36:29:5a:4b:d2: fb:f8:c3:75:d6:cd:ad:db:d2:82:6a:48:e9:4e:2e:88:29:2f: 28:8d:e9:b8:a1:4d:18:db:74:a1:ae:c3:06:86:76:0f:b6:62: 0b:a8:98:76:d4:2d:0d:d9:bb:b0:36:a9:ae:e9:a5:e0:e0:90: 31:40:b2:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA5MDUwNzMwMzBaFw0yNTA5MTIwNzMwMzBaMBgxFjAUBgNV BAMTDTY4YmE5MTk2LTA5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWU1Zb3sAllBtDrcoAkGM0TlgmI4AVLJ37w0gbuq9f7x68y06Ov4w7/BFZBPZC A/9JqlD9BKKvQ8FQ2F1nak47PQv7Z79f9AKHKGmm4+13uIkxqdkL7bk05Few8Av3 gA9DpD9eOWX+fV06kR2JLRP6HKvusk6Re2+SI8pnsNvjC9LUJU0HD1NOMROAIT/v o+IHG8h4Ue642S0XqR/UVaWiCkchYpR54C0r1I0+gqhjAzZOdqbHVv0NPXvj0E93 K6/17EN/8WDVGEzAOhJ/zNBVPF8rwrRSSxseKEVGj3c2eA3x6K3eVgVEshJ1Z0pF ym1Z5qH8Bjn/LPuIqBEBMIKjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2i/R0v4l GN02G9doFcmThzzcF9QwHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGNWCUraR876R4c5mlD3Js2FghD4UgSzLcFrJINoj+UxglPqMqkq6gzb 0a6XwCIVLjG8difSez0KLIpJCxidswHj+f3FGTuECTXhSJ61BqqTC9Qhl3HHa/CO dCPsloRzg7zhNFQcPMEGrslSO+mYAlc8oYNeV3U7msk6YiaxUMLywIhd6DoRjfrm e63WUgoqveNnbvgP5oH1U4mA6fs7ILTUlvS0k0kP6xQOOMYc5cv2uLrOGChlVZHO ygN5oyqyX9U2KVpL0vv4w3XWza3b0oJqSOlOLogpLyiN6bihTRjbdKGuwwaGdg+2 YguomHbULQ3Zu7A2qa7ppeDgkDFAssc= -----END CERTIFICATE-----Generated at Sat Sep 6 13:13:33 2025 by rpki-client