$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: 39Ooxq/gQr+Bpr7s2k5b+A/veHj8HCLsyVzXyVRLUnU= Subject key identifier: 88:63:79:5C:8C:CE:BD:94:50:FF:01:E8:21:4B:F5:CE:C8:8B:FA:3E Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 1221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1A7E Signing time: Thu 18 Sep 2025 17:18:16 +0000 Manifest this update: Thu 18 Sep 2025 17:18:15 +0000 Manifest next update: Thu 25 Sep 2025 17:18:15 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: yNZBEPlFNu6+9xugkftiwpT1Jwx5xGjiV1/EllLfdJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Sep 18 17:18:15 2025 GMT Not After : Sep 25 17:18:15 2025 GMT Subject: CN=68cc3ed7-6a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:00:f3:f7:f7:7d:8e:7b:dd:61:6d:5a:c5:54: 92:d7:8a:c2:41:1b:37:69:cc:a0:59:26:16:aa:88: f0:f1:81:1f:a0:3c:5a:04:92:fe:17:9d:7c:43:3c: 81:4a:b8:63:da:ec:46:82:0c:23:c5:00:ce:d2:70: 16:d4:b8:1c:c9:9e:36:25:01:99:92:75:a0:e2:18: c2:ea:6d:6c:dc:c6:da:dd:98:4e:cc:0f:2e:36:67: c8:75:23:d8:3b:e1:3a:fc:c2:e6:3c:1e:d3:0d:53: c1:a3:19:df:17:1a:b3:1a:c6:a3:bc:7b:50:cc:e1: 7f:c7:6c:ca:a8:7f:91:9a:0c:df:bb:a3:28:6e:c8: 70:c9:07:97:3d:5d:fb:c6:9d:9c:6e:03:b4:c2:83: 92:1a:13:de:69:90:6a:be:40:2a:7c:ee:c4:d4:50: 93:18:50:ac:04:6f:f8:92:7a:83:b7:fc:41:4f:a3: 6e:07:c2:4c:14:74:ac:9d:e8:f2:fa:0f:00:8c:08: 27:dd:f9:22:3d:82:25:49:be:e6:85:45:75:6a:e1: b1:20:1e:71:0a:d6:8c:9f:d1:1f:dc:c0:30:e0:d4: 00:3b:a1:89:a7:ee:6d:46:af:96:67:6b:52:21:7a: 16:53:6e:7d:69:61:ae:c2:f9:62:ba:6e:cb:6a:8d: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:79:5C:8C:CE:BD:94:50:FF:01:E8:21:4B:F5:CE:C8:8B:FA:3E X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d1:00:91:ae:93:1f:49:3b:2a:12:4d:45:44:d0:06:f4:8f: c1:67:22:12:fe:ed:98:15:e1:1e:84:ce:3c:43:de:19:2f:e9: d1:e1:3d:0d:38:d9:26:de:5a:de:cd:fc:9d:0d:9e:50:5f:c3: 75:19:38:0e:fc:62:d0:81:19:99:bc:d1:99:13:7f:37:99:65: 32:ef:6a:c3:e4:05:40:d4:d8:4f:05:03:dc:b4:1c:79:0d:0c: 20:5b:81:82:40:f7:a3:35:89:1f:ed:3e:cf:f4:98:3b:a7:48: ab:6d:10:72:4a:90:a8:9e:5d:3f:34:7a:1d:98:9e:5d:b1:4d: a5:87:bb:66:e0:09:30:d0:a3:06:1b:96:83:b4:db:52:9d:e2: 47:32:d7:a3:ca:2d:a3:41:a2:f1:1a:e2:29:11:56:94:d2:7c: 1e:5f:df:ad:04:5b:7f:d2:66:c1:5a:f7:80:17:35:eb:ae:df: fb:cc:65:7d:59:da:f0:17:31:67:04:51:e2:53:97:0b:76:b5: ba:78:94:8c:20:3d:c7:fe:1d:06:1f:62:9d:4c:17:59:8e:ab: e4:45:9b:55:c1:16:02:6d:fb:19:e5:9e:98:75:c7:23:8d:f5: b9:28:fb:c7:36:11:70:24:d9:a5:44:01:6a:e4:89:d1:eb:ca: bd:84:38:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwOTE4MTcxODE1WhcNMjUwOTI1MTcxODE1WjAYMRYwFAYD VQQDEw02OGNjM2VkNy02YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QDz9/d9jnvdYW1axVSS14rCQRs3acygWSYWqojw8YEfoDxaBJL+F518QzyB Srhj2uxGggwjxQDO0nAW1LgcyZ42JQGZknWg4hjC6m1s3Mba3ZhOzA8uNmfIdSPY O+E6/MLmPB7TDVPBoxnfFxqzGsajvHtQzOF/x2zKqH+Rmgzfu6MobshwyQeXPV37 xp2cbgO0woOSGhPeaZBqvkAqfO7E1FCTGFCsBG/4knqDt/xBT6NuB8JMFHSsnejy +g8AjAgn3fkiPYIlSb7mhUV1auGxIB5xCtaMn9Ef3MAw4NQAO6GJp+5tRq+WZ2tS IXoWU259aWGuwvlium7Lao0TAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhjeVyM zr2UUP8B6CFL9c7Ii/o+MB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY0QCRrpMfSTsqEk1FRNAG9I/BZyIS/u2YFeEehM48Q94ZL+nR4T0N ONkm3lrezfydDZ5QX8N1GTgO/GLQgRmZvNGZE383mWUy72rD5AVA1NhPBQPctBx5 DQwgW4GCQPejNYkf7T7P9Jg7p0irbRBySpConl0/NHodmJ5dsU2lh7tm4Akw0KMG G5aDtNtSneJHMtejyi2jQaLxGuIpEVaU0nweX9+tBFt/0mbBWveAFzXrrt/7zGV9 WdrwFzFnBFHiU5cLdrW6eJSMID3H/h0GH2KdTBdZjqvkRZtVwRYCbfsZ5Z6Ydccj jfW5KPvHNhFwJNmlRAFq5InR68q9hDhZ -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:15 2025 by rpki-client