$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: HVGunz7lmlTA7q8ukgcROApDVEWIODBRPdmEL7W0JiY= Subject key identifier: 28:3B:D2:B9:35:3B:80:BC:CB:85:85:06:E4:A1:A1:82:B1:DC:26:F2 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 1F Signing time: Tue 05 Aug 2025 08:35:08 +0000 Manifest this update: Tue 05 Aug 2025 08:35:08 +0000 Manifest next update: Tue 12 Aug 2025 08:35:08 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: 8AgG9UTgb2rILeXBbaiGCKDtvnf3V6vSRjs8+541zA4=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: yyRnOy3I+YsGzwaRvaOYjHZbPADEQBV8Fr6YK9Scj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Aug 5 08:35:08 2025 GMT Not After : Aug 12 08:35:08 2025 GMT Subject: CN=6891c23c-acfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:88:24:f6:73:4b:ed:99:ba:ad:1f:1a:74:1b: 7d:2f:53:78:fb:87:e6:02:9e:0e:6a:ed:cd:f5:e6: 6e:9f:8f:61:ae:16:86:60:4a:55:d3:97:b3:c7:11: 70:2c:a2:4a:fd:36:f4:94:54:89:ee:f0:32:36:eb: da:af:8e:97:fb:2f:7a:2d:28:20:e5:00:2a:83:76: 20:9f:77:c3:83:ec:63:ce:5e:6e:22:57:ca:1c:4d: ba:78:86:56:8b:06:3a:a5:36:8e:b4:88:f5:85:3c: d5:af:20:f6:5e:de:24:9f:10:43:ef:9b:be:5b:00: 74:d2:c7:7b:28:17:54:93:4f:f1:23:80:29:ac:2c: e2:ec:a3:38:9c:51:bb:3a:24:53:97:90:98:8d:d5: 78:2c:13:53:d7:c7:11:05:5f:85:fe:0a:24:55:f4: 86:f7:97:3b:cf:d5:84:99:2b:00:08:e4:f9:e1:1b: 6b:95:c8:fc:78:df:40:9b:1d:78:60:7f:16:e5:b7: ee:5a:83:67:74:af:59:97:a8:4c:43:58:8d:d3:51: 67:b7:6f:a7:02:ce:88:cc:71:04:30:68:79:1b:2d: 41:9f:55:5a:19:00:43:5a:d2:dc:15:e8:2b:92:08: 1d:30:e3:e4:90:20:a9:72:67:63:b3:8d:8f:a2:70: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:D2:B9:35:3B:80:BC:CB:85:85:06:E4:A1:A1:82:B1:DC:26:F2 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ec:1c:66:53:0c:c3:01:48:5e:47:b4:51:d9:75:56:07:c1: 96:ff:a8:95:ea:c7:1b:d0:b0:82:91:cd:9f:ca:9b:76:c7:38: 12:2d:04:9b:f7:41:d3:ea:45:58:7d:ca:21:ad:2a:39:a7:69: 3e:9b:d6:5f:b2:68:8b:a6:ee:9a:f5:ee:e1:2e:1a:40:1b:dd: 2b:25:87:ae:9a:a6:c9:3b:5e:d7:08:0f:f1:96:01:0f:e0:74: 41:fe:cd:78:da:a0:09:06:29:65:74:42:1a:78:fa:84:fa:d3: 70:d5:dc:57:5e:11:bb:5e:4e:24:f2:ef:04:8e:f9:ee:f6:94: 46:25:37:67:8a:3f:66:2b:a8:c4:e5:81:8a:2c:eb:00:75:20: 14:ec:9a:79:65:4a:dd:ab:24:c8:66:97:34:3d:45:45:da:79: e8:6f:41:8e:c8:7b:45:1f:95:97:48:e3:69:60:3f:b2:dc:5e: 65:b6:4c:9d:f2:78:2f:eb:a4:ee:98:e8:ac:b2:cf:a1:ff:6b: 2c:d2:cb:b7:50:ee:4c:aa:9e:f6:78:d5:77:83:12:59:53:93: 1d:19:61:7d:42:de:de:70:ef:85:2f:8c:7d:a7:f3:5d:07:03: 75:d4:1a:44:bc:fe:d5:70:23:e6:e0:6e:54:c6:68:c7:37:91: 19:b7:9c:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTA4MDUwODM1MDhaFw0yNTA4MTIwODM1MDhaMBgxFjAUBgNV BAMTDTY4OTFjMjNjLWFjZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgiCT2c0vtmbqtHxp0G30vU3j7h+YCng5q7c315m6fj2GuFoZgSlXTl7PHEXAs okr9NvSUVInu8DI269qvjpf7L3otKCDlACqDdiCfd8OD7GPOXm4iV8ocTbp4hlaL BjqlNo60iPWFPNWvIPZe3iSfEEPvm75bAHTSx3soF1STT/EjgCmsLOLsozicUbs6 JFOXkJiN1XgsE1PXxxEFX4X+CiRV9Ib3lzvP1YSZKwAI5PnhG2uVyPx430CbHXhg fxblt+5ag2d0r1mXqExDWI3TUWe3b6cCzojMcQQwaHkbLUGfVVoZAENa0twV6CuS CB0w4+SQIKlyZ2OzjY+icBz9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDvSuTU7 gLzLhYUG5KGhgrHcJvIwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3sHGZTDMMBSF5HtFHZdVYHwZb/qJXqxxvQsIKRzZ/Km3bHOBItBJv3 QdPqRVh9yiGtKjmnaT6b1l+yaIum7pr17uEuGkAb3Sslh66apsk7XtcID/GWAQ/g dEH+zXjaoAkGKWV0Qhp4+oT603DV3FdeEbteTiTy7wSO+e72lEYlN2eKP2YrqMTl gYos6wB1IBTsmnllSt2rJMhmlzQ9RUXaeehvQY7Ie0UflZdI42lgP7LcXmW2TJ3y eC/rpO6Y6Kyyz6H/ayzSy7dQ7kyqnvZ41XeDEllTkx0ZYX1C3t5w74UvjH2n810H A3XUGkS8/tVwI+bgblTGaMc3kRm3nO0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:50 2025 by rpki-client