$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: /D5jB8deKN429GQU5eH6Axh0em+6EmknuS5vLbdFxl4= Subject key identifier: 0E:A8:B2:83:7E:44:27:F0:6E:46:52:87:5E:D4:BA:64:4E:D5:68:34 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 0666 Signing time: Mon 04 Aug 2025 22:52:38 +0000 Manifest this update: Mon 04 Aug 2025 22:52:38 +0000 Manifest next update: Mon 11 Aug 2025 22:52:38 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: A+z/OiMAnV3uk82LDtNINtg4mqDkqVOMiPxvShXo/WY=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Aug 4 22:52:38 2025 GMT Not After : Aug 11 22:52:38 2025 GMT Subject: CN=689139b6-e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:64:8c:61:c9:08:8c:63:52:4f:af:2a:8e: 1b:41:f8:e8:59:ed:60:56:28:e5:d2:ab:55:c1:1c: b2:31:44:f4:c1:21:48:de:88:8d:36:1b:72:0e:63: 8d:68:fe:c0:e2:d5:e6:26:7c:c0:71:a7:e9:6c:f2: 29:c8:9c:ce:b8:e7:7d:42:15:e8:d0:ab:76:f8:00: 73:31:9e:34:f7:84:f3:f9:52:6f:a8:39:92:6c:0b: 4e:7c:e1:2e:4b:1f:e5:a6:29:b9:fe:2b:9f:8b:36: 4f:9e:a8:17:35:2b:f4:ff:92:87:ff:6f:3f:48:62: 93:74:8d:6a:cc:4b:82:49:d7:49:58:12:4e:80:11: 62:5e:d9:59:6f:bf:ef:c8:80:26:14:b6:c6:82:a5: 25:86:a9:e1:b3:18:41:9b:d8:cf:d6:9f:7f:40:41: c1:f9:e7:96:4a:1c:60:81:de:0c:51:db:20:b7:19: 0a:b7:06:48:31:b0:3d:6b:95:4a:df:89:6e:0b:a5: 75:21:9e:96:fa:10:52:cf:91:07:fe:38:90:5c:7d: 14:e2:c4:11:de:97:e0:7f:32:c1:75:38:56:a7:8d: 8d:e1:d9:36:9c:af:b9:91:0f:9c:5e:6e:55:b6:dc: 7c:01:80:47:a8:72:b6:47:a7:cb:f0:73:61:91:6c: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:B2:83:7E:44:27:F0:6E:46:52:87:5E:D4:BA:64:4E:D5:68:34 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:da:3f:a1:86:1a:47:5c:50:81:39:cd:27:59:19:09:26: e5:b5:46:d7:6a:19:d8:e6:0a:40:57:4d:12:bd:0c:e3:ba:e0: 3d:b2:61:e8:7c:97:58:aa:7f:b0:33:1b:13:e5:26:10:18:c8: 2f:26:2b:bd:9f:99:bf:9f:54:02:7f:07:05:9d:93:c4:96:0a: c9:20:e3:63:86:2e:ac:16:0c:5a:b0:d1:e3:18:34:ae:e2:ca: e9:2f:68:96:ff:f9:1e:ea:67:39:a0:5a:36:9d:12:d2:b7:12: 3d:31:ff:f4:18:ad:e9:b7:65:91:c7:b6:76:e2:6d:b3:71:0e: bf:ec:e3:1b:f8:51:bb:e1:d6:99:8b:46:c5:63:87:65:db:8c: ea:b7:21:ec:91:84:06:39:7e:a1:cf:02:b3:8f:25:3a:cb:48: ea:40:13:09:f5:9d:53:5e:be:86:3a:0a:34:17:ad:a3:9b:31: 26:98:9c:e3:c9:7d:51:cc:42:7d:b0:56:71:c9:9b:8a:b8:f9: db:01:2b:e0:b6:c7:aa:86:75:c3:d6:ea:27:32:9a:ee:2d:e7: 68:49:25:8c:4d:92:92:92:89:e4:b8:07:67:80:6a:37:c9:87: 41:74:57:61:3f:34:bf:cf:e5:a4:67:04:4c:28:8c:0d:0c:d9: fe:79:71:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwODA0MjI1MjM4WhcNMjUwODExMjI1MjM4WjAYMRYwFAYD VQQDEw02ODkxMzliNi1lNTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nlkjGHJCIxjUk+vKo4bQfjoWe1gVijl0qtVwRyyMUT0wSFI3oiNNhtyDmON aP7A4tXmJnzAcafpbPIpyJzOuOd9QhXo0Kt2+ABzMZ4094Tz+VJvqDmSbAtOfOEu Sx/lpim5/iufizZPnqgXNSv0/5KH/28/SGKTdI1qzEuCSddJWBJOgBFiXtlZb7/v yIAmFLbGgqUlhqnhsxhBm9jP1p9/QEHB+eeWShxggd4MUdsgtxkKtwZIMbA9a5VK 34luC6V1IZ6W+hBSz5EH/jiQXH0U4sQR3pfgfzLBdThWp42N4dk2nK+5kQ+cXm5V ttx8AYBHqHK2R6fL8HNhkWwU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6osoN+ RCfwbkZSh17UumRO1Wg0MB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgbto/oYYaR1xQgTnNJ1kZCSbltUbXahnY5gpAV00SvQzjuuA9smHo fJdYqn+wMxsT5SYQGMgvJiu9n5m/n1QCfwcFnZPElgrJIONjhi6sFgxasNHjGDSu 4srpL2iW//ke6mc5oFo2nRLStxI9Mf/0GK3pt2WRx7Z24m2zcQ6/7OMb+FG74daZ i0bFY4dl24zqtyHskYQGOX6hzwKzjyU6y0jqQBMJ9Z1TXr6GOgo0F62jmzEmmJzj yX1RzEJ9sFZxyZuKuPnbASvgtseqhnXD1uonMpruLedoSSWMTZKSkonkuAdngGo3 yYdBdFdhPzS/z+WkZwRMKIwNDNn+eXFP -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:00 2025 by rpki-client