$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: z+0rKPOz6urN9GH0+q46FG3fgqBaL4uZqxnFqXOEpOg= Subject key identifier: 67:6B:36:03:31:DA:36:65:3F:0A:3F:3B:6C:FA:08:97:D1:21:53:EA Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 064C Signing time: Sat 14 Jun 2025 22:17:39 +0000 Manifest this update: Sat 14 Jun 2025 22:17:38 +0000 Manifest next update: Sat 21 Jun 2025 22:17:38 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: rpFObtduQstJIeHteq5D1ljh7qidhRKWYamCHwLsO/4=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Jun 14 22:17:38 2025 GMT Not After : Jun 21 22:17:38 2025 GMT Subject: CN=684df502-8adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:ba:23:86:86:db:5f:bb:aa:4a:59:f7:00: d8:64:44:cf:ae:a1:cf:1b:93:db:2c:35:45:7e:63: 3f:ea:1e:c4:5e:76:4a:95:ee:a9:bf:e4:af:bb:bb: ce:3f:7a:1e:c9:e3:f7:80:b6:ff:f4:22:9b:3c:55: 50:8d:ce:64:4b:17:39:ad:8c:2c:60:33:29:0a:10: 7a:d4:ec:18:8d:06:ce:4a:6e:3b:f7:7d:a4:cb:c8: b2:6c:e8:cb:ce:9d:b6:e0:4b:8b:7f:3c:a6:78:03: 1b:72:8d:ec:02:26:f7:6d:26:65:3e:0a:3e:ff:c0: b1:ea:c9:29:a2:87:a2:db:aa:26:6a:15:e1:28:37: 37:b1:23:41:75:e7:44:52:ad:bb:c1:56:07:6a:15: 7b:93:73:ad:9a:09:83:b9:f1:38:7b:6d:48:8c:4c: e6:8f:b0:71:30:7c:52:ef:f9:f2:c8:c8:45:52:18: 1e:8d:9b:74:8a:6e:c5:1c:c3:a5:fe:22:5a:c0:cf: 56:4c:ec:c4:0e:2e:ae:29:21:31:75:d5:0d:4b:f6: 61:37:b0:26:d8:35:24:0e:5a:40:5a:8a:52:c6:6c: 5c:27:42:1a:ca:86:b0:ef:e2:41:d9:b2:a1:1c:20: 39:95:7d:b1:25:43:1b:78:47:22:fe:e4:1e:48:9d: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:36:03:31:DA:36:65:3F:0A:3F:3B:6C:FA:08:97:D1:21:53:EA X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:d6:0b:68:55:db:36:d1:e7:e5:cc:6b:38:51:44:b2:8b:e3: 79:dc:3a:98:70:16:de:53:ee:a9:99:2c:91:ff:a4:b6:58:69: fc:b9:41:99:b3:98:8d:f9:88:6f:91:dd:50:a5:b8:f0:12:91: b7:75:8d:75:f4:cb:06:62:21:3d:8c:2c:ab:1c:dd:dd:e9:8f: 70:ef:af:f9:dd:20:bc:8b:16:43:4f:11:f9:a2:ea:70:c0:04: a4:33:74:bb:08:45:1d:4a:91:cc:19:7e:e2:da:23:5a:e8:76: 12:77:06:2f:5c:98:ce:e5:80:65:b6:c6:8b:fd:06:6b:96:82: 8e:80:77:c0:85:57:37:ac:bb:d9:17:d6:3b:19:d8:fb:eb:37: f7:d5:67:9f:a6:59:a0:94:87:f7:ab:27:93:a6:f1:be:31:38: 63:9a:38:6f:d0:56:53:ba:ce:b8:e5:a0:43:a4:5d:43:2a:69: 6c:be:35:b7:1b:d2:74:2b:93:c9:b1:e3:91:fa:a1:01:cb:28: 61:3b:01:ae:71:fa:19:b0:09:8a:6c:e8:f1:37:4f:85:cb:20: cd:f0:8c:5e:e8:3f:48:a9:65:f4:11:35:33:bb:bb:9f:9a:f4: 73:60:9e:8d:5a:f8:0d:72:23:20:62:21:b7:11:56:3f:6a:67: b4:6c:f0:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwNjE0MjIxNzM4WhcNMjUwNjIxMjIxNzM4WjAYMRYwFAYD VQQDEw02ODRkZjUwMi04YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJe6I4aG21+7qkpZ9wDYZETPrqHPG5PbLDVFfmM/6h7EXnZKle6pv+Svu7vO P3oeyeP3gLb/9CKbPFVQjc5kSxc5rYwsYDMpChB61OwYjQbOSm47932ky8iybOjL zp224EuLfzymeAMbco3sAib3bSZlPgo+/8Cx6skpooei26omahXhKDc3sSNBdedE Uq27wVYHahV7k3OtmgmDufE4e21IjEzmj7BxMHxS7/nyyMhFUhgejZt0im7FHMOl /iJawM9WTOzEDi6uKSExddUNS/ZhN7Am2DUkDlpAWopSxmxcJ0Iayoaw7+JB2bKh HCA5lX2xJUMbeEci/uQeSJ0EjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdrNgMx 2jZlPwo/O2z6CJfRIVPqMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDq1gtoVds20eflzGs4UUSyi+N53DqYcBbeU+6pmSyR/6S2WGn8uUGZ s5iN+Yhvkd1QpbjwEpG3dY119MsGYiE9jCyrHN3d6Y9w76/53SC8ixZDTxH5oupw wASkM3S7CEUdSpHMGX7i2iNa6HYSdwYvXJjO5YBltsaL/QZrloKOgHfAhVc3rLvZ F9Y7Gdj76zf31WefplmglIf3qyeTpvG+MThjmjhv0FZTus645aBDpF1DKmlsvjW3 G9J0K5PJseOR+qEByyhhOwGucfoZsAmKbOjxN0+FyyDN8Ixe6D9IqWX0ETUzu7uf mvRzYJ6NWvgNciMgYiG3EVY/ame0bPA5 -----END CERTIFICATE-----Generated at Mon Jun 16 22:01:55 2025 by rpki-client