$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft File: daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json) Hash identifier: 9qN5d13+NNekINTux52J2TijHEC4NWuVhpi2NqvNRqs= Subject key identifier: 6B:40:31:D9:E3:30:98:1E:65:F3:B3:9C:DB:37:D6:1F:99:9B:B4:4E Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 Certificate issuer: /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft Manifest number: 0654 Signing time: Sat 14 Jun 2025 15:04:21 +0000 Manifest this update: Sat 14 Jun 2025 15:04:21 +0000 Manifest next update: Sat 21 Jun 2025 15:04:21 +0000 Files and hashes: 1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: h4ZEtC9QXPsnd3hIBOvtTyLov2aF0xW3CYuvbDAwlus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Validity Not Before: Jun 14 15:04:21 2025 GMT Not After : Jun 21 15:04:21 2025 GMT Subject: CN=684d8f75-2c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:6f:f9:f7:f4:2c:2e:75:22:a6:e7:14:a8: 11:fb:11:a0:aa:f4:5f:66:2c:df:8c:e6:47:bf:e5: 83:c9:8d:41:04:90:9e:3a:22:9b:7b:f2:62:37:c2: ca:e0:2f:3d:07:23:44:2d:0a:43:48:9a:e6:1b:5b: 81:5c:72:58:10:cb:ec:34:5e:24:6a:42:9d:6e:ba: 30:0a:f2:5f:92:6a:28:ce:a6:9f:df:95:62:b4:cd: c5:38:bf:14:18:93:d0:dd:2e:24:62:96:93:c6:a1: ed:a1:37:c4:f8:28:06:a3:40:78:b6:7a:cf:86:db: 14:30:ea:2c:e9:19:df:b2:9d:c6:78:37:f3:97:c5: c4:ee:43:72:3e:f6:f2:c2:c9:75:b5:a5:76:42:b5: 00:55:4c:7c:49:ab:75:5a:bb:4e:b6:f3:0d:a3:ec: d6:91:79:ce:36:fd:d0:e6:d1:12:c6:61:79:27:81: 49:ee:ca:1e:5e:66:f5:f4:9a:38:7c:2e:66:80:1e: 67:af:c8:00:fa:04:b3:4f:c8:79:f9:6e:9f:01:b0: b9:64:12:10:6f:3e:16:b2:a7:c7:5f:ab:fe:07:6a: e0:3c:4b:c9:3c:47:6a:e5:04:af:56:e1:d3:ef:86: 18:67:0b:fe:17:e5:28:b7:f0:ab:07:4d:9f:ca:9a: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:40:31:D9:E3:30:98:1E:65:F3:B3:9C:DB:37:D6:1F:99:9B:B4:4E X509v3 Authority Key Identifier: keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ca:11:9c:75:1c:be:7f:3d:3d:89:a3:62:86:a8:ba:49:50: d1:f6:84:86:7a:cf:63:89:ef:11:ae:5b:09:77:1a:db:e1:66: 55:c8:9e:de:44:49:5f:16:7b:53:2f:d8:13:8d:d8:6d:1f:96: 21:27:9a:7e:16:e4:21:38:1f:1d:65:de:49:34:05:22:c7:08: 4d:18:00:e2:6b:5a:70:f8:5f:aa:aa:a8:f8:3c:ba:35:05:8d: 31:8e:b3:dd:58:29:e3:2b:c3:88:04:b3:9b:c7:d9:fe:3b:51: f3:ba:5a:41:51:7f:29:a9:26:d8:3b:b3:cc:55:30:13:cd:51: a0:f8:25:52:a3:ab:c2:72:47:f6:cb:b3:7a:47:4f:4b:f0:2e: 2b:e6:8e:97:71:1b:cb:37:01:09:34:9a:b1:3f:3e:f4:35:f7: da:3c:2e:f3:da:ce:cd:50:0e:66:27:f6:8b:c3:6f:01:db:98: 2b:3f:16:0b:90:29:66:91:fe:7f:55:04:6c:a7:47:99:d2:74: 3d:af:5a:a0:78:94:50:6d:6d:bc:bd:4d:ad:3a:39:dd:8a:70: ce:4e:99:31:70:78:cd:79:8c:9d:6f:da:e4:e9:b5:f6:49:0a: dc:ba:06:f4:9c:c0:82:99:02:38:00:90:df:4e:02:a5:d8:0d: f2:c7:17:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2MjYxMTAvBgNVBAUTKDc1QTE3RUFCOTA0MUI2NERCMzc0NzFDRkI0RUJGRjU5 MUU4RjY5OTMwHhcNMjUwNjE0MTUwNDIxWhcNMjUwNjIxMTUwNDIxWjAYMRYwFAYD VQQDEw02ODRkOGY3NS0yYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwNv+ff0LC51IqbnFKgR+xGgqvRfZizfjOZHv+WDyY1BBJCeOiKbe/JiN8LK 4C89ByNELQpDSJrmG1uBXHJYEMvsNF4kakKdbrowCvJfkmoozqaf35VitM3FOL8U GJPQ3S4kYpaTxqHtoTfE+CgGo0B4tnrPhtsUMOos6Rnfsp3GeDfzl8XE7kNyPvby wsl1taV2QrUAVUx8Sat1WrtOtvMNo+zWkXnONv3Q5tESxmF5J4FJ7soeXmb19Jo4 fC5mgB5nr8gA+gSzT8h5+W6fAbC5ZBIQbz4WsqfHX6v+B2rgPEvJPEdq5QSvVuHT 74YYZwv+F+Uot/CrB02fypoVewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtAMdnj MJgeZfOznNs31h+Zm7ROMB8GA1UdIwQYMBaAFHWhfquQQbZNs3Rxz7Tr/1kej2mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDYyNi82MDA4MUVBQzhE N0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRrMnpkSEhQdE92X1dSNlBh Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhRi1xNUJCdGsyemRISFB0T3ZfV1I2UGFaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDYyNi82MDA4MUVBQzhEN0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRr MnpkSEhQdE92X1dSNlBhWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvyhGcdRy+fz09iaNihqi6SVDR9oSGes9jie8RrlsJdxrb4WZVyJ7e RElfFntTL9gTjdhtH5YhJ5p+FuQhOB8dZd5JNAUixwhNGADia1pw+F+qqqj4PLo1 BY0xjrPdWCnjK8OIBLObx9n+O1HzulpBUX8pqSbYO7PMVTATzVGg+CVSo6vCckf2 y7N6R09L8C4r5o6XcRvLNwEJNJqxPz70NffaPC7z2s7NUA5mJ/aLw28B25grPxYL kClmkf5/VQRsp0eZ0nQ9r1qgeJRQbW28vU2tOjndinDOTpkxcHjNeYydb9rk6bX2 SQrcugb0nMCCmQI4AJDfTgKl2A3yxxe6 -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:23 2025 by rpki-client