$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft File: dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json) Hash identifier: MHMNyZp2RfDA283BUHwrbGN8AZ1eWrfW/tCB7kjys6U= Subject key identifier: 72:F4:1C:4D:66:C0:57:AE:D7:39:81:B5:8E:57:4A:68:64:25:24:16 Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft Manifest number: 07CB Signing time: Sat 14 Jun 2025 20:52:59 +0000 Manifest this update: Sat 14 Jun 2025 20:52:59 +0000 Manifest next update: Sat 21 Jun 2025 20:52:59 +0000 Files and hashes: 1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: yvKN5qS2vX48JOSDImWa4KOeDxGEOdLLUzK/kzyBi3I=) 2: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: 81w6uEIlXcEUdPQfo2vbY8z/AyDWyyCFh1+WTuNWnEo=) 3: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: zTUhKI/Umv9DnZwwhUUIlgq0Y79IbxqyExa7TOr+PSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Validity Not Before: Jun 14 20:52:59 2025 GMT Not After : Jun 21 20:52:59 2025 GMT Subject: CN=684de12b-fd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:eb:de:15:bf:14:45:df:f5:ca:0a:19:d6: c9:5e:0d:21:cd:43:8d:5d:8c:f2:0a:a6:4a:35:96: 42:d2:ee:80:60:b4:4b:a8:d8:b1:22:a2:2c:6d:67: 1c:0e:48:62:2e:ef:54:4b:8f:c7:93:37:b7:98:0c: cc:c7:a2:1b:f2:f0:17:15:8b:ae:a8:6d:5c:d1:31: 86:57:55:d6:7e:b8:93:6d:88:f1:96:34:fe:a0:fa: 2a:f6:42:8e:be:33:f1:84:b0:ca:dc:0c:fb:d8:bf: bb:bd:96:4c:91:27:fc:68:1a:54:61:36:3c:21:2a: 69:a4:64:ea:f1:0d:bf:20:2b:09:99:a4:2f:36:fb: 0d:d1:c8:a7:84:a5:77:0b:1f:dd:1c:80:bc:58:62: 2b:8a:30:78:3a:ca:7d:23:3a:65:7e:39:7c:f2:47: 18:93:0d:68:95:4d:a2:f5:2c:54:a7:42:3e:1c:c2: be:5f:10:05:c4:86:e0:64:9b:30:f3:4f:54:71:cf: ad:2f:d4:9c:b0:50:c2:34:00:5d:41:ee:99:b6:8d: 0b:bf:f7:e4:3d:e7:ed:7c:cf:63:7f:63:0d:21:41: 0a:9d:c1:c7:e9:2e:2a:04:c5:67:3f:38:38:5e:24: 03:98:ba:f8:1f:5b:ca:f8:dc:bf:6a:78:aa:fd:04: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:1C:4D:66:C0:57:AE:D7:39:81:B5:8E:57:4A:68:64:25:24:16 X509v3 Authority Key Identifier: keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ef:79:e3:f6:28:01:14:f6:d9:47:44:51:6b:b8:7d:71:99: 15:9a:49:ab:ab:ab:b3:5b:1a:05:f5:8c:06:ff:f9:e7:e6:4c: 29:55:24:ff:66:33:ad:b7:e2:45:67:58:f2:d6:cb:32:e1:21: 44:a9:c1:0d:bd:ed:75:51:86:46:07:0b:17:f4:f8:b0:5c:0f: da:bd:b5:9b:41:ab:c8:7a:ee:6b:89:88:1b:d1:63:e1:85:00: cd:4a:b9:19:c6:08:b3:5a:08:bf:23:ac:ad:ad:a5:26:d4:f1: 57:ac:b8:90:20:80:9e:8e:68:b0:c6:46:05:9a:f7:23:32:13: 45:f4:92:df:d3:56:ab:25:b0:cd:ac:77:ef:07:42:a9:f3:0f: 24:d0:20:d2:04:5b:9f:dc:86:47:54:ec:bf:cf:ca:f2:5b:79: ba:ee:4f:66:4e:67:0a:fc:46:f4:f9:a7:6e:80:1a:ca:14:99: 37:b1:3a:90:e5:fd:58:e6:e0:27:2c:1b:0d:2f:19:06:7b:55: 5a:72:ac:4d:14:d0:c9:a9:d3:96:32:5a:c8:58:cd:f4:63:98: a3:84:0e:9a:97:40:25:7a:46:79:ba:7a:d8:09:06:5c:99:08: ba:e6:23:f0:e7:ef:27:6b:97:be:92:14:fe:e8:66:13:ee:92: 26:49:d0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVGODIxMTAvBgNVBAUTKDc0NDdCMjgzNUVBQ0I4OEFDNDg3MjdDQjcyNkJCODdC OTdCQTc3OEEwHhcNMjUwNjE0MjA1MjU5WhcNMjUwNjIxMjA1MjU5WjAYMRYwFAYD VQQDEw02ODRkZTEyYi1mZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdPr3hW/FEXf9coKGdbJXg0hzUONXYzyCqZKNZZC0u6AYLRLqNixIqIsbWcc DkhiLu9US4/Hkze3mAzMx6Ib8vAXFYuuqG1c0TGGV1XWfriTbYjxljT+oPoq9kKO vjPxhLDK3Az72L+7vZZMkSf8aBpUYTY8ISpppGTq8Q2/ICsJmaQvNvsN0cinhKV3 Cx/dHIC8WGIrijB4Osp9Izplfjl88kcYkw1olU2i9SxUp0I+HMK+XxAFxIbgZJsw 809Ucc+tL9ScsFDCNABdQe6Zto0Lv/fkPeftfM9jf2MNIUEKncHH6S4qBMVnPzg4 XiQDmLr4H1vK+Ny/aniq/QR6HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL0HE1m wFeu1zmBtY5XSmhkJSQWMB8GA1UdIwQYMBaAFHRHsoNerLiKxIcny3JruHuXuneK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUY4Mi8zMTA3QjNFQ0Y3 QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJckVoeWZMY211NGU1ZTZk NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZXlnMTZzdUlyRWh5ZkxjbXU0ZTVlNmQ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUY4Mi8zMTA3QjNFQ0Y3QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJ ckVoeWZMY211NGU1ZTZkNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm73nj9igBFPbZR0RRa7h9cZkVmkmrq6uzWxoF9YwG//nn5kwpVST/ ZjOtt+JFZ1jy1ssy4SFEqcENve11UYZGBwsX9PiwXA/avbWbQavIeu5riYgb0WPh hQDNSrkZxgizWgi/I6ytraUm1PFXrLiQIICejmiwxkYFmvcjMhNF9JLf01arJbDN rHfvB0Kp8w8k0CDSBFuf3IZHVOy/z8ryW3m67k9mTmcK/Eb0+adugBrKFJk3sTqQ 5f1Y5uAnLBsNLxkGe1VacqxNFNDJqdOWMlrIWM30Y5ijhA6al0AlekZ5unrYCQZc mQi65iPw5+8na5e+khT+6GYT7pImSdB3 -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:28 2025 by rpki-client