$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: uPXiHGN0IVkQQqkblyLwNYasgKMnfjEQizByHi3pmvk= Subject key identifier: 4E:2E:C7:2F:02:47:A2:C0:A8:5C:6F:13:CB:F8:44:77:23:A1:60:C9 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02AF Signing time: Sun 15 Jun 2025 01:10:21 +0000 Manifest this update: Sun 15 Jun 2025 01:10:20 +0000 Manifest next update: Sun 22 Jun 2025 01:10:20 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: rF8vqB96OTdp9Xv4sX4Pga3t2ID1s1R+MMvlepXm218=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Jun 15 01:10:20 2025 GMT Not After : Jun 22 01:10:20 2025 GMT Subject: CN=684e1d7c-c161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:97:fe:e7:05:47:7d:65:27:d5:36:60:29: e3:da:81:d6:ff:71:70:46:25:a3:75:a7:7a:fb:ee: b5:88:55:a4:4c:e7:5d:7c:97:ff:7c:e0:38:15:19: fc:1a:65:3c:83:9c:97:24:d8:0d:36:17:55:00:a8: 5e:32:bd:2d:8f:54:38:50:55:dc:b9:02:5c:70:14: 59:24:f0:16:f2:2b:43:60:87:e3:40:c9:c6:50:37: 90:28:6c:03:12:dd:d6:1a:6b:4d:6b:ff:ef:25:6e: 81:90:c5:2a:a6:b5:d7:f7:5c:18:3a:57:5a:8a:d8: c2:33:c8:cb:e8:a0:a1:0f:c9:06:d7:16:41:06:8e: 4a:9e:54:2d:27:29:67:60:27:b9:98:69:ff:4c:36: 35:5c:b2:4e:ab:2e:c6:9e:c0:da:48:b5:93:21:f5: e6:b9:80:89:66:d8:25:7c:04:0d:f3:97:40:a4:ec: f1:4c:b2:ca:42:1a:f5:4d:7f:b2:46:45:ef:96:3d: 0a:2f:a3:86:62:53:ac:77:7d:41:de:53:68:fe:f8: 4a:e0:9f:48:95:a2:57:aa:3d:68:fa:3d:5e:57:fc: ed:04:f0:f5:50:c6:87:76:ec:45:9a:f3:ed:a6:0f: 5e:dc:89:19:f6:4f:4e:c3:d5:d5:76:e4:64:5f:7d: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2E:C7:2F:02:47:A2:C0:A8:5C:6F:13:CB:F8:44:77:23:A1:60:C9 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:a7:4b:48:e6:fe:fe:16:20:3a:ff:a7:0b:7f:57:6a:26: 5b:88:f6:66:93:96:7e:63:79:20:73:53:7c:d5:89:df:f0:54: 4c:7d:f1:8d:ea:8d:32:89:7b:c7:58:f0:ea:cc:dc:25:9f:3e: 54:5a:98:7f:3f:0a:12:01:2d:9c:7e:56:2a:b0:4f:09:c4:6c: 5f:df:3c:d8:9a:ef:48:94:89:67:a8:1d:c2:2b:a5:6b:89:b3: 0f:d7:d3:5f:7b:7b:5d:d1:bd:1c:cf:2e:f6:95:2f:f6:57:4c: a3:c3:33:81:3b:b8:7b:ae:6b:1e:4b:cf:6b:72:19:5a:4a:a2: f2:66:c7:b7:42:59:2b:8d:cd:84:a0:e9:03:36:80:1a:40:79: 9e:92:9f:08:2e:8d:db:68:61:6c:5e:7c:46:2a:52:e8:f4:60: 60:28:b4:a1:83:fc:b8:d6:c3:80:6e:fc:53:05:cf:09:05:7f: fa:30:f9:a3:dc:e0:ec:29:ac:52:b4:7e:f8:0b:d7:a5:92:05: 56:4e:00:36:2e:7a:fd:0c:35:58:03:39:8f:4b:a4:1c:90:f3: b0:eb:97:a7:c3:b8:05:cb:51:7d:ee:00:5f:3b:f3:19:87:59: 7f:4a:21:06:e3:d5:74:b3:52:27:a7:c5:e5:ce:78:37:c3:0a: b2:83:65:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNjE1MDExMDIwWhcNMjUwNjIyMDExMDIwWjAYMRYwFAYD VQQDEw02ODRlMWQ3Yy1jMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aCX/ucFR31lJ9U2YCnj2oHW/3FwRiWjdad6++61iFWkTOddfJf/fOA4FRn8 GmU8g5yXJNgNNhdVAKheMr0tj1Q4UFXcuQJccBRZJPAW8itDYIfjQMnGUDeQKGwD Et3WGmtNa//vJW6BkMUqprXX91wYOldaitjCM8jL6KChD8kG1xZBBo5KnlQtJyln YCe5mGn/TDY1XLJOqy7GnsDaSLWTIfXmuYCJZtglfAQN85dApOzxTLLKQhr1TX+y RkXvlj0KL6OGYlOsd31B3lNo/vhK4J9IlaJXqj1o+j1eV/ztBPD1UMaHduxFmvPt pg9e3IkZ9k9Ow9XVduRkX325FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4uxy8C R6LAqFxvE8v4RHcjoWDJMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyY6dLSOb+/hYgOv+nC39XaiZbiPZmk5Z+Y3kgc1N81Ynf8FRMffGN 6o0yiXvHWPDqzNwlnz5UWph/PwoSAS2cflYqsE8JxGxf3zzYmu9IlIlnqB3CK6Vr ibMP19Nfe3td0b0czy72lS/2V0yjwzOBO7h7rmseS89rchlaSqLyZse3Qlkrjc2E oOkDNoAaQHmekp8ILo3baGFsXnxGKlLo9GBgKLShg/y41sOAbvxTBc8JBX/6MPmj 3ODsKaxStH74C9elkgVWTgA2Lnr9DDVYAzmPS6QckPOw65enw7gFy1F97gBfO/MZ h1l/SiEG49V0s1Inp8Xlzng3wwqyg2VZ -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:13 2025 by rpki-client