$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: kLUy//LxVMqZfAIEBSRgrLl9cnZGQPAwyCEXHsEe6mM= Subject key identifier: F7:BE:15:68:8B:0C:68:1D:95:DD:EF:FB:07:41:6E:6F:67:29:B6:3D Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02CB Signing time: Sat 09 Aug 2025 01:55:14 +0000 Manifest this update: Sat 09 Aug 2025 01:55:13 +0000 Manifest next update: Sat 16 Aug 2025 01:55:13 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: dCJuao7+W+b9upSSMfskjUEBOhgCQNVUsaZIte1+tC4=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Aug 9 01:55:13 2025 GMT Not After : Aug 16 01:55:13 2025 GMT Subject: CN=6896aa81-a1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:fc:a5:4d:81:78:1b:83:5f:de:8f:3e:be: 09:00:bf:1c:b5:46:e2:09:f4:25:6c:d8:40:47:09: f7:58:a4:29:d8:c8:79:a8:92:8c:bd:a9:3a:6a:cb: df:95:96:5a:12:03:10:67:b1:77:cf:49:8c:47:fc: 71:d4:9d:14:95:67:d6:a3:0c:4b:2a:a6:2a:b9:2f: 2d:f8:99:15:1f:10:8a:e3:6b:9a:09:dc:a6:1f:cb: 66:2c:35:96:34:fe:02:2b:85:7a:a2:30:d7:09:64: 84:1b:22:65:e5:1e:1e:f9:14:70:b6:3e:2a:7f:e2: 8a:31:73:34:0d:60:1e:57:77:91:01:15:de:b4:e7: 52:54:47:ec:65:72:9c:e0:87:a6:7a:79:2e:48:33: 27:34:8c:4e:5c:9c:33:17:29:08:45:ba:6d:26:f7: c3:fc:72:55:78:88:9d:7d:b0:74:52:f1:00:dd:1e: a1:ca:dc:54:e1:ad:85:a9:cc:f5:31:5d:56:0c:04: bc:fa:1b:d1:7e:b3:50:17:b2:88:19:46:8f:a6:70: df:57:95:77:0e:34:f5:a0:ae:cf:5c:ff:5d:f4:e3: a1:4f:11:ad:a5:d9:84:37:08:8c:98:aa:24:9c:c4: b7:df:3d:f8:b4:a2:28:9a:b8:16:06:26:dc:ae:08: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:15:68:8B:0C:68:1D:95:DD:EF:FB:07:41:6E:6F:67:29:B6:3D X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ff:08:0c:f6:87:7c:7b:55:de:f5:93:e9:6f:ef:dd:39:ee: 7a:db:0f:5e:f4:1a:05:08:c0:19:38:d6:49:f7:6b:a8:54:7c: 41:17:00:bd:12:f5:65:cb:32:9f:cb:b9:d5:4a:46:95:55:2d: 9c:9b:9d:94:90:e9:5b:12:ee:f5:30:34:f7:e5:19:40:90:76: 6d:55:ce:60:9d:63:f8:03:7f:7c:32:0c:ee:be:64:e0:91:a0: 6c:fc:90:2c:39:9b:03:76:73:41:73:3b:b1:44:fe:b6:bb:a0: ba:73:36:21:32:5b:95:a8:50:eb:b8:6b:7e:e2:4e:b0:3d:46: e6:11:b3:44:d0:80:65:34:b4:7b:b5:18:f7:5b:c3:03:a0:8f: e2:f1:b8:e4:51:ae:34:92:3b:e5:46:37:68:fc:06:4c:0e:12: c2:8a:58:2e:4c:8a:c7:9a:1a:90:7c:94:d1:e3:59:74:7b:72: d5:92:56:c3:27:97:95:89:5c:fe:1d:de:9a:10:fb:60:5e:5c: b0:d5:84:53:32:9d:d4:04:d8:d2:0f:71:ca:d8:98:61:1f:ec: 67:ae:18:d4:01:d6:32:32:36:12:b3:c4:11:ea:f2:65:e3:4a: 76:80:fd:20:f5:5e:c7:5f:8d:c4:f2:01:74:6c:ac:4f:8b:f7: 45:76:10:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwODA5MDE1NTEzWhcNMjUwODE2MDE1NTEzWjAYMRYwFAYD VQQDEw02ODk2YWE4MS1hMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F/8pU2BeBuDX96PPr4JAL8ctUbiCfQlbNhARwn3WKQp2Mh5qJKMvak6asvf lZZaEgMQZ7F3z0mMR/xx1J0UlWfWowxLKqYquS8t+JkVHxCK42uaCdymH8tmLDWW NP4CK4V6ojDXCWSEGyJl5R4e+RRwtj4qf+KKMXM0DWAeV3eRARXetOdSVEfsZXKc 4IemenkuSDMnNIxOXJwzFykIRbptJvfD/HJVeIidfbB0UvEA3R6hytxU4a2Fqcz1 MV1WDAS8+hvRfrNQF7KIGUaPpnDfV5V3DjT1oK7PXP9d9OOhTxGtpdmENwiMmKok nMS33z34tKIomrgWBibcrgg8CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe+FWiL DGgdld3v+wdBbm9nKbY9MB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/wgM9od8e1Xe9ZPpb+/dOe562w9e9BoFCMAZONZJ92uoVHxBFwC9 EvVlyzKfy7nVSkaVVS2cm52UkOlbEu71MDT35RlAkHZtVc5gnWP4A398MgzuvmTg kaBs/JAsOZsDdnNBczuxRP62u6C6czYhMluVqFDruGt+4k6wPUbmEbNE0IBlNLR7 tRj3W8MDoI/i8bjkUa40kjvlRjdo/AZMDhLCilguTIrHmhqQfJTR41l0e3LVklbD J5eViVz+Hd6aEPtgXlyw1YRTMp3UBNjSD3HK2JhhH+xnrhjUAdYyMjYSs8QR6vJl 40p2gP0g9V7HX43E8gF0bKxPi/dFdhD5 -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:30 2025 by rpki-client