$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: CzRzfkDzPpLAq46VhWaaoYTYuNTFJ3BKCN7UOXDny8s= Subject key identifier: 0E:3B:6A:2C:C5:8A:DC:B6:38:D6:80:7A:14:68:F3:79:4A:D7:4A:19 Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 71 Signing time: Thu 07 Aug 2025 07:27:42 +0000 Manifest this update: Thu 07 Aug 2025 07:27:42 +0000 Manifest next update: Thu 14 Aug 2025 07:27:42 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: xH7Q53x1znJ1XTcbSjJ0UM9y5P/4qE1+ugqzn82u8kE=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Validity Not Before: Aug 7 07:27:42 2025 GMT Not After : Aug 14 07:27:42 2025 GMT Subject: CN=6894556e-54f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:15:95:1d:46:fa:41:c7:55:fb:61:fc:68: 6c:0a:75:3d:50:fb:56:ac:39:15:7e:c1:a4:d4:82: c1:ab:31:f6:be:4e:38:54:92:cf:1e:a0:7c:50:eb: 04:c2:65:be:16:aa:d2:3f:b7:2e:dc:b4:0d:c1:6b: b9:27:c2:9b:94:6f:e7:00:98:6d:5d:10:76:8c:0f: 0c:e2:7a:8f:45:0d:ab:64:d2:87:da:bf:af:4c:91: c3:48:06:eb:b0:8e:17:30:13:e1:7a:87:0c:8d:30: 7c:72:6f:a1:5c:99:ae:3e:e5:81:b6:99:5c:fd:59: b7:a6:03:79:7d:b6:92:c7:7e:eb:96:0c:e7:38:15: fc:55:dd:47:d9:3b:1f:44:4c:01:cd:58:b3:c1:aa: a2:8b:d7:3f:94:40:7c:cc:11:32:84:c7:9e:e1:ca: fc:8f:0a:16:c3:70:94:a0:8c:e6:74:7b:e6:4b:1f: 0d:39:be:a4:ff:c7:be:a2:02:84:5f:92:cf:96:f3: 4c:40:52:ca:50:69:d2:3d:00:70:c7:17:5b:f6:9d: e2:c0:aa:9d:ff:43:3f:f6:fd:e9:9c:c4:f9:f5:63: 50:b9:c8:f7:e1:27:06:d5:67:96:92:17:a2:a0:ce: 1c:d7:e5:8e:58:3d:79:a9:89:07:7a:b1:b0:92:c6: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:6A:2C:C5:8A:DC:B6:38:D6:80:7A:14:68:F3:79:4A:D7:4A:19 X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:3e:ef:55:a8:51:f3:c5:47:2d:aa:55:bf:3f:89:b6:72:15: c4:4c:22:20:3f:fc:cc:ff:ab:27:77:b7:70:f2:f4:e9:16:8f: a6:00:ba:e7:c0:1d:85:69:57:57:bb:82:44:d9:16:08:bb:38: fb:c2:c7:2e:49:0a:da:0c:01:6f:ec:e2:11:db:52:c8:df:5a: 8f:d0:6b:39:34:f1:5e:2c:37:b3:db:06:01:56:30:d0:6b:f7: 2c:7c:f2:84:b8:07:76:f8:97:7f:c4:eb:c1:fe:cf:99:23:5e: 3c:c0:17:d7:a3:0b:ad:58:0a:da:4f:8b:5d:a0:62:cd:15:b7: a0:43:f9:5f:94:9d:2d:89:f9:1c:cf:77:92:69:12:b5:a3:1a: 02:c5:dd:3f:24:b6:9c:52:76:d3:a9:68:e3:0b:42:57:ac:67: 18:6e:67:51:8d:e1:40:dc:92:ae:e9:38:ea:b3:b2:cc:b0:fe: 6c:e0:57:7d:4b:23:e4:fa:a7:30:09:31:dd:c4:7f:e1:c3:b5: 15:22:6e:78:da:8a:1e:cb:57:5a:80:91:e2:4a:52:ff:dd:00: 54:01:3d:7a:34:80:80:3e:df:47:a3:01:ef:93:bf:6e:c4:af: 5f:5f:20:84:07:dd:44:22:78:2e:20:15:4f:e6:29:86:95:db: 88:02:5d:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTA4MDcwNzI3NDJaFw0yNTA4MTQwNzI3NDJaMBgxFjAUBgNV BAMTDTY4OTQ1NTZlLTU0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuOBWVHUb6QcdV+2H8aGwKdT1Q+1asORV+waTUgsGrMfa+TjhUks8eoHxQ6wTC Zb4WqtI/ty7ctA3Ba7knwpuUb+cAmG1dEHaMDwzieo9FDatk0ofav69MkcNIBuuw jhcwE+F6hwyNMHxyb6Fcma4+5YG2mVz9WbemA3l9tpLHfuuWDOc4FfxV3UfZOx9E TAHNWLPBqqKL1z+UQHzMETKEx57hyvyPChbDcJSgjOZ0e+ZLHw05vqT/x76iAoRf ks+W80xAUspQadI9AHDHF1v2neLAqp3/Qz/2/emcxPn1Y1C5yPfhJwbVZ5aSF6Kg zhzX5Y5YPXmpiQd6sbCSxns7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDjtqLMWK 3LY41oB6FGjzeUrXShkwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALA+71WoUfPFRy2qVb8/ibZyFcRMIiA//Mz/qyd3t3Dy9OkWj6YAuufA HYVpV1e7gkTZFgi7OPvCxy5JCtoMAW/s4hHbUsjfWo/Qazk08V4sN7PbBgFWMNBr 9yx88oS4B3b4l3/E68H+z5kjXjzAF9ejC61YCtpPi12gYs0Vt6BD+V+UnS2J+RzP d5JpErWjGgLF3T8ktpxSdtOpaOMLQlesZxhuZ1GN4UDckq7pOOqzssyw/mzgV31L I+T6pzAJMd3Ef+HDtRUibnjaih7LV1qAkeJKUv/dAFQBPXo0gIA+30ejAe+Tv27E r19fIIQH3UQieC4gFU/mKYaV24gCXd8= -----END CERTIFICATE-----Generated at Sat Aug 9 01:11:57 2025 by rpki-client