$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: 6h15fPSQvy5m1PwrF6+/EBDHG9jP4CZFJ2GRe0C7/bw= Subject key identifier: BE:96:B4:25:04:46:31:6E:EB:65:06:ED:7A:08:63:AB:54:99:79:76 Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 065A Signing time: Thu 12 Jun 2025 22:14:49 +0000 Manifest this update: Thu 12 Jun 2025 22:14:49 +0000 Manifest next update: Thu 19 Jun 2025 22:14:49 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: SdWZ/5q9A1I6ufMDTe5zjtJ7s4/5vGUHm56Qw2Kjyok=) 2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=) 3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Jun 12 22:14:49 2025 GMT Not After : Jun 19 22:14:49 2025 GMT Subject: CN=684b5159-be9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:cf:0c:fd:cd:f2:f4:d5:e2:74:d4:79:da: 24:2f:6f:c3:8d:b9:cb:26:fe:aa:22:71:9f:98:30: 65:f1:bd:96:97:49:03:ab:d3:46:83:d2:0e:58:cf: ae:51:d5:93:49:96:98:aa:37:30:8a:cb:0c:c5:c6: 2d:ae:8e:4d:7d:67:9c:2f:6f:ba:f8:4d:b9:42:47: 20:80:63:02:31:3b:8a:70:5a:a8:53:4d:a2:96:6d: 7c:3d:f4:59:99:8b:64:4e:63:59:fa:ae:1b:cd:74: a5:f8:af:ba:01:8e:f4:2c:35:32:a0:c9:a3:f2:b0: 95:fc:4e:91:b4:04:cf:46:d7:b9:dd:40:32:18:7a: 44:e0:e0:0e:a2:64:b3:c9:e6:fb:ff:3c:e8:65:63: ae:cf:5c:2d:f0:89:66:77:34:60:3e:6b:f7:3a:5a: be:be:a4:bd:f6:a0:16:ac:1a:fd:51:60:98:1e:ea: e8:c7:dd:8c:b5:a4:0b:05:09:dc:19:19:08:c8:eb: db:57:d5:34:90:ae:a1:68:6b:b4:24:99:8e:45:43: 94:48:ba:e4:10:f4:80:95:1e:c6:63:a8:38:1c:f8: bd:c7:0d:68:7e:e9:78:20:81:2d:a5:99:f1:31:e5: 7d:79:ea:a1:42:5d:cc:12:59:94:30:64:df:ed:c7: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:B4:25:04:46:31:6E:EB:65:06:ED:7A:08:63:AB:54:99:79:76 X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c0:a8:1f:b6:f8:32:16:5a:79:0b:47:d0:f7:aa:90:13:78: 41:e8:a0:29:7f:9d:59:cb:d6:cd:06:f5:17:f0:a2:24:00:cb: 99:e1:00:3b:25:c2:f4:32:30:21:77:b1:10:b0:8b:d5:99:e3: 7d:e1:5f:fa:bd:b5:70:52:f2:c3:33:63:1e:50:86:e2:b1:f1: 4e:cd:48:d9:43:09:82:16:a8:88:f9:31:5e:00:eb:05:f9:86: 62:aa:82:6d:29:a1:7d:90:e9:72:ab:d7:2b:90:fe:65:d6:10: 0a:31:20:d3:3b:4a:0f:4c:2a:3f:8f:98:57:4c:30:f3:92:85: ce:f4:b8:d4:c3:c1:f4:c0:cc:d0:f9:71:39:b0:10:ca:07:96: b2:90:9d:84:1c:00:d9:cd:21:4a:a5:ee:0c:36:08:f2:22:d6: e7:5a:24:6c:62:fa:b1:1c:35:72:25:c1:4c:ee:71:59:70:f8: 40:3a:e7:0e:94:63:a6:4b:da:c9:48:83:84:8b:37:14:12:a5: 01:0e:66:b7:85:d3:95:72:c8:43:66:2e:95:b6:ef:19:e6:e2: 75:97:1e:f8:c7:a2:5f:0a:21:05:2d:f2:4f:ce:3c:41:27:41: 98:af:bc:5d:b8:e1:48:88:0a:82:c1:8a:0b:f8:54:2b:93:9f: b2:ce:42:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUwNjEyMjIxNDQ5WhcNMjUwNjE5MjIxNDQ5WjAYMRYwFAYD VQQDEw02ODRiNTE1OS1iZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q3PDP3N8vTV4nTUedokL2/DjbnLJv6qInGfmDBl8b2Wl0kDq9NGg9IOWM+u UdWTSZaYqjcwissMxcYtro5NfWecL2+6+E25QkcggGMCMTuKcFqoU02ilm18PfRZ mYtkTmNZ+q4bzXSl+K+6AY70LDUyoMmj8rCV/E6RtATPRte53UAyGHpE4OAOomSz yeb7/zzoZWOuz1wt8IlmdzRgPmv3Olq+vqS99qAWrBr9UWCYHurox92MtaQLBQnc GRkIyOvbV9U0kK6haGu0JJmORUOUSLrkEPSAlR7GY6g4HPi9xw1oful4IIEtpZnx MeV9eeqhQl3MElmUMGTf7ccPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6WtCUE RjFu62UG7XoIY6tUmXl2MB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8wKgftvgyFlp5C0fQ96qQE3hB6KApf51Zy9bNBvUX8KIkAMuZ4QA7 JcL0MjAhd7EQsIvVmeN94V/6vbVwUvLDM2MeUIbisfFOzUjZQwmCFqiI+TFeAOsF +YZiqoJtKaF9kOlyq9crkP5l1hAKMSDTO0oPTCo/j5hXTDDzkoXO9LjUw8H0wMzQ +XE5sBDKB5aykJ2EHADZzSFKpe4MNgjyItbnWiRsYvqxHDVyJcFM7nFZcPhAOucO lGOmS9rJSIOEizcUEqUBDma3hdOVcshDZi6Vtu8Z5uJ1lx74x6JfCiEFLfJPzjxB J0GYr7xduOFIiAqCwYoL+FQrk5+yzkJc -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:19 2025 by rpki-client