$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json) Hash identifier: xThZZNGDJzjpvwWbdYcNLIdRApmWMwAVLSN5+ZSrcKI= Subject key identifier: 23:0C:60:ED:68:DB:44:CA:2D:48:B9:61:BA:2D:C8:D7:69:63:CA:51 Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft Manifest number: 065B Signing time: Wed 18 Jun 2025 22:20:25 +0000 Manifest this update: Wed 18 Jun 2025 22:20:25 +0000 Manifest next update: Wed 25 Jun 2025 22:20:25 +0000 Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: wHjMVuciH5Yh33XTj/eMBHAf2VdsLbRC6zREoWXeK00=) 2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: Jun 18 22:20:25 2025 GMT Not After : Jun 25 22:20:25 2025 GMT Subject: CN=68533ba9-35cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:ed:0d:0c:61:92:d0:86:c5:56:c7:9a:b1: b9:17:ce:be:b3:7f:26:e2:3e:87:c4:b2:02:29:a4: 3b:cc:0b:07:e6:97:93:5b:ba:cd:8c:fe:8b:d1:fc: 74:bd:ab:f3:ea:b9:51:17:f2:4f:16:82:69:c6:14: 76:31:b1:31:1f:07:ef:88:56:fa:a4:d7:65:f0:38: 66:ec:0c:77:a4:a0:12:a7:fd:c0:f6:09:96:4c:fc: 08:cd:f0:66:87:6c:3f:3e:b1:89:bd:71:e2:ef:e0: 00:1b:f5:e3:ff:85:6f:36:cd:1a:71:94:de:df:ca: 40:4a:f5:55:15:c0:e4:f3:8f:c0:bc:db:08:82:24: 00:51:51:71:51:41:12:fd:8a:36:86:d4:b9:8d:47: 2f:79:43:38:35:47:31:02:b9:86:3a:9e:9a:5b:89: 51:b2:e9:fb:45:f5:8e:ae:5b:6f:76:0e:71:ab:97: a6:fe:0e:4b:3b:b1:8e:4f:47:dd:1b:e5:f7:78:c5: 0d:82:80:3f:de:88:00:05:fc:20:1e:5f:f6:2c:db: 0d:c7:c3:95:58:51:55:1a:6a:26:d9:52:8b:78:aa: 0a:7d:7b:6e:2d:45:a7:1f:c6:8f:b6:d2:cb:75:a8: 2c:0a:b6:15:7d:32:73:fa:63:f5:f2:d6:fc:07:bf: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0C:60:ED:68:DB:44:CA:2D:48:B9:61:BA:2D:C8:D7:69:63:CA:51 X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:c1:b9:59:f1:a8:d3:35:8d:8f:b5:6f:06:69:c7:7f:66: 2e:f8:10:85:21:18:27:1e:ed:09:ef:92:c1:a5:0e:8f:af:4d: f2:0f:28:3b:c3:74:5c:0b:63:15:7b:b1:36:1b:8b:f9:ca:d8: 79:0a:19:37:e8:71:2a:4e:d2:83:db:32:4c:25:e1:25:64:44: 4a:cc:eb:a1:5c:50:4b:0e:49:fd:71:95:10:70:2a:fc:a4:e1: 0f:ee:62:8d:ef:55:cd:ae:24:29:10:73:7b:bd:49:fd:84:bd: 41:5b:44:6c:98:07:cf:88:c7:e6:e5:8d:6c:c9:5b:9b:0b:15: 25:00:32:28:4f:d2:d2:27:6f:38:22:64:c4:e6:aa:c8:d9:9b: f7:44:6a:63:bf:f6:b3:aa:0f:2d:d2:7e:d5:91:2a:0b:f4:c2: 19:5d:ba:27:8a:67:ae:c7:0e:b5:07:25:6b:79:81:13:8c:1d: 5a:1b:88:80:a0:af:f1:96:1f:65:bd:71:42:15:35:06:ee:53: b8:87:e2:23:a3:32:df:41:58:08:5a:e0:4c:9c:9f:ab:45:bc: e8:68:22:1a:fb:82:4f:3d:3f:2c:81:cb:a6:7b:d2:0b:48:0d: 5d:aa:2e:af:74:48:19:10:94:ec:e2:20:62:51:12:45:54:9b: 11:b4:4a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjUwNjE4MjIyMDI1WhcNMjUwNjI1MjIyMDI1WjAYMRYwFAYD VQQDEw02ODUzM2JhOS0zNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM7tDQxhktCGxVbHmrG5F86+s38m4j6HxLICKaQ7zAsH5peTW7rNjP6L0fx0 vavz6rlRF/JPFoJpxhR2MbExHwfviFb6pNdl8Dhm7Ax3pKASp/3A9gmWTPwIzfBm h2w/PrGJvXHi7+AAG/Xj/4VvNs0acZTe38pASvVVFcDk84/AvNsIgiQAUVFxUUES /Yo2htS5jUcveUM4NUcxArmGOp6aW4lRsun7RfWOrltvdg5xq5em/g5LO7GOT0fd G+X3eMUNgoA/3ogABfwgHl/2LNsNx8OVWFFVGmom2VKLeKoKfXtuLUWnH8aPttLL dagsCrYVfTJz+mP18tb8B78V2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMMYO1o 20TKLUi5YbotyNdpY8pRMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0UxNy83QUIwQjU2Njg4MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZ UnpUbTJiNGI3cENBSF9vQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALccG5WfGo0zWNj7VvBmnHf2Yu+BCFIRgnHu0J75LBpQ6Pr03yDyg7 w3RcC2MVe7E2G4v5yth5Chk36HEqTtKD2zJMJeElZERKzOuhXFBLDkn9cZUQcCr8 pOEP7mKN71XNriQpEHN7vUn9hL1BW0RsmAfPiMfm5Y1syVubCxUlADIoT9LSJ284 ImTE5qrI2Zv3RGpjv/azqg8t0n7VkSoL9MIZXbonimeuxw61ByVreYETjB1aG4iA oK/xlh9lvXFCFTUG7lO4h+IjozLfQVgIWuBMnJ+rRbzoaCIa+4JPPT8sgcume9IL SA1dqi6vdEgZEJTs4iBiURJFVJsRtEpE -----END CERTIFICATE-----Generated at Thu Jun 19 05:11:13 2025 by rpki-client