$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json) Hash identifier: M7FsfBBGozF8q0mcnrwsoDG2rDkuX/Y40SUbMN9yZ/w= Subject key identifier: 53:5A:78:BD:B4:08:1C:5B:9E:8C:02:13:24:BD:F5:71:5E:C4:87:DF Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft Manifest number: 0675 Signing time: Fri 08 Aug 2025 22:50:29 +0000 Manifest this update: Fri 08 Aug 2025 22:50:29 +0000 Manifest next update: Fri 15 Aug 2025 22:50:29 +0000 Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: v86FCY9zKSLxsds6tdN9UckAmdBInIhC9IlIEgDCWQ4=) 2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: Aug 8 22:50:29 2025 GMT Not After : Aug 15 22:50:29 2025 GMT Subject: CN=68967f35-92f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:5d:77:db:fd:15:30:63:99:d0:94:a2:80: d5:02:f8:af:09:d9:48:44:8f:c1:71:0a:e1:55:7c: 3b:ce:25:9c:5a:2d:65:d8:0a:41:f2:6b:2d:08:3b: 84:84:6a:9f:65:a2:42:df:1a:4f:bd:f1:21:d9:ce: 2c:16:8f:0a:d4:74:24:23:d4:f2:8c:96:9b:ff:6f: 10:ab:66:81:3d:8b:b3:ce:dc:0a:4a:c2:7d:38:2d: cf:0a:0a:77:ed:e2:9c:63:10:ea:d6:10:d8:59:2b: e1:4d:65:8b:7d:87:36:30:de:84:98:82:be:4f:c8: f1:9f:4d:dd:10:ef:00:74:38:9c:f3:a7:30:59:37: 25:1d:3c:6f:60:41:bf:18:be:3c:81:cf:d5:ff:f9: 0a:d2:f7:c6:69:15:72:4c:38:f5:c4:b2:c7:e0:67: 6f:a1:02:4d:f7:1a:68:39:aa:b7:a9:9a:0a:04:ac: 74:03:95:64:b9:b8:f1:ca:1c:ed:18:1d:70:d4:ac: 83:97:df:1e:4b:fd:e4:74:70:bd:9f:fd:54:c7:80: 57:92:13:e7:76:9e:e8:c1:2f:70:fc:dc:1a:e2:88: 81:88:9d:26:53:91:ce:d2:72:37:67:c8:33:80:2b: 3e:09:98:e6:ea:ff:25:d7:2a:8b:e6:bb:0f:50:b4: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:78:BD:B4:08:1C:5B:9E:8C:02:13:24:BD:F5:71:5E:C4:87:DF X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:cc:8e:5d:ea:c9:1b:50:fd:36:e8:61:d6:a4:4b:cb:69: 2f:f0:72:31:af:8d:13:4b:4f:c5:ef:55:88:e5:28:e7:4e:e5: 8f:60:d0:dd:bb:5a:92:a2:87:d2:1f:b2:21:7a:db:16:c5:9b: a8:6b:1b:5f:f2:f7:f3:1a:b7:fd:19:4c:a8:27:b1:ce:b3:e1: b0:92:bc:30:72:c1:32:d4:50:44:21:5e:9c:87:0d:47:16:91: d6:d4:9e:4e:3b:af:f4:2a:eb:8f:cf:e5:65:82:b1:f1:13:9e: 4d:fb:42:85:dd:35:d8:da:76:90:1d:89:df:a1:51:85:51:02: 67:42:59:b5:c7:a3:10:2f:2b:87:d8:66:15:d6:59:12:4b:cf: c0:44:ac:af:8a:6c:a6:8a:c3:43:ce:45:c5:ca:a5:33:38:21: 9b:8f:0e:d8:d8:44:88:5d:dc:2f:42:92:26:31:68:6c:a8:2c: b8:23:c5:49:d3:9b:78:54:1a:6b:bf:26:23:50:07:0f:cf:56: 41:71:e4:8b:d9:fb:16:39:70:3d:fd:4e:1a:7c:6c:29:eb:08: 82:fa:b0:0e:cf:e7:27:d7:56:6c:fa:7b:7e:fe:25:39:cd:0e: 30:bf:ca:bc:57:15:43:ca:65:bc:71:10:b8:54:ba:ac:11:27: f5:b1:80:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjUwODA4MjI1MDI5WhcNMjUwODE1MjI1MDI5WjAYMRYwFAYD VQQDEw02ODk2N2YzNS05MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L1dd9v9FTBjmdCUooDVAvivCdlIRI/BcQrhVXw7ziWcWi1l2ApB8mstCDuE hGqfZaJC3xpPvfEh2c4sFo8K1HQkI9TyjJab/28Qq2aBPYuzztwKSsJ9OC3PCgp3 7eKcYxDq1hDYWSvhTWWLfYc2MN6EmIK+T8jxn03dEO8AdDic86cwWTclHTxvYEG/ GL48gc/V//kK0vfGaRVyTDj1xLLH4GdvoQJN9xpoOaq3qZoKBKx0A5Vkubjxyhzt GB1w1KyDl98eS/3kdHC9n/1Ux4BXkhPndp7owS9w/Nwa4oiBiJ0mU5HO0nI3Z8gz gCs+CZjm6v8l1yqL5rsPULS76wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNaeL20 CBxbnowCEyS99XFexIffMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0UxNy83QUIwQjU2Njg4MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZ UnpUbTJiNGI3cENBSF9vQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiUMyOXerJG1D9Nuhh1qRLy2kv8HIxr40TS0/F71WI5SjnTuWPYNDd u1qSoofSH7IhetsWxZuoaxtf8vfzGrf9GUyoJ7HOs+GwkrwwcsEy1FBEIV6chw1H FpHW1J5OO6/0KuuPz+VlgrHxE55N+0KF3TXY2naQHYnfoVGFUQJnQlm1x6MQLyuH 2GYV1lkSS8/ARKyvimymisNDzkXFyqUzOCGbjw7Y2ESIXdwvQpImMWhsqCy4I8VJ 05t4VBprvyYjUAcPz1ZBceSL2fsWOXA9/U4afGwp6wiC+rAOz+cn11Zs+nt+/iU5 zQ4wv8q8VxVDymW8cRC4VLqsESf1sYCB -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:08 2025 by rpki-client