$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: tNFVc8JYtwMgy0ZqsBmC2Fnk3wDFepE7zV/eF5tsG8I= Subject key identifier: 42:AF:3D:A7:A1:01:A1:AF:78:7F:70:89:D4:AF:B5:4C:4D:01:3B:C1 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 12C2 Signing time: Fri 08 Aug 2025 20:18:53 +0000 Manifest this update: Fri 08 Aug 2025 20:18:52 +0000 Manifest next update: Fri 15 Aug 2025 20:18:52 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: YchnUle0/fcWWaPaigPz9Z0xO6QwHHt+faC069tqJME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Aug 8 20:18:52 2025 GMT Not After : Aug 15 20:18:52 2025 GMT Subject: CN=68965bad-a196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:99:b7:fc:26:2f:7d:89:ff:14:9c:f9:bd: 1a:41:0f:e3:6b:b7:55:96:02:eb:77:80:23:0d:1f: 0b:70:7d:91:ac:ee:84:98:6f:cb:ec:38:43:6e:06: 28:db:6c:7d:f5:81:4a:38:8c:5e:d5:81:45:04:23: 28:9f:4d:1f:fc:81:df:08:19:74:9c:9a:35:9c:a8: e0:15:0d:0f:32:5e:e1:a6:f8:ff:98:c0:a2:8a:28: 35:97:a5:8e:14:b8:1e:a3:a5:82:58:ae:47:87:d0: fa:2f:af:23:9e:45:79:e8:6d:eb:29:a2:2b:b3:91: 18:3d:78:4f:88:80:13:38:25:db:26:5d:89:6e:8c: f8:86:ae:34:41:e8:1d:39:58:b5:be:3a:a5:65:c9: d9:7b:4b:0c:18:7c:57:8e:9e:d6:67:f7:7f:60:12: d2:65:6a:39:40:e9:a6:f4:16:bd:a8:8f:2c:20:bc: 99:45:e7:4d:d3:06:10:b6:f7:64:36:d4:3d:e3:35: 41:dc:4b:a3:24:69:20:02:37:88:e8:08:be:35:53: 1c:01:64:88:1a:f2:d9:23:e1:8d:6f:86:3e:5e:15: 2c:84:35:6f:ad:09:dc:6d:92:0e:36:04:e0:c5:d1: 4e:fa:e5:90:79:bd:f1:2c:df:94:4f:d1:bc:f9:d4: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:3D:A7:A1:01:A1:AF:78:7F:70:89:D4:AF:B5:4C:4D:01:3B:C1 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e2:e4:b0:39:00:fa:f8:0e:7c:03:bd:ab:9c:9d:31:f8:0d: cf:64:4e:5e:29:24:de:1b:4a:32:d1:b9:3e:f4:8e:22:b0:00: 15:8d:09:22:e3:b6:72:fa:5b:fc:64:c5:ee:94:c6:61:8b:7a: a8:14:e6:cc:52:2e:f6:e3:48:96:6c:36:5f:22:49:cf:40:d2: b2:74:04:57:e6:c4:fd:ed:58:08:6c:d3:85:c6:33:6d:1e:f0: e4:b5:29:52:31:84:e7:12:6d:6e:a7:46:fd:ac:6f:0e:99:b4: d7:6a:0e:66:d5:17:dc:b4:2d:f8:f9:e8:2f:70:43:9d:ad:48: 14:dd:94:60:cf:c5:ae:c7:6a:20:76:df:1e:da:72:14:cb:78: 33:6c:22:91:12:f0:7e:59:29:aa:d5:ce:a0:7f:f2:d6:2b:91: 0c:c9:dd:a8:4d:bc:65:9e:3c:1f:5b:7f:49:38:6b:11:c4:3a: 20:73:b6:e0:36:52:f2:8c:6b:ab:00:50:b3:ef:5a:89:53:5e: c3:19:3a:99:77:eb:d5:f3:00:84:4b:e8:36:06:de:90:74:b0: e0:ac:3d:7f:4c:62:dd:4c:ac:39:f4:59:2f:b3:51:36:74:d7: 3a:df:c8:5c:a8:80:ba:6a:90:cb:12:7d:ed:41:c2:60:de:12: 48:0c:8e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwODA4MjAxODUyWhcNMjUwODE1MjAxODUyWjAYMRYwFAYD VQQDEw02ODk2NWJhZC1hMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IKZt/wmL32J/xSc+b0aQQ/ja7dVlgLrd4AjDR8LcH2RrO6EmG/L7DhDbgYo 22x99YFKOIxe1YFFBCMon00f/IHfCBl0nJo1nKjgFQ0PMl7hpvj/mMCiiig1l6WO FLgeo6WCWK5Hh9D6L68jnkV56G3rKaIrs5EYPXhPiIATOCXbJl2Jboz4hq40Qegd OVi1vjqlZcnZe0sMGHxXjp7WZ/d/YBLSZWo5QOmm9Ba9qI8sILyZRedN0wYQtvdk NtQ94zVB3EujJGkgAjeI6Ai+NVMcAWSIGvLZI+GNb4Y+XhUshDVvrQncbZIONgTg xdFO+uWQeb3xLN+UT9G8+dSqkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKvPaeh AaGveH9widSvtUxNATvBMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO4uSwOQD6+A58A72rnJ0x+A3PZE5eKSTeG0oy0bk+9I4isAAVjQki 47Zy+lv8ZMXulMZhi3qoFObMUi7240iWbDZfIknPQNKydARX5sT97VgIbNOFxjNt HvDktSlSMYTnEm1up0b9rG8OmbTXag5m1RfctC34+egvcEOdrUgU3ZRgz8Wux2og dt8e2nIUy3gzbCKREvB+WSmq1c6gf/LWK5EMyd2oTbxlnjwfW39JOGsRxDogc7bg NlLyjGurAFCz71qJU17DGTqZd+vV8wCES+g2Bt6QdLDgrD1/TGLdTKw59Fkvs1E2 dNc638hcqIC6apDLEn3tQcJg3hJIDI72 -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:29 2025 by rpki-client