$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: gwVSoXtxHozhvG5/4lmnGl86Hj4rbmgCgV/reKgY/5w= Subject key identifier: 8D:0E:72:A1:67:7B:46:93:CC:F8:9A:D0:6B:2B:99:13:89:96:42:D2 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 1284 Signing time: Sat 14 Jun 2025 19:52:24 +0000 Manifest this update: Sat 14 Jun 2025 19:52:23 +0000 Manifest next update: Sat 21 Jun 2025 19:52:23 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: avjg+9BR5fQcpyNjMnzOAu2vOzCsKfuTXVo5Ni8INc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Jun 14 19:52:23 2025 GMT Not After : Jun 21 19:52:23 2025 GMT Subject: CN=684dd2f8-c8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:e1:49:5c:30:0a:2e:af:b9:0b:bf:35:9d: 62:ba:74:07:f1:63:15:10:d2:91:79:59:c7:dd:ee: ea:1e:4a:9f:7e:81:f2:06:43:f1:27:9b:8d:0f:35: 1b:cd:5f:8a:ba:29:87:53:fa:4a:7f:02:17:c2:6d: 05:01:16:a3:c1:7f:4b:01:63:68:04:29:74:0f:c0: 49:b6:32:d4:54:0a:88:cd:51:5c:a2:df:be:c8:b9: fa:c1:8c:ef:14:6c:f0:f4:ba:1d:6c:8d:cf:94:9a: c1:bc:e5:f0:9e:6d:51:85:ba:76:6a:89:c3:55:39: 8b:ed:73:af:fe:aa:8b:db:09:7c:65:d0:61:ae:9b: 23:bf:78:10:5f:26:12:05:3b:49:4f:33:40:e9:f6: e0:96:f6:6c:2e:bf:82:b0:13:1d:49:25:91:bf:51: cb:bc:9e:2f:1a:77:9d:53:72:f4:2d:cf:66:8a:19: e6:bd:5d:ed:b7:26:64:be:bb:bf:93:d5:34:9b:ff: 17:89:ca:39:cb:89:c4:d0:10:01:05:0c:83:a6:f9: d4:91:03:d0:b5:02:31:7d:d8:a2:1e:64:bd:ed:72: 6b:97:af:ff:ca:86:72:62:6c:ce:b2:ef:97:2c:a8: f6:4d:02:d5:68:67:6c:13:28:9f:c1:87:99:b5:df: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:72:A1:67:7B:46:93:CC:F8:9A:D0:6B:2B:99:13:89:96:42:D2 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:97:80:f5:56:82:c1:1c:52:41:33:25:f7:bc:37:6e:97:a7: 51:5e:3f:2b:d3:e4:e1:47:36:d1:54:16:ba:d7:e8:d7:72:37: 30:eb:c3:91:18:3e:e3:ef:01:1c:03:1f:5e:2e:99:e5:71:0e: 2d:8b:18:7d:c0:24:f9:a6:4a:e9:b4:91:09:75:31:d6:2d:1c: 84:07:24:3d:16:fc:ba:74:4e:ec:9d:c6:54:d7:d1:18:9e:6c: f4:17:92:d4:4f:cc:52:7b:f2:72:80:ec:4f:a3:b5:83:7f:c2: 6a:76:98:37:23:2b:6f:e4:42:ba:de:8e:9e:a9:b8:d1:23:e5: bc:32:dd:8e:bf:f7:d5:9d:9d:0b:db:7b:9f:97:61:9c:d8:21: b6:fa:b7:fe:43:e4:05:17:2f:ff:d4:95:63:0d:19:b3:82:06: f7:ba:65:19:7f:5d:44:3d:65:11:e3:ab:13:df:34:f0:22:be: 60:d9:84:3b:e4:8b:a2:78:1c:37:04:9f:6b:0a:ba:a1:c4:9d: 75:32:1e:38:55:7e:fc:31:23:10:fd:9d:4b:db:5e:0a:22:3f: d5:af:8e:90:56:9c:35:92:1b:c0:06:e4:2b:71:b2:2f:9e:b0: 4d:bf:4b:ed:21:a4:8e:af:f0:57:e4:e2:f4:8f:e7:bb:be:7a: 69:4e:50:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNjE0MTk1MjIzWhcNMjUwNjIxMTk1MjIzWjAYMRYwFAYD VQQDEw02ODRkZDJmOC1jOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zjhSVwwCi6vuQu/NZ1iunQH8WMVENKReVnH3e7qHkqffoHyBkPxJ5uNDzUb zV+KuimHU/pKfwIXwm0FARajwX9LAWNoBCl0D8BJtjLUVAqIzVFcot++yLn6wYzv FGzw9LodbI3PlJrBvOXwnm1Rhbp2aonDVTmL7XOv/qqL2wl8ZdBhrpsjv3gQXyYS BTtJTzNA6fbglvZsLr+CsBMdSSWRv1HLvJ4vGnedU3L0Lc9mihnmvV3ttyZkvru/ k9U0m/8Xico5y4nE0BABBQyDpvnUkQPQtQIxfdiiHmS97XJrl6//yoZyYmzOsu+X LKj2TQLVaGdsEyifwYeZtd/mWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0OcqFn e0aTzPia0GsrmROJlkLSMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3l4D1VoLBHFJBMyX3vDdul6dRXj8r0+ThRzbRVBa61+jXcjcw68OR GD7j7wEcAx9eLpnlcQ4tixh9wCT5pkrptJEJdTHWLRyEByQ9Fvy6dE7sncZU19EY nmz0F5LUT8xSe/JygOxPo7WDf8Jqdpg3Iytv5EK63o6eqbjRI+W8Mt2Ov/fVnZ0L 23ufl2Gc2CG2+rf+Q+QFFy//1JVjDRmzggb3umUZf11EPWUR46sT3zTwIr5g2YQ7 5IuieBw3BJ9rCrqhxJ11Mh44VX78MSMQ/Z1L214KIj/Vr46QVpw1khvABuQrcbIv nrBNv0vtIaSOr/BX5OL0j+e7vnppTlBq -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:11 2025 by rpki-client