$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: QR35hYCDHxjlh6fu40TM+YEuswJgDZ1YmNvvZM54FhQ= Subject key identifier: 88:D5:36:D6:B3:30:62:4B:60:13:FE:EC:57:5A:8E:64:CB:BD:1B:9F Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1A87 Signing time: Sun 10 Aug 2025 16:17:42 +0000 Manifest this update: Sun 10 Aug 2025 16:17:41 +0000 Manifest next update: Sun 17 Aug 2025 16:17:41 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: eC4yKWXEfyrqg/9JUSl/jmC3GpO9YzinUS120VoyFo4=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: 1daEoei36geA2L+OhDw4+YDumwBLUAs+Z5wiCTxRQ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6803 (0x1a93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Aug 10 16:17:41 2025 GMT Not After : Aug 17 16:17:41 2025 GMT Subject: CN=6898c625-6d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:fa:77:5d:b6:ef:60:5a:36:a0:23:ec:4a: 97:95:85:fa:97:eb:53:e7:03:4b:dc:a1:0b:ad:90: 75:92:45:95:b3:5e:0c:5a:b6:47:49:92:52:7d:d5: c0:de:9b:50:72:c5:b7:0a:8f:cd:5a:d0:98:9b:01: 60:3c:14:3c:5d:e9:cc:8b:11:e2:5c:e4:81:f5:88: 71:05:26:df:1d:d8:d2:03:95:66:d4:a1:30:bb:ce: 8a:eb:78:d2:00:2f:ff:92:34:88:ff:3e:63:88:a6: 60:70:3b:3c:0c:a8:b1:e6:fb:0d:f0:8c:3e:c2:65: 73:02:74:e3:8e:96:64:aa:41:f6:7a:86:73:e2:ac: 59:5f:75:ad:47:bd:3b:d7:95:0d:06:84:00:93:b1: 55:0a:bd:66:11:d5:1f:53:cd:b7:b5:3e:f4:fe:59: eb:20:92:d8:46:18:07:e6:2f:d1:0d:b9:17:18:ed: a6:9e:78:26:6d:9b:64:e4:7b:0a:19:3c:83:a8:56: 8b:95:26:3c:db:50:d6:ac:c5:f1:a0:2f:3a:c0:aa: 8b:8b:78:a3:e1:7a:07:4f:a4:80:12:da:d1:80:af: ff:ad:c5:8b:27:09:73:a5:08:48:25:b1:a0:4d:96: 1a:e1:8b:62:0f:23:b7:f7:4c:e7:8b:fd:a7:e1:73: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D5:36:D6:B3:30:62:4B:60:13:FE:EC:57:5A:8E:64:CB:BD:1B:9F X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:90:fc:d5:8a:52:d5:e3:f8:f3:04:fa:37:4a:42:ce:df:4f: 21:53:46:65:d1:f3:2e:26:b8:4e:1b:5a:76:4e:5a:be:81:05: 5b:04:12:5a:14:16:f5:c6:b9:71:2f:6c:f2:68:92:ca:b0:08: 27:f8:5a:08:69:04:39:12:17:58:e6:64:9a:e2:e4:06:0f:f4: 0d:8a:32:cc:80:f1:78:09:3a:47:b9:71:c9:06:3a:08:64:1c: b3:4d:2c:b7:15:63:e6:f3:b1:a7:14:86:e9:3b:00:2f:6a:b6: 36:59:9a:36:13:41:b1:56:33:fc:e3:70:43:ed:ed:ec:77:0b: 14:ab:e1:8b:5e:f1:ae:1b:2b:64:7a:8a:ac:f0:c5:ac:82:b9: cf:94:af:b3:06:9a:41:70:47:c0:6a:4d:40:2d:48:e1:1c:ae: f4:f3:98:54:be:ff:87:53:56:8c:58:f5:87:c8:7d:08:56:6a: 67:67:c7:e7:b3:44:fe:07:f0:7f:46:63:cd:81:00:a9:af:7e: 44:34:aa:1d:fa:8f:c2:15:b5:f0:5e:b3:ca:87:1e:1e:2b:63: c8:d8:7e:23:63:e4:9c:4c:3d:26:c6:03:16:d6:0d:cb:77:32: 5a:3e:1f:f9:f0:3d:7f:f2:3f:a4:f3:0d:00:44:f8:ce:7c:fd: 78:6d:9a:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUwODEwMTYxNzQxWhcNMjUwODE3MTYxNzQxWjAYMRYwFAYD VQQDEw02ODk4YzYyNS02ZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4D6d12272BaNqAj7EqXlYX6l+tT5wNL3KELrZB1kkWVs14MWrZHSZJSfdXA 3ptQcsW3Co/NWtCYmwFgPBQ8XenMixHiXOSB9YhxBSbfHdjSA5Vm1KEwu86K63jS AC//kjSI/z5jiKZgcDs8DKix5vsN8Iw+wmVzAnTjjpZkqkH2eoZz4qxZX3WtR707 15UNBoQAk7FVCr1mEdUfU823tT70/lnrIJLYRhgH5i/RDbkXGO2mnngmbZtk5HsK GTyDqFaLlSY821DWrMXxoC86wKqLi3ij4XoHT6SAEtrRgK//rcWLJwlzpQhIJbGg TZYa4YtiDyO390zni/2n4XMapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjVNtaz MGJLYBP+7FdajmTLvRufMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkPzVilLV4/jzBPo3SkLO308hU0Zl0fMuJrhOG1p2Tlq+gQVbBBJa FBb1xrlxL2zyaJLKsAgn+FoIaQQ5EhdY5mSa4uQGD/QNijLMgPF4CTpHuXHJBjoI ZByzTSy3FWPm87GnFIbpOwAvarY2WZo2E0GxVjP843BD7e3sdwsUq+GLXvGuGytk eoqs8MWsgrnPlK+zBppBcEfAak1ALUjhHK7085hUvv+HU1aMWPWHyH0IVmpnZ8fn s0T+B/B/RmPNgQCpr35ENKod+o/CFbXwXrPKhx4eK2PI2H4jY+ScTD0mxgMW1g3L dzJaPh/58D1/8j+k8w0ARPjOfP14bZoI -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:47 2025 by rpki-client