$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: eCb6z15CaKeDJ1GaRM6lWQuI2j5Pejs4fdTzezww6Hg= Subject key identifier: 72:43:5A:65:7E:8B:CC:1F:D4:86:CD:BC:6C:0C:B5:5D:62:91:5D:8D Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 58 Signing time: Sat 09 Aug 2025 07:41:15 +0000 Manifest this update: Sat 09 Aug 2025 07:41:14 +0000 Manifest next update: Sat 16 Aug 2025 07:41:14 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: qjKN6HjBffF3MOA3kmvvj+ZK92edAeUqsliAOe/VT1g=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Aug 9 07:41:14 2025 GMT Not After : Aug 16 07:41:14 2025 GMT Subject: CN=6896fb9a-6c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:8c:90:ef:53:02:85:6f:57:24:9f:0a:c5: 36:5c:2e:e2:78:6e:12:6b:4f:97:d2:4b:b5:91:94: 2a:53:ec:53:ff:f5:43:88:ff:e2:60:05:0b:f8:87: ac:fe:9d:42:29:de:71:cd:86:94:a0:b6:28:48:a6: 19:46:21:aa:b1:1d:e8:90:e5:4c:e2:db:03:90:f7: 9f:b2:dc:30:8e:19:ce:02:db:d3:2a:af:42:fd:07: 66:79:97:77:54:7f:f2:51:0a:17:81:e0:38:60:0a: 42:5d:0d:85:68:79:79:32:df:18:56:81:1f:06:21: ab:62:f3:e0:14:2a:82:9a:17:7d:75:cb:0f:78:8d: bc:56:50:ec:9e:c0:38:aa:5c:c2:67:e1:45:49:af: 7d:9a:2f:c0:c8:fa:7e:23:dc:32:91:99:5e:d8:c6: 3d:6c:57:09:30:36:d4:87:be:2f:6f:a3:f1:35:6c: 5e:01:e2:99:41:bd:43:18:47:fa:b4:c1:23:72:2e: ef:a2:dd:3a:4c:3d:38:67:10:a8:05:4b:d2:9e:89: 47:19:09:53:c0:a8:57:93:3b:95:76:8b:55:fd:ed: 36:b3:a3:9a:c9:d6:8e:fb:9f:a2:79:26:74:97:8e: c1:64:0a:c2:c0:77:1b:a5:5e:0f:f1:e5:b4:ad:5c: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:5A:65:7E:8B:CC:1F:D4:86:CD:BC:6C:0C:B5:5D:62:91:5D:8D X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:77:74:13:31:67:96:53:59:1e:af:68:40:c3:66:6d:74:54: 51:35:68:0c:4a:27:16:87:5e:68:bc:1d:d7:e1:09:4e:84:59: 83:b9:c2:b2:28:9f:a4:83:73:75:c6:01:8b:50:2c:7a:af:fd: 86:3a:ad:d5:2c:f0:d3:94:f5:0a:a2:49:42:bb:88:ef:e5:cd: 62:cb:a0:38:98:f5:3f:91:37:f7:6b:c9:df:13:ee:af:17:4f: 6d:58:7b:8b:72:0b:c7:19:07:00:7c:2a:45:9f:51:63:88:f0: 61:5f:42:d5:1e:5b:14:94:58:f7:d4:cd:1d:69:33:9d:c4:33: ba:a4:2a:c3:fb:e2:9a:fc:24:ff:be:92:97:9c:50:e8:0f:fa: c4:b3:c6:d7:48:0d:43:a2:5e:b4:4b:43:75:26:cb:d2:33:da: dc:aa:04:b4:39:48:a2:72:34:a9:09:b2:f1:08:ff:ba:5b:19: b4:db:4b:3f:86:98:fc:56:08:54:ad:46:7c:14:1e:29:22:66: 0e:a8:5a:29:aa:66:e3:5f:10:8b:e5:3a:0f:c5:cf:ef:93:ab: a9:c4:77:01:67:6e:32:43:6a:68:72:3a:b3:65:9f:bf:cf:48: 1c:bf:0f:16:65:aa:76:31:22:03:7e:65:c4:87:a8:1f:ff:0b: 7f:cc:5f:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA4MDkwNzQxMTRaFw0yNTA4MTYwNzQxMTRaMBgxFjAUBgNV BAMTDTY4OTZmYjlhLTZjNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2G4yQ71MChW9XJJ8KxTZcLuJ4bhJrT5fSS7WRlCpT7FP/9UOI/+JgBQv4h6z+ nUIp3nHNhpSgtihIphlGIaqxHeiQ5Uzi2wOQ95+y3DCOGc4C29Mqr0L9B2Z5l3dU f/JRCheB4DhgCkJdDYVoeXky3xhWgR8GIati8+AUKoKaF311yw94jbxWUOyewDiq XMJn4UVJr32aL8DI+n4j3DKRmV7Yxj1sVwkwNtSHvi9vo/E1bF4B4plBvUMYR/q0 wSNyLu+i3TpMPThnEKgFS9KeiUcZCVPAqFeTO5V2i1X97Tazo5rJ1o77n6J5JnSX jsFkCsLAdxulXg/x5bStXO+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUckNaZX6L zB/Uhs28bAy1XWKRXY0wHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGV3dBMxZ5ZTWR6vaEDDZm10VFE1aAxKJxaHXmi8HdfhCU6EWYO5wrIo n6SDc3XGAYtQLHqv/YY6rdUs8NOU9QqiSUK7iO/lzWLLoDiY9T+RN/dryd8T7q8X T21Ye4tyC8cZBwB8KkWfUWOI8GFfQtUeWxSUWPfUzR1pM53EM7qkKsP74pr8JP++ kpecUOgP+sSzxtdIDUOiXrRLQ3Umy9Iz2tyqBLQ5SKJyNKkJsvEI/7pbGbTbSz+G mPxWCFStRnwUHikiZg6oWimqZuNfEIvlOg/Fz++Tq6nEdwFnbjJDamhyOrNln7/P SBy/DxZlqnYxIgN+ZcSHqB//C3/MX8E= -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:26 2025 by rpki-client