$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: svdgeg83R24jadqaj5nPiz1/C2TwlNvsMdjNrClnpTM= Subject key identifier: 16:8A:E4:FD:E7:4B:BD:5C:E4:12:C0:F1:3C:DF:47:89:11:8D:E6:C4 Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 085A Signing time: Thu 12 Jun 2025 20:27:21 +0000 Manifest this update: Thu 12 Jun 2025 20:27:21 +0000 Manifest next update: Thu 19 Jun 2025 20:27:21 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: xW6XFW89ZUOVj261MC93H8o1ZvFy/IRC4gDqXS9omos=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Jun 12 20:27:21 2025 GMT Not After : Jun 19 20:27:21 2025 GMT Subject: CN=684b3829-dc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:12:dd:77:91:54:14:4b:c3:09:a0:d3:62: 2c:f7:b6:52:3e:d6:fa:c5:58:fa:93:7c:6e:b6:6f: 81:57:d5:7e:8a:cb:1f:38:c5:2e:a4:bb:db:f8:86: 56:66:5c:88:79:8c:42:98:c7:9c:03:f7:44:bb:e4: f1:98:63:49:49:4e:22:d8:d0:ac:b1:2f:c8:26:46: ea:2f:6a:e1:8b:f7:62:6b:d4:93:65:9e:4a:fb:5c: f4:88:6b:2a:b4:25:1e:4a:99:f6:37:86:04:f0:92: ae:4d:88:72:6a:eb:f4:ff:70:51:ad:f5:c7:cf:d0: d5:c2:36:6b:02:a6:57:2e:1b:e0:e7:a4:75:0b:3a: 94:df:2a:39:28:ff:75:29:a6:a9:b3:d7:ae:d1:9b: 8c:09:ce:63:50:cb:ba:c0:33:de:72:67:03:5c:52: 5a:f6:32:8e:7e:d7:5b:fe:e9:55:08:af:f1:e1:ed: b3:c4:60:2c:10:1a:3c:74:61:63:ed:8c:16:99:a4: 40:22:9e:d5:e3:44:cd:73:e9:a1:48:e4:00:bb:37: d5:1e:94:23:8e:e8:48:12:f9:d1:99:c5:52:6c:24: c5:b7:fb:8d:8e:66:25:7c:33:cb:0b:d6:b9:00:7a: d1:5c:9d:7f:c6:12:60:a1:35:65:82:95:23:d8:be: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:E4:FD:E7:4B:BD:5C:E4:12:C0:F1:3C:DF:47:89:11:8D:E6:C4 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b9:fd:85:46:d4:41:8d:f2:a2:59:77:56:c7:d6:a0:fc:87: 1f:76:ff:8c:81:c2:0d:81:72:98:c4:95:15:24:77:a6:e8:c9: db:cf:13:1e:06:f5:bb:30:49:47:9e:fe:45:bf:59:78:ec:a1: 42:2e:ea:08:a5:9f:81:e9:b6:a3:55:d6:b5:e0:c3:fa:70:a0: 45:7d:cd:e2:f6:87:e4:37:b0:db:85:a6:22:ac:f2:38:45:eb: 76:d7:31:1d:a1:d5:82:aa:49:13:bf:5c:aa:20:f7:d4:0a:36: 86:2b:da:08:0b:a9:f8:91:64:bf:e9:f3:9e:c8:bd:8a:40:09: f4:a9:f0:1b:eb:5d:8b:e3:8c:1f:03:be:3e:d0:af:23:21:34: d5:73:3a:42:1e:74:04:fd:82:22:a0:37:26:8a:85:d0:23:e5: e9:a6:64:7d:82:ec:91:59:ee:6c:f7:3c:e0:4f:8a:32:e3:32: 4b:87:31:24:d4:bf:fc:d9:a1:7b:e3:9c:08:c4:29:52:02:05: 5d:61:5b:86:d6:e8:2e:1e:c9:ce:20:28:37:32:d0:32:e5:5e: 48:9c:34:38:6a:04:75:d8:b7:8c:57:bc:bc:d9:ed:28:e5:e0: 80:12:bc:0e:70:32:28:86:d1:e8:f1:61:f1:e4:43:ad:68:ed: b3:a6:9c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwNjEyMjAyNzIxWhcNMjUwNjE5MjAyNzIxWjAYMRYwFAYD VQQDEw02ODRiMzgyOS1kYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsokS3XeRVBRLwwmg02Is97ZSPtb6xVj6k3xutm+BV9V+issfOMUupLvb+IZW ZlyIeYxCmMecA/dEu+TxmGNJSU4i2NCssS/IJkbqL2rhi/dia9STZZ5K+1z0iGsq tCUeSpn2N4YE8JKuTYhyauv0/3BRrfXHz9DVwjZrAqZXLhvg56R1CzqU3yo5KP91 Kaaps9eu0ZuMCc5jUMu6wDPecmcDXFJa9jKOftdb/ulVCK/x4e2zxGAsEBo8dGFj 7YwWmaRAIp7V40TNc+mhSOQAuzfVHpQjjuhIEvnRmcVSbCTFt/uNjmYlfDPLC9a5 AHrRXJ1/xhJgoTVlgpUj2L7L9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaK5P3n S71c5BLA8TzfR4kRjebEMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAauf2FRtRBjfKiWXdWx9ag/Icfdv+MgcINgXKYxJUVJHem6MnbzxMe BvW7MElHnv5Fv1l47KFCLuoIpZ+B6bajVda14MP6cKBFfc3i9ofkN7DbhaYirPI4 Ret21zEdodWCqkkTv1yqIPfUCjaGK9oIC6n4kWS/6fOeyL2KQAn0qfAb612L44wf A74+0K8jITTVczpCHnQE/YIioDcmioXQI+XppmR9guyRWe5s9zzgT4oy4zJLhzEk 1L/82aF745wIxClSAgVdYVuG1uguHsnOICg3MtAy5V5InDQ4agR12LeMV7y82e0o 5eCAErwOcDIohtHo8WHx5EOtaO2zppwI -----END CERTIFICATE-----Generated at Sat Jun 14 18:35:15 2025 by rpki-client