$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: 5DjHfL2fmqMrju29xdxcCxBnBHbzdxDDDqQjlibZmdY= Subject key identifier: A3:65:9F:0A:94:79:C3:49:74:E0:06:50:AC:E2:BA:38:21:88:B3:71 Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 0874 Signing time: Sat 02 Aug 2025 20:58:35 +0000 Manifest this update: Sat 02 Aug 2025 20:58:35 +0000 Manifest next update: Sat 09 Aug 2025 20:58:35 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: zqGKNKHmiIdC+anTWerH4dSO0al6IDW0D27DzYyZLzI=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Aug 2 20:58:35 2025 GMT Not After : Aug 9 20:58:35 2025 GMT Subject: CN=688e7bfb-8a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:79:4e:39:67:ab:f9:be:62:26:87:a2:bf:68: 21:8c:f3:a2:1b:db:52:94:12:78:c6:14:00:9a:0c: e7:e4:15:78:a0:51:c8:ae:1e:b6:ce:df:fe:36:13: db:86:56:b4:29:3d:4f:8c:ad:23:88:02:01:14:17: 14:07:92:ec:47:6d:0b:fe:94:ef:88:42:cc:01:49: 17:29:03:a2:99:19:2e:41:20:c5:8a:c5:3d:0c:bc: 82:12:70:f1:41:e1:e3:68:b7:66:2b:31:ef:1e:9e: 3a:2f:db:0e:32:37:74:e0:ad:fb:7c:4a:92:f0:e9: 8e:1b:52:1c:ce:ca:0c:7f:99:9e:8a:02:37:cc:58: 8a:01:d2:fb:46:e9:95:bf:7f:ec:c3:f1:bb:27:eb: 08:36:e2:29:b7:ad:f6:2f:a3:74:d6:b3:42:ef:71: 4f:d2:5d:6c:a4:1b:12:77:54:5c:fb:36:d4:e2:a7: ed:25:8c:14:42:1c:69:cc:13:32:c2:b9:ab:fb:c2: 37:80:a4:92:8a:a8:8f:ab:4e:eb:0e:24:32:9f:ba: 92:e3:ac:46:53:b5:da:0c:29:77:bf:de:d4:05:a8: 77:fb:58:c7:14:7c:71:ad:d9:9d:7e:0f:af:27:36: 14:63:c8:63:2f:11:fa:b9:76:4a:0c:c5:89:fb:12: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:9F:0A:94:79:C3:49:74:E0:06:50:AC:E2:BA:38:21:88:B3:71 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0b:6a:e3:34:a5:20:47:01:a3:6f:92:1c:74:0f:cd:62:7d: 44:21:c4:73:d8:c8:e2:76:88:ec:8a:bb:bf:23:3a:57:5c:45: 0b:57:1c:e4:9b:d8:f4:82:19:64:06:83:9c:28:23:6d:08:76: ef:a0:06:76:c9:d8:b7:6b:ee:7c:e4:7b:8a:34:a4:c2:7b:9c: 12:f9:23:4d:77:5a:eb:6c:b1:22:e8:71:5d:b6:83:24:2b:53: f5:7c:f5:69:e0:ae:57:89:79:ab:b2:13:69:e4:f7:6b:2b:e6: d7:54:fb:f5:90:81:98:f9:c7:e2:93:6c:2a:1f:88:2d:bf:d4: af:f9:b4:c0:60:29:42:b8:a2:05:bd:99:40:e4:f0:6e:b5:3d: 8c:84:64:10:77:ff:b0:24:cf:91:57:42:09:76:e9:ef:f8:2a: bc:c7:a2:79:95:e0:04:e8:97:f5:30:40:ed:49:3b:d8:ac:9c: 89:f4:f0:43:fd:2c:54:9c:14:ff:89:a1:ae:fa:72:99:7f:6f: bd:98:49:ff:f0:dd:ca:d0:47:d0:a9:5e:e4:e5:eb:29:1a:a4: bc:d2:26:a1:8f:76:88:8e:a8:2f:eb:a5:e8:5f:39:50:6d:f5: 1c:0b:24:da:69:07:b6:df:4a:56:45:ca:98:0e:84:31:91:c5: ba:e2:09:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwODAyMjA1ODM1WhcNMjUwODA5MjA1ODM1WjAYMRYwFAYD VQQDEw02ODhlN2JmYi04YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73lOOWer+b5iJoeiv2ghjPOiG9tSlBJ4xhQAmgzn5BV4oFHIrh62zt/+NhPb hla0KT1PjK0jiAIBFBcUB5LsR20L/pTviELMAUkXKQOimRkuQSDFisU9DLyCEnDx QeHjaLdmKzHvHp46L9sOMjd04K37fEqS8OmOG1IczsoMf5meigI3zFiKAdL7RumV v3/sw/G7J+sINuIpt632L6N01rNC73FP0l1spBsSd1Rc+zbU4qftJYwUQhxpzBMy wrmr+8I3gKSSiqiPq07rDiQyn7qS46xGU7XaDCl3v97UBah3+1jHFHxxrdmdfg+v JzYUY8hjLxH6uXZKDMWJ+xIIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNlnwqU ecNJdOAGUKziujghiLNxMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/C2rjNKUgRwGjb5IcdA/NYn1EIcRz2Mjidojsiru/IzpXXEULVxzk m9j0ghlkBoOcKCNtCHbvoAZ2ydi3a+585HuKNKTCe5wS+SNNd1rrbLEi6HFdtoMk K1P1fPVp4K5XiXmrshNp5PdrK+bXVPv1kIGY+cfik2wqH4gtv9Sv+bTAYClCuKIF vZlA5PButT2MhGQQd/+wJM+RV0IJdunv+Cq8x6J5leAE6Jf1MEDtSTvYrJyJ9PBD /SxUnBT/iaGu+nKZf2+9mEn/8N3K0EfQqV7k5espGqS80iahj3aIjqgv66XoXzlQ bfUcCyTaaQe230pWRcqYDoQxkcW64gmG -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:33 2025 by rpki-client