$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: 3fMry3b3zrYDlO+l6iivd8o1XEdZN1IUidwIFk9C/2g= Subject key identifier: D9:93:E9:93:D6:BE:CA:1E:8A:8D:69:0D:FB:C1:9B:87:BD:0D:5A:27 Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 05F2 Signing time: Fri 08 Aug 2025 23:22:07 +0000 Manifest this update: Fri 08 Aug 2025 23:22:07 +0000 Manifest next update: Fri 15 Aug 2025 23:22:07 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: 4JaJDqZy7nEPX9LbV4nFuCduLrqTngpfYy1IZcmQMyc=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: Aug 8 23:22:07 2025 GMT Not After : Aug 15 23:22:07 2025 GMT Subject: CN=6896869f-021e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:bd:64:79:68:34:b3:cf:46:86:d8:78:28: d6:68:34:9f:e6:86:86:cb:62:ec:45:72:57:5d:e7: ae:3f:92:0b:a9:a7:58:3d:ed:b6:57:b3:cb:2f:2e: c7:a8:5d:4b:67:8c:62:1a:1e:49:6c:e2:88:4d:e1: ef:06:fe:7b:0e:2b:e7:9f:1b:60:a4:3c:56:06:d5: 5a:20:61:99:64:ba:d3:9d:f9:42:3d:7e:1a:59:e0: cc:e7:ed:c0:5d:99:25:85:dd:93:77:e1:1a:28:65: 58:9a:4d:3b:7e:8d:38:0f:04:a9:34:aa:42:f5:26: 14:41:a2:8f:9d:48:9f:5f:dc:50:30:12:17:2b:be: e3:10:e2:72:a9:ad:db:32:42:df:b3:59:1b:7a:d1: 6b:28:01:0b:59:a2:ea:ba:fc:1a:b2:11:b0:d9:3a: 82:be:01:11:0e:24:ff:b8:aa:db:a3:71:1f:a4:be: fe:e9:d3:95:5b:58:09:0c:a1:5a:fe:28:03:be:6a: 9e:16:66:07:ac:e2:ac:81:ba:a2:80:8b:2f:f9:30: b2:2c:03:94:c7:9d:30:e5:fb:00:c7:64:73:af:5a: ea:e9:dc:ad:af:74:34:6d:b4:01:fb:1c:09:18:6f: d4:2e:6a:33:5c:a5:4c:6b:8c:29:6c:8e:b1:c7:db: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:E9:93:D6:BE:CA:1E:8A:8D:69:0D:FB:C1:9B:87:BD:0D:5A:27 X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bb:94:e2:5b:55:d6:35:ca:44:ba:76:7a:1b:5a:d1:ce:b4: 8c:42:be:3a:11:3c:cc:a7:8f:35:b8:53:79:95:a3:c5:8b:a3: 68:aa:f3:93:63:3a:32:ac:67:34:a1:43:c9:d5:bd:a2:cb:96: 49:09:3f:84:39:28:2d:60:18:98:52:3f:48:26:96:40:8a:e5: d9:0a:18:e8:63:a8:86:5c:b0:71:09:3a:fc:bb:30:cb:fa:5e: 25:92:9a:e8:cd:93:ba:8a:e4:9c:3a:33:58:d7:84:8a:85:c3: e6:f8:a8:16:26:30:c9:21:7e:2c:ef:04:d5:bc:61:58:55:2d: f5:5d:95:d8:96:1b:ac:5b:f1:de:c1:e1:7b:21:c2:f0:50:56: 25:32:67:40:1e:08:55:c7:7f:23:ad:a3:ea:c3:12:cc:13:5a: cd:63:ae:7f:29:09:fb:96:61:e2:be:f8:ec:7d:7a:fa:ba:2d: 5e:46:0e:d1:99:19:c6:f3:a0:b4:6c:ad:7a:12:73:b3:0a:61: 73:0e:01:aa:18:fa:99:91:90:1d:ed:e2:ec:f2:24:fd:0a:c9: a8:a3:7a:de:ec:6e:4e:17:9b:43:01:9f:c1:a4:ef:31:fb:93: ca:de:76:c6:5b:65:76:16:6d:e5:2a:57:81:05:0e:f4:81:6b: 94:7b:05:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUwODA4MjMyMjA3WhcNMjUwODE1MjMyMjA3WjAYMRYwFAYD VQQDEw02ODk2ODY5Zi0wMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxy9ZHloNLPPRobYeCjWaDSf5oaGy2LsRXJXXeeuP5ILqadYPe22V7PLLy7H qF1LZ4xiGh5JbOKITeHvBv57DivnnxtgpDxWBtVaIGGZZLrTnflCPX4aWeDM5+3A XZklhd2Td+EaKGVYmk07fo04DwSpNKpC9SYUQaKPnUifX9xQMBIXK77jEOJyqa3b MkLfs1kbetFrKAELWaLquvwashGw2TqCvgERDiT/uKrbo3EfpL7+6dOVW1gJDKFa /igDvmqeFmYHrOKsgbqigIsv+TCyLAOUx50w5fsAx2Rzr1rq6dytr3Q0bbQB+xwJ GG/ULmozXKVMa4wpbI6xx9swEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmT6ZPW vsoeio1pDfvBm4e9DVonMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGu5TiW1XWNcpEunZ6G1rRzrSMQr46ETzMp481uFN5laPFi6NoqvOT YzoyrGc0oUPJ1b2iy5ZJCT+EOSgtYBiYUj9IJpZAiuXZChjoY6iGXLBxCTr8uzDL +l4lkprozZO6iuScOjNY14SKhcPm+KgWJjDJIX4s7wTVvGFYVS31XZXYlhusW/He weF7IcLwUFYlMmdAHghVx38jraPqwxLME1rNY65/KQn7lmHivvjsfXr6ui1eRg7R mRnG86C0bK16EnOzCmFzDgGqGPqZkZAd7eLs8iT9Csmoo3re7G5OF5tDAZ/BpO8x +5PK3nbGW2V2Fm3lKleBBQ70gWuUewXN -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:39 2025 by rpki-client