$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: s9Y8caQ13qPsVgoo111y5d+nj77AgL4BRQ6wSKDqoKU= Subject key identifier: 5A:B7:8C:77:54:88:16:85:0A:23:33:4E:24:C3:10:A6:3E:92:E0:F2 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0E0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0E02 Signing time: Sat 14 Jun 2025 17:45:05 +0000 Manifest this update: Sat 14 Jun 2025 17:45:04 +0000 Manifest next update: Sat 21 Jun 2025 17:45:04 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: M4WB0E4anzHGwA0Z6CupXq5FnlsHL3SWK6R7nXmNzkM=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3595 (0xe0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Jun 14 17:45:04 2025 GMT Not After : Jun 21 17:45:04 2025 GMT Subject: CN=684db521-f6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:69:dc:a2:ec:e0:6c:05:01:43:9a:d7:fa: 28:05:17:7c:63:93:40:84:4d:f3:e6:b7:55:ad:89: a8:16:39:e2:fa:7c:cd:11:72:62:ab:17:39:19:cd: 82:20:78:cc:ab:dd:7b:31:ea:26:67:70:6e:fc:24: 5c:ac:4e:98:3b:05:cc:c9:43:72:ef:d4:cb:56:6d: d9:44:e1:fb:f3:fd:e3:2d:fa:68:2c:fe:8e:09:70: 21:e3:67:60:6c:db:65:10:7b:f0:11:66:03:0f:82: 4a:94:9b:96:4f:79:a0:c7:99:c5:d8:91:d6:e7:b9: 77:9f:d1:13:bb:91:7b:8b:16:04:1f:63:37:6c:f1: 4e:b7:31:96:14:86:77:7a:f4:2e:22:63:bf:4e:cd: 6b:d7:a4:63:6d:36:82:61:ca:a9:05:ca:37:b7:43: f9:27:4f:2f:57:f6:01:bd:fb:09:c7:62:03:2a:f9: 02:7c:6a:f0:e8:72:07:2a:c9:b4:b0:dd:ba:27:fe: bb:3d:1b:74:e6:ed:21:21:b4:33:2c:14:f3:de:52: a9:a5:45:2c:a3:ec:cd:64:38:17:dd:a1:b4:08:71: d2:27:c7:37:5c:39:ae:39:b9:ab:86:ef:c2:75:06: 77:cc:81:be:f9:b2:12:6d:6f:9d:4b:ea:58:e0:d8: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B7:8C:77:54:88:16:85:0A:23:33:4E:24:C3:10:A6:3E:92:E0:F2 X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:ff:3b:2c:a5:67:dd:91:04:b1:2e:42:5d:67:d9:90:3e:93: 12:b4:30:1a:f7:db:3d:26:9d:fa:18:e3:5a:1a:ef:7e:76:df: 8f:06:34:5f:e6:b5:6d:d4:17:4a:ce:0f:3f:ac:d9:93:01:59: 4b:3f:07:14:a8:e0:70:a7:0f:f7:2d:ce:41:00:2b:4f:d5:5c: 76:cf:cf:c5:92:3d:6b:af:fb:ae:36:ee:67:dd:fd:15:9f:02: e7:c1:b7:b4:22:d1:e0:fb:03:74:83:37:ad:a0:6f:ea:31:ff: 82:8e:07:fd:b3:fe:c0:70:af:8b:61:8a:4e:48:56:01:44:c2: d5:2a:58:b7:aa:31:0c:61:03:db:b5:cd:d6:f3:f5:7f:3d:63: a4:7e:60:89:ca:fd:6c:32:e1:e1:62:67:d5:a1:22:4a:35:b9: ee:78:18:12:27:47:c7:77:da:e5:18:4d:8f:60:ca:d2:9c:6d: db:7b:06:69:a2:e1:7e:82:9b:7d:de:8b:09:ad:dd:5a:1d:93: 76:88:59:e7:8a:57:c2:f2:81:8c:34:c6:00:33:30:7d:09:c0: 2d:50:b0:2f:8d:52:36:42:81:f3:a7:f1:e2:4e:d7:90:ba:ed: 33:59:23:ee:a4:32:63:11:1e:bf:05:a4:92:e5:85:77:de:00: 95:7b:d1:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUwNjE0MTc0NTA0WhcNMjUwNjIxMTc0NTA0WjAYMRYwFAYD VQQDEw02ODRkYjUyMS1mNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4khp3KLs4GwFAUOa1/ooBRd8Y5NAhE3z5rdVrYmoFjni+nzNEXJiqxc5Gc2C IHjMq917MeomZ3Bu/CRcrE6YOwXMyUNy79TLVm3ZROH78/3jLfpoLP6OCXAh42dg bNtlEHvwEWYDD4JKlJuWT3mgx5nF2JHW57l3n9ETu5F7ixYEH2M3bPFOtzGWFIZ3 evQuImO/Ts1r16RjbTaCYcqpBco3t0P5J08vV/YBvfsJx2IDKvkCfGrw6HIHKsm0 sN26J/67PRt05u0hIbQzLBTz3lKppUUso+zNZDgX3aG0CHHSJ8c3XDmuObmrhu/C dQZ3zIG++bISbW+dS+pY4NjoiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq3jHdU iBaFCiMzTiTDEKY+kuDyMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS/zsspWfdkQSxLkJdZ9mQPpMStDAa99s9Jp36GONaGu9+dt+PBjRf 5rVt1BdKzg8/rNmTAVlLPwcUqOBwpw/3Lc5BACtP1Vx2z8/Fkj1rr/uuNu5n3f0V nwLnwbe0ItHg+wN0gzetoG/qMf+Cjgf9s/7AcK+LYYpOSFYBRMLVKli3qjEMYQPb tc3W8/V/PWOkfmCJyv1sMuHhYmfVoSJKNbnueBgSJ0fHd9rlGE2PYMrSnG3bewZp ouF+gpt93osJrd1aHZN2iFnnilfC8oGMNMYAMzB9CcAtULAvjVI2QoHzp/HiTteQ uu0zWSPupDJjER6/BaSS5YV33gCVe9FK -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:33 2025 by rpki-client