$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: GIHB6uU1EKJ9CJ3louN7EGDN2Ve/8X7T/8KaESBzGrY= Subject key identifier: 67:1F:12:3E:70:4A:33:EF:29:44:39:03:90:E8:8B:C0:4F:30:BE:5D Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 120C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1A54 Signing time: Fri 08 Aug 2025 17:20:51 +0000 Manifest this update: Fri 08 Aug 2025 17:20:51 +0000 Manifest next update: Fri 15 Aug 2025 17:20:51 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: zRj+06K8T/kbGOoMkaJiBfKhKJ+rosicmEKOtmnyysk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4620 (0x120c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Aug 8 17:20:51 2025 GMT Not After : Aug 15 17:20:51 2025 GMT Subject: CN=689631f3-c070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:0d:b8:42:7f:f5:8a:0e:2b:f4:82:46:c9: fa:37:58:04:92:47:74:60:cb:56:7d:ff:4d:75:6a: 57:42:64:46:f0:71:39:23:af:a5:94:d9:e8:bf:8e: 7e:23:10:2e:23:a1:23:8a:8d:82:cb:2f:7a:45:8f: 38:b4:e1:bc:e7:67:0e:d4:91:b0:5c:1c:4b:d1:90: 7b:82:6f:ee:4d:19:23:1d:ed:a8:21:6a:aa:56:12: d5:6f:ca:8d:38:f5:b4:c1:8e:d9:41:7d:5a:45:10: 42:81:17:67:2c:b0:dc:5f:db:8d:dc:de:27:34:45: 06:53:de:04:d1:59:2b:d1:55:73:59:1b:28:ee:82: 7d:df:49:76:f8:50:01:49:c6:97:f9:f3:f8:4d:13: 96:3f:3b:08:1d:e6:2b:70:d9:0c:6f:e4:60:02:cd: 32:4e:b2:a7:d0:ac:48:ab:5e:f8:e5:00:bd:1f:a0: c8:bf:de:fb:a3:04:d2:0d:5a:0d:84:7e:8e:97:e1: 98:42:f0:3a:2f:ad:ca:b9:0c:08:4c:61:e6:00:12: f4:73:8f:f5:32:6c:7d:50:05:bd:67:1b:74:1d:05: 40:1d:2a:ca:15:c6:f2:23:6c:19:07:7c:a9:24:1f: e1:00:cc:2e:5e:05:62:9b:ec:25:32:a9:12:1c:4b: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:12:3E:70:4A:33:EF:29:44:39:03:90:E8:8B:C0:4F:30:BE:5D X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:9d:9e:45:45:ae:9c:d9:74:cb:1c:c1:47:78:b9:06:cb: b4:d4:5f:20:97:3d:c7:f1:92:2c:17:55:59:0f:f9:a3:9c:0e: b9:a1:d0:e1:c8:87:d1:5d:91:fc:f1:fc:8c:1e:54:f6:69:85: d7:c5:38:d0:60:ac:32:94:8f:01:d1:f5:6d:7e:d4:a4:0c:62: c4:0a:e5:ed:fe:09:90:8c:b5:c0:19:26:bc:b4:b7:f1:6c:41: c0:d8:18:1f:ec:18:b8:3c:19:37:b4:7b:b4:f0:20:e9:4f:2c: 57:91:d9:1b:09:f2:01:c8:76:c4:a2:34:71:fb:6b:e7:f2:69: 13:42:a5:95:0d:18:19:1f:d5:2b:36:a7:25:04:68:67:41:1b: c4:a3:5c:32:2d:63:5b:47:87:e0:be:c4:c3:a0:c6:17:29:07: 4a:28:76:b0:54:76:3b:c2:9b:47:81:fa:bb:19:98:55:51:b5: 10:1c:f5:ac:02:dc:87:91:90:e4:2c:43:34:52:56:da:07:d9: 7d:49:b4:8c:a3:12:ab:7e:ea:6e:7f:c2:4f:34:9b:61:70:57: 38:bf:cb:81:2c:df:a9:ec:3c:b9:a1:14:db:a7:3a:a5:b7:ab: 8f:df:e6:80:75:53:17:7a:de:e9:5e:44:4f:ea:c8:33:f8:de: 4b:be:07:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwODA4MTcyMDUxWhcNMjUwODE1MTcyMDUxWjAYMRYwFAYD VQQDEw02ODk2MzFmMy1jMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDANuEJ/9YoOK/SCRsn6N1gEkkd0YMtWff9NdWpXQmRG8HE5I6+llNnov45+ IxAuI6Ejio2Cyy96RY84tOG852cO1JGwXBxL0ZB7gm/uTRkjHe2oIWqqVhLVb8qN OPW0wY7ZQX1aRRBCgRdnLLDcX9uN3N4nNEUGU94E0Vkr0VVzWRso7oJ930l2+FAB ScaX+fP4TROWPzsIHeYrcNkMb+RgAs0yTrKn0KxIq1745QC9H6DIv977owTSDVoN hH6Ol+GYQvA6L63KuQwITGHmABL0c4/1Mmx9UAW9Zxt0HQVAHSrKFcbyI2wZB3yp JB/hAMwuXgVim+wlMqkSHEtOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcfEj5w SjPvKUQ5A5Doi8BPML5dMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj2p2eRUWunNl0yxzBR3i5Bsu01F8glz3H8ZIsF1VZD/mjnA65odDh yIfRXZH88fyMHlT2aYXXxTjQYKwylI8B0fVtftSkDGLECuXt/gmQjLXAGSa8tLfx bEHA2Bgf7Bi4PBk3tHu08CDpTyxXkdkbCfIByHbEojRx+2vn8mkTQqWVDRgZH9Ur NqclBGhnQRvEo1wyLWNbR4fgvsTDoMYXKQdKKHawVHY7wptHgfq7GZhVUbUQHPWs AtyHkZDkLEM0UlbaB9l9SbSMoxKrfupuf8JPNJthcFc4v8uBLN+p7Dy5oRTbpzql t6uP3+aAdVMXet7pXkRP6sgz+N5LvgdQ -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:12 2025 by rpki-client