$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft File: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft (raw, json) Hash identifier: FWNeqmd4LOAGtINsR0y5h4/FrIsDgV+Gzn589Ex8TRk= Subject key identifier: F3:B0:2C:CC:DB:10:89:B2:C6:8B:47:30:6A:51:C8:C4:46:1E:42:D1 Authority key identifier: 0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE Certificate issuer: /CN=A91FB179/serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft Manifest number: 06CB Signing time: Wed 06 Aug 2025 22:26:23 +0000 Manifest this update: Wed 06 Aug 2025 22:26:22 +0000 Manifest next update: Wed 13 Aug 2025 22:26:22 +0000 Files and hashes: 1: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl (hash: Kdy9hoi92/FpQQYTG4cP2PbiVswZ9eJ2RzGGZ8iAGes=) 2: 6C4046C665EE11EB9ADB5F40C4F9AE02.roa (hash: 2Mo86XnCI5KeTWF6zAmVrthl3kfcd93BXOE5Y90BE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB179, serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Validity Not Before: Aug 6 22:26:22 2025 GMT Not After : Aug 13 22:26:22 2025 GMT Subject: CN=6893d68f-893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:3c:84:d9:44:a5:8f:88:81:4d:cc:38:47: 49:fb:a6:4c:c6:57:ad:98:5b:1e:ea:03:a0:a5:60: 4d:1a:17:76:f4:4f:fe:83:ed:67:1f:10:b4:3b:1f: a9:40:9b:58:fa:5d:1d:80:7d:9d:ff:e3:07:57:81: 68:16:01:df:19:d2:58:74:3a:c9:2b:9a:50:b7:67: 2a:0c:e8:d5:fd:e8:d6:9a:0c:56:9d:c8:cc:df:a1: dc:26:63:b2:20:a8:8a:e9:2e:38:60:4d:b2:39:fc: 70:35:ba:27:38:bb:54:34:0f:a3:86:e9:fb:0a:00: a4:aa:5d:fe:1c:f5:a2:86:a4:48:dc:52:d8:19:9f: cd:b3:9d:89:b0:f4:5d:09:6f:84:db:2f:a4:f0:49: 7f:03:35:89:bc:5e:eb:e3:1a:2e:63:3a:f1:9a:d4: 92:f5:c4:8c:fe:06:05:e5:31:9b:34:d4:b3:d7:a9: 84:3c:85:85:30:6e:5b:11:f2:f3:1f:7b:27:35:55: fb:06:0a:38:e7:01:ee:3e:50:c3:62:f4:22:2b:10: 8f:cf:c2:6a:ac:03:e2:9c:64:65:1a:58:fe:07:7e: e3:8e:e4:9d:4a:d2:40:78:a1:5b:84:a0:cc:cd:78: a0:05:8e:2f:47:85:c6:86:35:9f:a3:dc:4d:f2:96: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:2C:CC:DB:10:89:B2:C6:8B:47:30:6A:51:C8:C4:46:1E:42:D1 X509v3 Authority Key Identifier: keyid:0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e8:3a:52:0d:94:27:fe:0e:c6:00:a3:cb:7e:c6:f9:af:66: 57:f2:d0:0a:d7:57:af:cd:a9:7f:b9:7c:32:a6:dc:ef:27:f4: 06:17:f0:12:04:f2:8c:09:fd:d0:e8:99:b3:b9:9d:75:66:c0: ee:1a:f8:81:0f:52:6e:22:71:75:10:de:e4:a6:27:8c:f9:2a: 4e:88:42:d3:ee:18:3a:64:ad:20:9b:df:17:db:41:11:d2:0f: d2:e7:78:60:a7:71:62:c8:a4:c2:82:71:53:62:1b:f0:ce:62: b2:d4:27:46:e8:7c:b0:03:d6:c3:7a:4e:60:09:02:bb:35:98: d9:94:b6:ad:d2:06:62:40:9a:57:6c:fa:dc:e9:66:45:a0:b9: be:d0:72:52:05:8b:2d:22:00:39:56:2c:5c:e7:0f:25:09:7f: ee:4b:33:09:03:61:07:e9:45:3e:73:a4:c8:2d:9c:db:7f:72: e9:ef:e6:bb:d2:9d:fe:0a:30:0e:6d:4b:3d:8a:b0:bf:ea:19: 19:33:f4:8b:23:1c:0a:97:19:5b:dd:bb:e7:94:0b:90:10:f6: c9:70:b3:07:50:2b:ab:0a:b7:e1:f4:67:e2:81:c9:e1:2f:67: 9d:e6:4a:75:33:c3:4d:17:29:ec:03:47:2e:7a:71:e6:69:2c: fe:e7:82:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxNzkxMTAvBgNVBAUTKDBFM0QxRTIzQTc2NEU2MjIzQjc3N0MxNzFFNEZERTEy M0M2NTdFRkUwHhcNMjUwODA2MjIyNjIyWhcNMjUwODEzMjIyNjIyWjAYMRYwFAYD VQQDEw02ODkzZDY4Zi04OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZM8hNlEpY+IgU3MOEdJ+6ZMxletmFse6gOgpWBNGhd29E/+g+1nHxC0Ox+p QJtY+l0dgH2d/+MHV4FoFgHfGdJYdDrJK5pQt2cqDOjV/ejWmgxWncjM36HcJmOy IKiK6S44YE2yOfxwNbonOLtUNA+jhun7CgCkql3+HPWihqRI3FLYGZ/Ns52JsPRd CW+E2y+k8El/AzWJvF7r4xouYzrxmtSS9cSM/gYF5TGbNNSz16mEPIWFMG5bEfLz H3snNVX7Bgo45wHuPlDDYvQiKxCPz8JqrAPinGRlGlj+B37jjuSdStJAeKFbhKDM zXigBY4vR4XGhjWfo9xN8pZ9zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOwLMzb EImyxotHMGpRyMRGHkLRMB8GA1UdIwQYMBaAFA49HiOnZOYiO3d8Fx5P3hI8ZX7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjE3OS8yQ0NDQUI5ODY1 RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVpSTdkM3dYSGtfZUVqeGxm djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqMGVJNmRrNWlJN2Qzd1hIa19lRWp4bGZ2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjE3OS8yQ0NDQUI5ODY1RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVp STdkM3dYSGtfZUVqeGxmdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk6DpSDZQn/g7GAKPLfsb5r2ZX8tAK11evzal/uXwyptzvJ/QGF/AS BPKMCf3Q6JmzuZ11ZsDuGviBD1JuInF1EN7kpieM+SpOiELT7hg6ZK0gm98X20ER 0g/S53hgp3FiyKTCgnFTYhvwzmKy1CdG6HywA9bDek5gCQK7NZjZlLat0gZiQJpX bPrc6WZFoLm+0HJSBYstIgA5Vixc5w8lCX/uSzMJA2EH6UU+c6TILZzbf3Lp7+a7 0p3+CjAObUs9irC/6hkZM/SLIxwKlxlb3bvnlAuQEPbJcLMHUCurCrfh9Gfigcnh L2ed5kp1M8NNFynsA0cuenHmaSz+54Jf -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:44 2025 by rpki-client