$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: 7UkiN5DR1WDTVzf+O1U912mvpElwNQO6k3MJO5tiHIs= Subject key identifier: 81:7B:24:1D:58:FF:29:65:CB:B2:D5:FD:74:EC:8D:87:4E:D4:52:CF Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 0871 Signing time: Mon 30 Jun 2025 20:51:16 +0000 Manifest this update: Mon 30 Jun 2025 20:51:16 +0000 Manifest next update: Mon 07 Jul 2025 20:51:16 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: JDBzzBghZZ0PiIaFO2t1a1KXoZoXqGUqc7CDSSKmRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Jun 30 20:51:16 2025 GMT Not After : Jul 7 20:51:16 2025 GMT Subject: CN=6862f8c4-a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:48:5b:c4:2c:d8:90:41:0d:af:9c:8b:40: 35:43:fd:92:f2:f5:7d:24:7b:38:47:ec:f3:0c:38: e0:11:b9:35:cf:e6:1f:8d:2a:08:66:d7:d4:15:fd: 80:3e:cc:1b:c4:1a:fb:88:03:aa:e7:a2:a2:c9:bb: ee:b2:15:0a:2b:a0:7d:21:1a:53:6f:d5:0e:ac:78: 76:a9:3c:28:0d:07:9f:dd:e2:d7:c5:1e:1f:11:67: 52:20:58:37:5a:eb:82:51:8d:1f:da:aa:92:29:89: 06:5f:b7:b9:63:1d:15:b6:ef:bf:36:6f:ce:e6:50: 0a:ab:8c:8f:02:23:0d:81:ed:c7:6b:00:ee:43:c9: 7c:66:3e:bc:dc:b2:a4:a6:66:af:26:30:c9:c7:aa: 01:60:17:3b:b5:c7:f8:d3:16:5b:0c:62:b4:2a:49: 34:0c:77:c3:1e:13:cd:73:0b:36:f2:6f:9f:f5:81: 6f:fe:ab:0b:6f:4f:90:84:49:e6:e4:c3:3e:6c:e6: fc:e3:01:2c:eb:d9:54:3b:fe:16:56:1a:88:be:9a: 2d:90:88:5a:db:21:ae:66:e6:e5:db:45:a8:32:c8: 44:85:c8:c0:21:11:c1:97:74:0b:c4:fe:ee:b1:db: 38:6e:dd:eb:e2:89:d1:6b:32:bc:20:d4:0e:6a:4f: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:24:1D:58:FF:29:65:CB:B2:D5:FD:74:EC:8D:87:4E:D4:52:CF X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:86:de:92:21:63:62:7f:15:19:b1:a1:04:38:0b:27:57:d9: c3:cb:5e:24:ca:aa:50:84:ea:e5:93:80:c7:3c:c2:3b:bd:b8: 19:b0:8d:02:ef:9f:e2:09:ad:5f:af:73:b9:c9:31:ec:5e:72: 4b:1d:d9:62:d3:ec:23:e1:31:ba:f0:c9:94:1d:cb:c7:76:15: a5:dc:05:4d:08:b4:14:69:c9:c1:ef:41:2d:a6:b4:48:bc:ce: c2:ba:b0:c3:18:9d:52:d5:54:ac:1f:72:c3:e3:3e:3d:d7:58: 17:dc:f4:97:73:fb:e5:c7:b5:6f:07:6b:df:e6:48:89:7b:55: 04:85:77:16:bb:f4:a3:64:fb:57:86:f2:9c:2a:d8:67:f5:97: e8:9b:9a:ac:98:50:62:ef:7d:41:21:83:f5:d7:10:a8:5e:1d: b5:48:06:b6:91:41:06:49:ba:44:83:c4:31:33:7c:05:ee:6c: a3:b3:9f:58:66:94:53:c6:94:0e:60:d5:7f:9f:fa:14:df:f2: f0:f4:ca:90:c9:13:46:93:0d:ad:d4:86:98:b2:d8:37:dd:d4: 69:ad:b7:f3:2c:f4:5d:8b:b6:ba:a4:1e:f6:b0:dd:83:2c:5e: 91:c1:fd:0c:45:55:83:4f:ff:1c:8f:52:21:c9:a6:e9:f3:8a: c2:98:37:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUwNjMwMjA1MTE2WhcNMjUwNzA3MjA1MTE2WjAYMRYwFAYD VQQDEw02ODYyZjhjNC1hMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3JIW8Qs2JBBDa+ci0A1Q/2S8vV9JHs4R+zzDDjgEbk1z+YfjSoIZtfUFf2A PswbxBr7iAOq56KiybvushUKK6B9IRpTb9UOrHh2qTwoDQef3eLXxR4fEWdSIFg3 WuuCUY0f2qqSKYkGX7e5Yx0Vtu+/Nm/O5lAKq4yPAiMNge3HawDuQ8l8Zj683LKk pmavJjDJx6oBYBc7tcf40xZbDGK0Kkk0DHfDHhPNcws28m+f9YFv/qsLb0+QhEnm 5MM+bOb84wEs69lUO/4WVhqIvpotkIha2yGuZubl20WoMshEhcjAIRHBl3QLxP7u sds4bt3r4onRazK8INQOak+8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF7JB1Y /ylly7LV/XTsjYdO1FLPMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ht6SIWNifxUZsaEEOAsnV9nDy14kyqpQhOrlk4DHPMI7vbgZsI0C 75/iCa1fr3O5yTHsXnJLHdli0+wj4TG68MmUHcvHdhWl3AVNCLQUacnB70EtprRI vM7CurDDGJ1S1VSsH3LD4z4911gX3PSXc/vlx7VvB2vf5kiJe1UEhXcWu/SjZPtX hvKcKthn9Zfom5qsmFBi731BIYP11xCoXh21SAa2kUEGSbpEg8QxM3wF7myjs59Y ZpRTxpQOYNV/n/oU3/Lw9MqQyRNGkw2t1IaYstg33dRprbfzLPRdi7a6pB72sN2D LF6Rwf0MRVWDT/8cj1Ihyabp84rCmDcV -----END CERTIFICATE-----Generated at Wed Jul 2 06:13:42 2025 by rpki-client