$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json) Hash identifier: 8xa5EeT4K4EtriOUwO46LGZSp6rTiSHu5wZhjdszYng= Subject key identifier: AA:54:94:D1:A6:E2:D8:C7:93:C3:55:63:5B:4B:42:23:D2:5F:95:0F Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft Manifest number: 01C1 Signing time: Thu 03 Jul 2025 03:03:22 +0000 Manifest this update: Thu 03 Jul 2025 03:03:21 +0000 Manifest next update: Thu 10 Jul 2025 03:03:21 +0000 Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: N5MsSZNq9Jkiz8q6EtiiqZMH/quDHkGrzUYxCJm6Xo4=) 2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 949cDrd9O3ejSTUuoxYP0yKZgFwRWnkdff/N9Ay5rNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Validity Not Before: Jul 3 03:03:21 2025 GMT Not After : Jul 10 03:03:21 2025 GMT Subject: CN=6865f2f9-dc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:33:93:a2:c8:59:af:9f:d6:d8:1d:05:ac: 0b:14:60:a5:82:27:9a:cc:49:99:d4:15:a5:ff:79: 8a:a3:b9:3b:11:23:aa:7e:f9:07:ec:c3:d4:29:b3: cf:2e:81:08:b9:39:6e:76:c1:be:88:1c:b0:da:99: 75:c9:e0:a2:47:fd:e8:ac:45:a2:33:dd:42:59:a7: 26:54:c0:d4:f8:81:d1:f3:91:a0:2e:29:9b:2d:31: 3f:75:05:ce:45:ea:74:c3:f2:19:9d:b4:61:3b:67: 62:c8:60:f9:ad:5b:74:db:d2:f5:b2:73:75:db:c4: 6f:6e:10:7e:7f:56:ad:fa:27:e4:f3:a1:3e:db:5b: 34:43:00:1c:f7:d0:94:f0:4e:e9:0f:82:8b:be:63: 6c:4b:18:c5:1a:ee:2a:e6:31:3b:75:7b:4e:be:82: dd:57:6f:29:d0:87:40:d6:1e:a0:cf:76:cd:f3:c6: f3:68:3b:59:42:6d:81:8e:41:5e:63:f1:2a:51:ec: a8:f4:8b:12:08:d4:e3:4c:64:ef:d1:c1:74:d3:b3: 49:3c:bf:d3:82:68:85:0c:5f:d2:51:f3:92:6f:89: 45:ac:1c:52:ea:09:f4:db:38:02:27:72:a3:70:f7: 33:09:55:ab:8c:31:73:7b:a7:47:98:63:ee:b4:07: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:54:94:D1:A6:E2:D8:C7:93:C3:55:63:5B:4B:42:23:D2:5F:95:0F X509v3 Authority Key Identifier: keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:96:1c:0f:14:d2:17:ed:9f:74:bf:bf:20:84:a5:e9:c8: b0:28:7d:8c:54:a4:59:88:c7:f6:6f:54:14:a4:33:05:4e:d7: af:3d:29:33:73:7b:e9:89:19:fd:d6:df:e1:92:fd:5d:08:a1: 99:4b:c5:9a:7d:23:22:d9:c2:75:16:41:8f:5a:30:0b:96:ac: 88:26:ec:a5:2d:c5:a1:5d:2c:bf:d0:91:6f:1b:af:12:c8:e8: 4d:e8:15:b3:a8:62:4b:60:7b:d8:e8:f9:e5:39:7d:15:4d:cc: 41:7f:90:52:60:14:7e:ec:fc:82:7a:6e:3e:23:2a:bd:91:40: 0e:e1:ff:10:b8:fc:17:41:2d:e6:9c:95:72:e5:09:58:cb:e2: 20:f7:81:f5:d3:6c:c4:75:f3:fc:0c:e2:a1:b2:b5:04:85:7d: 04:78:f8:a8:80:2c:2a:3c:36:ea:f2:91:74:4e:0a:29:57:c3: 4a:09:09:e6:69:6c:79:f8:97:e2:93:84:8b:26:7c:18:43:50: 64:3a:ef:2b:43:26:d6:a5:a2:57:45:48:b7:73:d5:b3:9e:ce: bc:fc:31:30:b1:17:22:40:41:79:32:7d:07:5b:8a:6c:7b:df: 43:02:09:d4:7d:f1:33:01:25:6e:d0:c6:c1:1f:b1:25:cd:2e: 92:2a:41:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB OTRFMDc4Q0YwHhcNMjUwNzAzMDMwMzIxWhcNMjUwNzEwMDMwMzIxWjAYMRYwFAYD VQQDEw02ODY1ZjJmOS1kYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGozk6LIWa+f1tgdBawLFGClgieazEmZ1BWl/3mKo7k7ESOqfvkH7MPUKbPP LoEIuTludsG+iByw2pl1yeCiR/3orEWiM91CWacmVMDU+IHR85GgLimbLTE/dQXO Rep0w/IZnbRhO2diyGD5rVt029L1snN128RvbhB+f1at+ifk86E+21s0QwAc99CU 8E7pD4KLvmNsSxjFGu4q5jE7dXtOvoLdV28p0IdA1h6gz3bN88bzaDtZQm2BjkFe Y/EqUeyo9IsSCNTjTGTv0cF007NJPL/TgmiFDF/SUfOSb4lFrBxS6gn02zgCJ3Kj cPczCVWrjDFze6dHmGPutAcx4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpUlNGm 4tjHk8NVY1tLQiPSX5UPMB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1 Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtv VEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPEpYcDxTSF+2fdL+/IISl6ciwKH2MVKRZiMf2b1QUpDMFTtevPSkz c3vpiRn91t/hkv1dCKGZS8WafSMi2cJ1FkGPWjALlqyIJuylLcWhXSy/0JFvG68S yOhN6BWzqGJLYHvY6PnlOX0VTcxBf5BSYBR+7PyCem4+Iyq9kUAO4f8QuPwXQS3m nJVy5QlYy+Ig94H102zEdfP8DOKhsrUEhX0EePiogCwqPDbq8pF0TgopV8NKCQnm aWx5+Jfik4SLJnwYQ1BkOu8rQybWpaJXRUi3c9Wzns68/DEwsRciQEF5Mn0HW4ps e99DAgnUffEzASVu0MbBH7ElzS6SKkEQ -----END CERTIFICATE-----Generated at Thu Jul 3 17:27:23 2025 by rpki-client