$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: RnbUGBhF/AporT+fHXVNHCdMNdYxWuaG7N+i5dTd5CE= Subject key identifier: F7:96:02:8C:62:04:0B:A1:73:97:4D:67:47:1F:D9:86:59:77:92:66 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: E2 Signing time: Thu 03 Jul 2025 05:37:38 +0000 Manifest this update: Thu 03 Jul 2025 05:37:37 +0000 Manifest next update: Thu 10 Jul 2025 05:37:37 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: gV9dSrYD97LpBjBbLXeiwXK8GmePdaHpSzeJALXECdE=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Jul 3 05:37:37 2025 GMT Not After : Jul 10 05:37:37 2025 GMT Subject: CN=68661722-435e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8d:d1:51:2a:7d:a5:b5:f8:c8:d3:a0:25:d0: a3:22:01:66:b9:f0:6b:6e:3a:66:ec:83:71:61:fb: 87:f4:52:eb:f6:5b:cb:b2:74:0e:06:7c:94:b4:be: fe:64:24:88:45:ea:fa:be:62:0f:0e:8d:eb:ea:a9: 5d:9e:9c:96:85:42:14:b5:51:2e:64:eb:44:1e:f8: ff:94:93:ac:31:89:4c:c9:ba:24:6a:73:77:44:f6: c3:ce:1f:35:85:cf:f1:b5:3e:70:37:75:36:5d:f8: b6:e7:f0:c6:8c:55:25:90:ad:4f:a3:6b:2d:98:1a: 77:0e:28:da:e1:fc:5b:23:7a:50:e1:71:64:67:15: 2e:91:02:80:61:94:3d:1d:b0:78:17:4c:eb:83:3b: 5e:e5:06:b7:af:2b:4b:12:ed:b9:2d:1e:c7:e9:bf: 56:f5:e6:14:2f:b5:3b:09:25:00:e4:94:4c:e6:f8: 4c:b1:09:8c:6d:08:86:32:16:4d:5b:aa:5b:5f:4d: 59:32:a1:09:59:d7:d0:4d:d1:38:d1:42:55:24:c5: 56:48:70:38:ee:fd:92:db:66:d8:91:59:1d:67:8f: 9b:8d:3e:c1:da:17:79:a4:85:22:cc:6c:a1:1b:54: 76:d9:c2:5f:70:e3:ff:99:db:52:a0:7f:b5:29:3a: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:96:02:8C:62:04:0B:A1:73:97:4D:67:47:1F:D9:86:59:77:92:66 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:ba:78:86:72:17:f2:40:e4:c3:ee:eb:b8:f4:dc:69:de: 3c:6e:99:1f:ef:9d:da:98:62:a2:6a:fd:e6:78:b6:a0:97:44: 26:94:4b:b7:c2:cc:8a:cc:76:7a:20:6d:4c:b3:04:7f:f4:17: d6:2f:1f:4a:0b:be:20:eb:2e:52:f3:48:66:20:5f:af:e7:23: d2:2e:82:6f:99:fe:50:4d:c9:ae:ee:f2:a4:00:06:9e:b2:e4: 00:e5:49:5d:52:6f:97:10:1c:35:b8:ce:9f:2d:e8:ed:4a:7f: 69:8c:1e:d4:9a:10:33:cd:59:dc:c6:57:a2:78:2d:79:4f:51: 10:20:ae:ca:07:bf:c9:82:24:b0:0e:4f:cf:17:fb:f5:aa:65: 59:81:26:07:d1:e9:4a:f5:09:96:b9:eb:2d:96:a7:e3:f4:cd: 02:c4:e9:a5:53:ae:46:8c:9a:da:b5:98:81:c1:9c:c2:eb:3c: ed:8c:ab:13:2f:cf:0e:3e:f0:d0:35:90:85:20:fc:c4:73:91: 49:ee:c1:d8:ce:75:20:1b:a8:2b:13:02:34:18:97:b2:99:72: 95:20:36:ed:12:25:a6:db:ca:85:1d:c8:cf:ec:de:b4:86:59: 68:e7:89:77:e5:8e:d6:92:34:5d:9b:d1:d4:06:b4:ac:19:1f: 71:3f:74:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNzAzMDUzNzM3WhcNMjUwNzEwMDUzNzM3WjAYMRYwFAYD VQQDEw02ODY2MTcyMi00MzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Y3RUSp9pbX4yNOgJdCjIgFmufBrbjpm7INxYfuH9FLr9lvLsnQOBnyUtL7+ ZCSIRer6vmIPDo3r6qldnpyWhUIUtVEuZOtEHvj/lJOsMYlMybokanN3RPbDzh81 hc/xtT5wN3U2Xfi25/DGjFUlkK1Po2stmBp3Dija4fxbI3pQ4XFkZxUukQKAYZQ9 HbB4F0zrgzte5Qa3rytLEu25LR7H6b9W9eYUL7U7CSUA5JRM5vhMsQmMbQiGMhZN W6pbX01ZMqEJWdfQTdE40UJVJMVWSHA47v2S22bYkVkdZ4+bjT7B2hd5pIUizGyh G1R22cJfcOP/mdtSoH+1KTqq8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeWAoxi BAuhc5dNZ0cf2YZZd5JmMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt0rp4hnIX8kDkw+7ruPTcad48bpkf753amGKiav3meLagl0QmlEu3 wsyKzHZ6IG1MswR/9BfWLx9KC74g6y5S80hmIF+v5yPSLoJvmf5QTcmu7vKkAAae suQA5UldUm+XEBw1uM6fLejtSn9pjB7UmhAzzVncxleieC15T1EQIK7KB7/JgiSw Dk/PF/v1qmVZgSYH0elK9QmWuestlqfj9M0CxOmlU65GjJratZiBwZzC6zztjKsT L88OPvDQNZCFIPzEc5FJ7sHYznUgG6grEwI0GJeymXKVIDbtEiWm28qFHcjP7N60 hllo54l35Y7WkjRdm9HUBrSsGR9xP3Rr -----END CERTIFICATE-----Generated at Fri Jul 4 10:34:49 2025 by rpki-client