$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft File: daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json) Hash identifier: arATT5wk0N86kvGjNfX5lRXjP/0hJPC2HYX1BpegIzc= Subject key identifier: 9A:47:76:00:BC:89:8E:5D:45:FA:D6:36:3D:15:14:59:15:4D:C8:03 Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 Certificate issuer: /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft Manifest number: 065D Signing time: Wed 02 Jul 2025 15:09:54 +0000 Manifest this update: Wed 02 Jul 2025 15:09:53 +0000 Manifest next update: Wed 09 Jul 2025 15:09:53 +0000 Files and hashes: 1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: nVxuVKMtmq/VFvcRySyMbdj1Fj98cz3Cg0rEBKHHLkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Validity Not Before: Jul 2 15:09:53 2025 GMT Not After : Jul 9 15:09:53 2025 GMT Subject: CN=68654bc1-949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:d6:72:9b:e3:d3:fc:47:f5:e9:bf:ac:28: f9:91:7c:2d:c9:74:49:ca:1c:ad:bb:bb:6c:55:f2: f5:6b:d7:cd:4d:bd:6a:13:9c:be:ee:64:1d:5c:04: 07:7e:22:df:55:97:fd:69:08:71:be:a8:eb:60:69: 4a:5f:6a:89:d5:41:82:a4:f0:d4:98:37:fa:f1:c9: f1:42:94:47:58:a6:df:ce:19:b2:f4:9b:d3:83:78: 88:45:51:00:6f:8f:57:ae:91:bc:f4:06:d5:b7:f4: 69:2e:68:5f:24:11:07:4a:2a:87:52:d0:93:eb:4e: 27:ba:f9:68:cd:1b:71:72:99:fc:b7:d0:33:4f:68: ae:7a:1b:f7:d2:90:6e:1d:dc:70:8f:71:48:18:30: 63:bd:de:1e:36:46:f0:ca:ac:22:45:b1:4e:fa:6e: bc:d8:e9:f7:3f:9b:a7:97:13:da:90:a8:04:11:d1: af:7d:03:45:c4:25:f5:1f:95:f1:e9:9e:38:a5:ef: 86:9a:7a:3a:fc:9c:10:2f:fe:d5:a6:9f:c0:50:be: 49:eb:86:4d:db:3e:67:91:9d:45:73:b5:97:47:fa: 23:ac:5e:48:ca:a1:c1:d6:ba:56:7b:7e:b2:d6:9e: 7b:ef:0e:13:e0:97:78:fa:f8:39:22:2c:9f:fc:e3: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:76:00:BC:89:8E:5D:45:FA:D6:36:3D:15:14:59:15:4D:C8:03 X509v3 Authority Key Identifier: keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f8:61:59:f7:17:e9:dd:b9:3f:e1:e3:c9:8d:60:e4:98:d6: 2c:79:b8:61:ca:6d:ab:e3:96:2c:59:2d:ca:b0:0f:e7:df:4d: ac:e2:e7:b7:f3:ee:8b:bd:2b:e8:32:74:b7:da:d4:2c:5f:95: f8:f8:ca:a4:f8:d2:61:a2:54:c1:f0:75:a5:bb:31:a9:b9:9c: 25:a2:a4:78:ea:74:6d:d9:18:3d:64:bd:4d:4b:07:86:16:c0: 97:c6:5e:c6:7b:04:51:4c:56:90:82:5f:df:53:b4:87:ab:79: 6b:77:6a:ea:b4:f7:97:43:e7:3e:e2:e9:62:04:be:c3:5d:5a: 40:d4:f1:54:3a:ef:4f:3b:78:44:0e:bc:12:fe:7e:a6:1f:5d: be:ba:38:18:ca:c7:b3:0c:ab:d1:fa:54:95:c0:dc:4d:7a:70: 61:d8:66:83:ce:68:47:b4:38:56:49:10:c5:02:1c:1a:0f:f4: 85:1a:f3:bd:26:eb:c7:3e:2e:71:6b:18:3d:50:f0:31:5e:05: 40:01:1c:7e:d4:4c:2b:fe:75:bd:74:ec:6e:74:a2:87:28:ff: fa:d7:f8:b2:29:67:98:69:e1:13:5a:b3:f5:49:01:df:6c:39: cf:2f:e3:39:26:a4:74:3f:a8:76:45:84:69:4a:f7:d5:56:2f: cd:52:08:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2MjYxMTAvBgNVBAUTKDc1QTE3RUFCOTA0MUI2NERCMzc0NzFDRkI0RUJGRjU5 MUU4RjY5OTMwHhcNMjUwNzAyMTUwOTUzWhcNMjUwNzA5MTUwOTUzWjAYMRYwFAYD VQQDEw02ODY1NGJjMS05NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u7Wcpvj0/xH9em/rCj5kXwtyXRJyhytu7tsVfL1a9fNTb1qE5y+7mQdXAQH fiLfVZf9aQhxvqjrYGlKX2qJ1UGCpPDUmDf68cnxQpRHWKbfzhmy9JvTg3iIRVEA b49XrpG89AbVt/RpLmhfJBEHSiqHUtCT604nuvlozRtxcpn8t9AzT2iuehv30pBu Hdxwj3FIGDBjvd4eNkbwyqwiRbFO+m682On3P5unlxPakKgEEdGvfQNFxCX1H5Xx 6Z44pe+Gmno6/JwQL/7Vpp/AUL5J64ZN2z5nkZ1Fc7WXR/ojrF5IyqHB1rpWe36y 1p577w4T4Jd4+vg5Iiyf/OMgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpHdgC8 iY5dRfrWNj0VFFkVTcgDMB8GA1UdIwQYMBaAFHWhfquQQbZNs3Rxz7Tr/1kej2mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDYyNi82MDA4MUVBQzhE N0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRrMnpkSEhQdE92X1dSNlBh Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhRi1xNUJCdGsyemRISFB0T3ZfV1I2UGFaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDYyNi82MDA4MUVBQzhEN0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRr MnpkSEhQdE92X1dSNlBhWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5+GFZ9xfp3bk/4ePJjWDkmNYsebhhym2r45YsWS3KsA/n302s4ue3 8+6LvSvoMnS32tQsX5X4+Mqk+NJholTB8HWluzGpuZwloqR46nRt2Rg9ZL1NSweG FsCXxl7GewRRTFaQgl/fU7SHq3lrd2rqtPeXQ+c+4uliBL7DXVpA1PFUOu9PO3hE DrwS/n6mH12+ujgYysezDKvR+lSVwNxNenBh2GaDzmhHtDhWSRDFAhwaD/SFGvO9 JuvHPi5xaxg9UPAxXgVAARx+1Ewr/nW9dOxudKKHKP/61/iyKWeYaeETWrP1SQHf bDnPL+M5JqR0P6h2RYRpSvfVVi/NUgjN -----END CERTIFICATE-----Generated at Thu Jul 3 00:29:37 2025 by rpki-client