$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: lxxNzAmXZoVPM9M87ZRsgEBkot75NeMc+s6d0/K7nQw= Subject key identifier: FE:6F:52:6D:1A:1F:0A:FE:8D:B2:2C:FB:1B:C9:3F:54:1D:05:B0:A5 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: FE Signing time: Tue 01 Jul 2025 05:38:28 +0000 Manifest this update: Tue 01 Jul 2025 05:38:27 +0000 Manifest next update: Tue 08 Jul 2025 05:38:27 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: 2m3EBH78OtRRJvKOmcgSdnENqKHPa5KIRdpRwrHEG+o=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Jul 1 05:38:27 2025 GMT Not After : Jul 8 05:38:27 2025 GMT Subject: CN=68637454-ab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:2e:c6:18:61:aa:8a:22:b0:5c:e8:19:f4: b8:61:58:fe:09:95:ef:8f:f1:a6:c5:93:c6:3e:9e: c3:6b:14:cc:77:bc:6a:0f:3d:af:ce:57:b8:5a:4c: 51:67:de:49:3d:24:cb:79:bc:26:8f:66:40:6e:99: 80:f9:2b:24:75:2b:2e:fa:95:51:ac:a3:30:b2:ba: d0:5a:9f:c2:95:ca:a3:dd:68:9f:82:bb:0d:1d:15: 49:84:a8:63:d8:43:ac:3c:b5:85:b4:16:12:7e:f2: f6:6e:4e:2f:80:ae:fe:70:75:39:a7:f9:ff:70:fd: 2a:3b:d9:a3:a5:ed:25:28:03:51:23:c0:b4:0f:a1: 92:59:3a:e4:8e:c1:7f:dc:f7:a3:7f:8a:5f:b6:dc: 0e:2b:f7:6b:ac:c9:93:d8:1d:03:3f:b1:b2:c8:ff: d4:f6:a3:e4:06:4a:15:bf:44:a8:0e:54:91:f4:66: c9:bc:bb:37:4c:17:e7:12:f5:58:80:ea:05:b3:c0: 12:eb:55:8f:3e:cc:2d:09:47:ec:11:db:33:c4:ef: 6b:67:40:a2:2a:53:1e:c9:86:e6:75:0a:64:9e:1a: 5e:7d:03:7f:11:c8:a0:bc:b6:f7:92:1d:18:70:dd: 62:d6:a5:86:27:0f:e0:ff:90:3a:d2:9c:c1:f9:c9: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6F:52:6D:1A:1F:0A:FE:8D:B2:2C:FB:1B:C9:3F:54:1D:05:B0:A5 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b4:4a:cc:8e:70:71:0a:4c:d0:98:85:2a:d6:0d:0f:e7:5a: dd:3e:fd:ea:f7:60:a2:9c:f8:fd:fa:77:e9:cc:62:1c:ad:bb: be:e9:2a:be:4d:33:04:03:b1:a6:89:75:e8:53:c2:39:57:73: 23:02:e4:ec:93:b6:9f:93:8d:9d:d6:ae:d4:e0:36:0d:c1:71: e5:d4:b8:4c:04:b6:8e:3d:90:84:dc:d6:df:6e:a6:06:72:5a: 55:8f:5d:ef:bd:d8:c9:ff:c4:99:3a:84:b3:6e:a5:5f:29:a4: e5:68:51:c1:08:a8:d4:9a:50:fb:90:be:d7:40:91:ea:97:94: 92:8f:f3:49:65:cd:64:a9:09:ce:87:42:79:38:e0:af:48:da: d3:3b:46:bc:a5:36:53:07:e2:7d:23:3f:31:9f:bc:3b:13:38: 0f:77:75:56:81:b6:00:95:01:ff:16:9c:e1:5f:aa:b4:cd:04: 69:7a:a5:a9:d3:e9:1a:a3:10:0a:74:fc:4c:ca:db:8d:9c:8c: 01:e2:e0:a3:36:fa:40:d6:82:0f:35:3d:9b:56:9b:a9:ea:d3: 39:cc:88:af:5b:d3:e7:38:da:c2:6a:57:15:db:4a:f1:c4:90: c0:52:a2:30:c4:81:98:17:1d:3d:2e:1b:84:40:5d:6d:60:ce: a3:e1:36:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNzAxMDUzODI3WhcNMjUwNzA4MDUzODI3WjAYMRYwFAYD VQQDEw02ODYzNzQ1NC1hYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufkuxhhhqooisFzoGfS4YVj+CZXvj/GmxZPGPp7DaxTMd7xqDz2vzle4WkxR Z95JPSTLebwmj2ZAbpmA+SskdSsu+pVRrKMwsrrQWp/Clcqj3WifgrsNHRVJhKhj 2EOsPLWFtBYSfvL2bk4vgK7+cHU5p/n/cP0qO9mjpe0lKANRI8C0D6GSWTrkjsF/ 3Pejf4pfttwOK/drrMmT2B0DP7GyyP/U9qPkBkoVv0SoDlSR9GbJvLs3TBfnEvVY gOoFs8AS61WPPswtCUfsEdszxO9rZ0CiKlMeyYbmdQpknhpefQN/EcigvLb3kh0Y cN1i1qWGJw/g/5A60pzB+cm+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5vUm0a Hwr+jbIs+xvJP1QdBbClMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArtErMjnBxCkzQmIUq1g0P51rdPv3q92CinPj9+nfpzGIcrbu+6Sq+ TTMEA7GmiXXoU8I5V3MjAuTsk7afk42d1q7U4DYNwXHl1LhMBLaOPZCE3NbfbqYG clpVj13vvdjJ/8SZOoSzbqVfKaTlaFHBCKjUmlD7kL7XQJHql5SSj/NJZc1kqQnO h0J5OOCvSNrTO0a8pTZTB+J9Iz8xn7w7EzgPd3VWgbYAlQH/FpzhX6q0zQRpeqWp 0+kaoxAKdPxMytuNnIwB4uCjNvpA1oIPNT2bVpup6tM5zIivW9PnONrCalcV20rx xJDAUqIwxIGYFx09LhuEQF1tYM6j4Taj -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:06 2025 by rpki-client