$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: rQhPg3fMKswEyEMg9eA9ACNH2DdSy3yS7UcaA9Lqivo= Subject key identifier: 11:62:49:12:C1:CF:1D:FB:3B:32:BC:46:AC:BB:A5:C4:AE:C3:BC:97 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01D5 Signing time: Thu 03 Jul 2025 02:54:36 +0000 Manifest this update: Thu 03 Jul 2025 02:54:35 +0000 Manifest next update: Thu 10 Jul 2025 02:54:35 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: RT3M8+EmsT/Egil/j9cIkzKalIVN9nGIWTUy0BXMSSk=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Jul 3 02:54:35 2025 GMT Not After : Jul 10 02:54:35 2025 GMT Subject: CN=6865f0ec-d78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:3b:ec:13:09:07:0c:d5:04:79:52:20:5a: f9:72:f2:7b:d3:c8:f5:0d:27:67:96:36:13:81:37: db:aa:3e:6b:fb:75:d4:31:54:a5:f8:99:78:b7:fd: 49:c1:c3:6d:06:96:cd:8f:e2:21:c2:1a:a0:1a:e3: 32:01:1b:03:a0:78:bc:d3:71:77:27:e4:2a:ae:a5: 95:ac:d9:4f:3e:e1:05:c4:0b:5a:4e:8c:07:01:38: 22:80:e8:d9:b7:21:4e:07:ae:93:a7:19:a8:90:2c: 1f:ac:c1:60:ba:de:50:fe:75:68:d8:45:d8:16:a6: d3:df:1f:77:ab:05:64:9b:40:0f:7c:b1:7d:8c:36: db:2a:2f:d2:90:40:d4:76:ff:ea:0d:fa:07:d6:12: e2:30:5a:90:71:56:8b:8e:70:c0:c1:32:c7:9f:26: 47:be:e0:20:11:09:c5:90:e1:27:75:15:51:80:58: ee:92:c0:b0:fd:c5:24:f2:28:68:5d:13:60:cf:64: 44:17:c5:76:50:b2:8c:ea:8f:cc:42:7c:b0:ee:df: 55:2b:04:f2:f8:d4:d8:71:ab:35:94:a5:12:fb:6c: 24:7b:95:63:66:bb:95:5e:0e:42:19:73:77:f1:e7: e1:17:f2:58:c3:4c:84:8d:2b:71:3b:72:55:64:3e: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:62:49:12:C1:CF:1D:FB:3B:32:BC:46:AC:BB:A5:C4:AE:C3:BC:97 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:9e:2b:5f:a9:50:53:3d:8e:1e:af:15:b5:da:37:b0:8e:fb: 39:a1:7b:ec:23:75:e2:86:75:00:04:31:42:8e:97:aa:94:19: 8e:87:1c:e7:0d:fb:14:c2:ba:70:ff:a3:65:d2:d0:56:33:22: e6:83:6a:cc:7d:49:30:d8:06:16:47:e4:3a:0c:51:c3:2f:b5: a8:fc:b9:4f:8c:ea:4d:81:28:44:60:a6:5c:24:e3:aa:d1:8e: 6a:8b:98:8b:e5:a1:8b:46:13:b6:4e:12:35:eb:e3:47:ec:52: f9:17:63:5f:29:17:8d:9f:96:38:70:a6:df:e2:3f:63:ce:48: 2d:ef:20:19:e3:e7:d5:98:2b:33:cc:02:75:b6:13:d1:a8:1a: 98:32:e9:15:86:50:72:12:8b:1c:8b:c3:bf:ba:94:b7:92:5f: cc:4c:9d:42:7f:ba:b0:64:39:89:4a:63:92:b6:fa:18:d8:9e: b3:e4:0e:8c:e3:49:05:4c:ca:ca:1b:0e:f4:5f:b7:69:b7:f7: 1a:c8:e8:52:90:a4:72:80:72:be:a0:ea:7c:f2:d0:c6:a1:8e: 4d:8c:42:81:ca:69:79:fc:17:71:b9:6f:4a:64:9f:6c:94:6e: b0:ae:4f:15:c9:31:6a:87:26:22:19:58:f3:31:6b:be:95:70: c9:f6:a8:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwNzAzMDI1NDM1WhcNMjUwNzEwMDI1NDM1WjAYMRYwFAYD VQQDEw02ODY1ZjBlYy1kNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWc77BMJBwzVBHlSIFr5cvJ708j1DSdnljYTgTfbqj5r+3XUMVSl+Jl4t/1J wcNtBpbNj+IhwhqgGuMyARsDoHi803F3J+QqrqWVrNlPPuEFxAtaTowHATgigOjZ tyFOB66TpxmokCwfrMFgut5Q/nVo2EXYFqbT3x93qwVkm0APfLF9jDbbKi/SkEDU dv/qDfoH1hLiMFqQcVaLjnDAwTLHnyZHvuAgEQnFkOEndRVRgFjuksCw/cUk8iho XRNgz2REF8V2ULKM6o/MQnyw7t9VKwTy+NTYcas1lKUS+2wke5VjZruVXg5CGXN3 8efhF/JYw0yEjStxO3JVZD5cFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFiSRLB zx37OzK8Rqy7pcSuw7yXMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUnitfqVBTPY4erxW12jewjvs5oXvsI3XihnUABDFCjpeqlBmOhxzn DfsUwrpw/6Nl0tBWMyLmg2rMfUkw2AYWR+Q6DFHDL7Wo/LlPjOpNgShEYKZcJOOq 0Y5qi5iL5aGLRhO2ThI16+NH7FL5F2NfKReNn5Y4cKbf4j9jzkgt7yAZ4+fVmCsz zAJ1thPRqBqYMukVhlByEosci8O/upS3kl/MTJ1Cf7qwZDmJSmOStvoY2J6z5A6M 40kFTMrKGw70X7dpt/cayOhSkKRygHK+oOp88tDGoY5NjEKByml5/BdxuW9KZJ9s lG6wrk8VyTFqhyYiGVjzMWu+lXDJ9qjU -----END CERTIFICATE-----Generated at Fri Jul 4 07:39:05 2025 by rpki-client