$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: Rgu3mMSI5tmhvZCCGO6mn/CCSmK5SaMU1UXtvT4lkQo= Subject key identifier: 16:97:47:68:27:79:6A:ED:58:C2:38:6E:E4:58:70:34:E2:59:44:AD Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 01B2 Signing time: Thu 03 Jul 2025 03:11:57 +0000 Manifest this update: Thu 03 Jul 2025 03:11:57 +0000 Manifest next update: Thu 10 Jul 2025 03:11:57 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: Xzv4X4j2g/GMvdrXEQJ5fQcb7usbLiZE496BMEb4ztk=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: ewiUnrO7XAgjqsA1wG//P3KoAbNdOVY4KG59Y9E54Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Jul 3 03:11:57 2025 GMT Not After : Jul 10 03:11:57 2025 GMT Subject: CN=6865f4fd-5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:4f:9a:4e:8d:0e:f9:61:ad:84:67:6f:6a: 8e:77:90:2a:e5:4a:cf:bc:8e:05:17:ec:a8:7d:d2: 4f:f4:5c:f4:20:51:ce:33:ff:dd:8c:66:8e:f8:7d: 42:28:03:e4:f9:b9:f1:03:02:d9:57:34:9f:c2:19: 16:fe:5e:38:25:e6:8b:c1:9d:5f:c3:5d:fe:5f:8a: cd:75:f6:19:e6:36:4f:92:9f:e5:a8:fe:10:f5:f2: 26:06:18:f3:21:cc:21:9b:88:e1:c4:00:38:af:60: 02:3c:a6:2f:aa:9d:31:2f:f6:ac:46:e3:31:a3:15: 22:30:fa:ce:43:f1:33:7c:2c:03:7f:20:8f:6d:fe: a6:19:ad:e7:2f:10:6c:1a:fa:77:e0:35:c6:33:14: 58:ed:cc:6f:a6:d1:3a:81:d8:98:53:7e:7a:e6:4a: c4:77:91:27:0e:fc:d9:9d:d6:60:12:25:a4:54:a9: 48:4a:02:a5:27:49:b4:0b:05:39:ba:93:f0:3a:3a: 80:58:d5:64:a2:8d:61:96:88:a2:58:a8:72:4e:30: 4e:a0:df:b7:86:7f:be:16:d6:db:4d:ca:fc:68:2f: 4e:e8:f1:f3:8d:6d:d9:aa:37:53:e7:5d:c5:d2:7a: dc:d0:8e:33:99:0e:42:d5:07:e2:20:ed:7b:77:ff: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:47:68:27:79:6A:ED:58:C2:38:6E:E4:58:70:34:E2:59:44:AD X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:66:20:b3:e5:c3:43:7f:79:20:c1:72:55:c4:2f:50:77:9d: 7f:b8:c8:c5:b6:89:1c:bd:3a:17:73:69:3e:c6:03:f8:20:0a: a3:3c:2c:04:5a:9d:df:48:d8:ff:20:b8:fe:5b:9a:ea:34:c4: 54:52:49:12:29:61:4e:95:4b:9f:54:d4:fe:5f:ab:78:8d:60: 24:e3:c4:fd:40:6b:ec:b1:39:d4:a4:55:78:36:d5:e3:02:a1: f5:97:6e:48:f7:93:38:26:66:0c:50:30:e4:4f:f7:b5:67:d9: 7b:05:aa:00:60:e8:4d:ae:7e:23:42:36:b6:42:c2:d7:a3:99: dc:60:65:99:83:50:90:da:cf:21:6b:0b:bc:d8:f7:5f:d8:73: ae:67:82:47:7a:f4:8d:e3:b2:55:84:da:e5:36:49:be:a2:fa: ef:17:9e:a6:66:d4:1b:29:f1:b9:c8:a1:de:ff:cf:06:dc:6e: 3e:f1:8d:b6:bd:2e:79:93:6c:0b:91:cf:51:15:7d:79:4e:0b: 6c:3d:d6:24:e7:0e:c0:94:7e:68:c8:c7:25:b4:28:d3:7b:68: 82:74:43:d3:b5:59:dc:3a:bc:a4:f1:ad:d8:fe:d4:cb:79:c6: 4e:0b:55:9f:14:90:99:98:62:fe:d3:10:5c:37:e6:68:d0:52: 58:10:21:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUwNzAzMDMxMTU3WhcNMjUwNzEwMDMxMTU3WjAYMRYwFAYD VQQDEw02ODY1ZjRmZC01MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T5Pmk6NDvlhrYRnb2qOd5Aq5UrPvI4FF+yofdJP9Fz0IFHOM//djGaO+H1C KAPk+bnxAwLZVzSfwhkW/l44JeaLwZ1fw13+X4rNdfYZ5jZPkp/lqP4Q9fImBhjz Icwhm4jhxAA4r2ACPKYvqp0xL/asRuMxoxUiMPrOQ/EzfCwDfyCPbf6mGa3nLxBs Gvp34DXGMxRY7cxvptE6gdiYU3565krEd5EnDvzZndZgEiWkVKlISgKlJ0m0CwU5 upPwOjqAWNVkoo1hloiiWKhyTjBOoN+3hn++FtbbTcr8aC9O6PHzjW3ZqjdT513F 0nrc0I4zmQ5C1QfiIO17d//nKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaXR2gn eWrtWMI4buRYcDTiWUStMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkZiCz5cNDf3kgwXJVxC9Qd51/uMjFtokcvToXc2k+xgP4IAqjPCwE Wp3fSNj/ILj+W5rqNMRUUkkSKWFOlUufVNT+X6t4jWAk48T9QGvssTnUpFV4NtXj AqH1l25I95M4JmYMUDDkT/e1Z9l7BaoAYOhNrn4jQja2QsLXo5ncYGWZg1CQ2s8h awu82Pdf2HOuZ4JHevSN47JVhNrlNkm+ovrvF56mZtQbKfG5yKHe/88G3G4+8Y22 vS55k2wLkc9RFX15TgtsPdYk5w7AlH5oyMcltCjTe2iCdEPTtVncOryk8a3Y/tTL ecZOC1WfFJCZmGL+0xBcN+Zo0FJYECEE -----END CERTIFICATE-----Generated at Thu Jul 3 16:46:56 2025 by rpki-client