$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: LNa8N/ia/5t/e9gtetV2coUmufQDZDyTJVhUUEFQImI= Subject key identifier: CB:67:01:CC:50:FD:DA:AA:DD:D5:D3:71:E6:C2:E6:6C:83:F8:51:2D Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 129A Signing time: Wed 02 Jul 2025 20:16:24 +0000 Manifest this update: Wed 02 Jul 2025 20:16:24 +0000 Manifest next update: Wed 09 Jul 2025 20:16:24 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: 7WgleefQS63VeQ0ZwazL6gqXcLJVWs/lxdoi298J7S8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Jul 2 20:16:24 2025 GMT Not After : Jul 9 20:16:24 2025 GMT Subject: CN=68659398-9bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:0c:01:36:fe:0e:9c:8b:2b:fb:34:fb:4b: 25:be:d7:94:35:0f:a1:96:99:80:7f:4b:da:16:01: 2a:be:0f:db:b8:d1:0d:51:1d:95:4a:f6:fe:f5:d0: ee:2f:2c:6d:8b:20:bc:e9:94:ca:a7:86:03:b5:c8: 79:56:2f:c1:14:cc:4f:0e:fb:1a:68:57:c5:24:39: bd:86:35:56:ad:ab:c2:e7:38:ea:e5:8d:be:6b:c9: d3:4a:79:e8:75:ee:1a:f4:8d:28:1d:74:58:44:c2: 0d:54:6d:86:4b:a6:5f:ec:30:e0:0d:46:27:f4:b9: 71:50:c1:06:99:c0:33:5f:ab:3f:6d:76:4d:3e:fd: 41:d2:b5:58:3e:4f:d3:75:0b:e9:a0:13:c4:b8:97: 24:01:8d:34:1b:37:18:d2:66:55:58:a9:77:f0:e2: ee:96:ae:43:e2:12:d8:c9:26:dc:0e:32:19:a9:5a: b9:62:96:7c:e0:bb:f5:75:d9:a4:05:23:ce:7a:6a: 5b:ab:a4:49:01:a5:d1:28:eb:bb:2b:2c:54:ac:9b: 8f:82:1d:66:85:44:ab:96:90:fa:b6:30:da:15:30: d7:62:da:e7:bb:8a:d4:23:61:62:b4:8d:0d:d6:e2: 35:28:4f:cc:08:2b:e2:ba:33:20:38:a7:56:e9:3a: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:01:CC:50:FD:DA:AA:DD:D5:D3:71:E6:C2:E6:6C:83:F8:51:2D X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:bc:11:2d:af:9d:44:4f:ba:10:37:78:01:dd:02:26:8f:83: a1:76:44:63:0f:95:45:7d:63:87:d5:ef:fd:27:8c:6d:bf:8c: ee:80:89:07:84:c0:5f:ed:aa:75:88:be:c7:da:3c:42:43:c6: 30:c1:5e:28:5a:2a:39:48:1f:d3:75:45:a9:fa:b9:95:42:36: 43:a6:be:c5:7a:2b:2c:20:60:6c:88:a0:fa:23:e2:e3:24:a8: 0a:d6:f1:86:36:64:6c:75:7b:cd:84:34:ec:e8:0f:3b:dc:81: d6:4a:bf:aa:d3:65:2c:90:d4:da:5f:35:6f:43:36:65:68:fc: 44:62:cb:7b:9f:05:fd:9a:28:9f:b8:c4:ec:e5:0e:42:e9:97: db:c8:ec:88:14:3e:85:4e:7f:25:e9:a1:69:01:7a:90:5a:bf: 03:aa:a7:9b:7a:da:58:b6:fb:a7:2f:c8:4f:2a:9a:ac:1b:82: 80:f5:72:be:b1:ae:82:a1:8d:8f:c0:18:b7:f7:7b:41:49:93: 06:21:40:3f:43:42:4b:3f:1a:2c:7c:2c:90:09:24:e3:bc:e2: df:bc:c2:3a:55:71:9e:78:0b:4b:c7:e2:d4:4d:ab:79:86:67: cf:9b:49:38:dd:f1:f7:9a:e4:76:6e:0d:38:6b:96:be:66:9d: d7:4a:f9:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNzAyMjAxNjI0WhcNMjUwNzA5MjAxNjI0WjAYMRYwFAYD VQQDEw02ODY1OTM5OC05YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XQMATb+DpyLK/s0+0slvteUNQ+hlpmAf0vaFgEqvg/buNENUR2VSvb+9dDu LyxtiyC86ZTKp4YDtch5Vi/BFMxPDvsaaFfFJDm9hjVWravC5zjq5Y2+a8nTSnno de4a9I0oHXRYRMINVG2GS6Zf7DDgDUYn9LlxUMEGmcAzX6s/bXZNPv1B0rVYPk/T dQvpoBPEuJckAY00GzcY0mZVWKl38OLulq5D4hLYySbcDjIZqVq5YpZ84Lv1ddmk BSPOempbq6RJAaXRKOu7KyxUrJuPgh1mhUSrlpD6tjDaFTDXYtrnu4rUI2FitI0N 1uI1KE/MCCviujMgOKdW6To4EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtnAcxQ /dqq3dXTcebC5myD+FEtMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2vBEtr51ET7oQN3gB3QImj4OhdkRjD5VFfWOH1e/9J4xtv4zugIkH hMBf7ap1iL7H2jxCQ8YwwV4oWio5SB/TdUWp+rmVQjZDpr7FeissIGBsiKD6I+Lj JKgK1vGGNmRsdXvNhDTs6A873IHWSr+q02UskNTaXzVvQzZlaPxEYst7nwX9miif uMTs5Q5C6ZfbyOyIFD6FTn8l6aFpAXqQWr8DqqebetpYtvunL8hPKpqsG4KA9XK+ sa6CoY2PwBi393tBSZMGIUA/Q0JLPxosfCyQCSTjvOLfvMI6VXGeeAtLx+LUTat5 hmfPm0k43fH3muR2bg04a5a+Zp3XSvld -----END CERTIFICATE-----Generated at Thu Jul 3 23:28:50 2025 by rpki-client