$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: +EJ71eFR2Mu5l3Y2fg/MUREekwh9GiWYoYDJ5XneUZ8= Subject key identifier: CE:E8:4B:75:99:FC:5A:CC:E9:3D:04:65:B2:F3:70:F0:FA:4B:1F:15 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 12D0 Signing time: Fri 22 Aug 2025 20:06:45 +0000 Manifest this update: Fri 22 Aug 2025 20:06:44 +0000 Manifest next update: Fri 29 Aug 2025 20:06:44 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: QUgXJYr/bP2FgI27Ba3di5J0MMsH89gOnBNW2XWOf6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Aug 22 20:06:44 2025 GMT Not After : Aug 29 20:06:44 2025 GMT Subject: CN=68a8cdd4-7b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:ef:aa:f6:56:b6:1d:72:5d:65:a2:c4:9f: ed:76:3d:16:bf:02:bb:da:51:51:32:cc:16:24:fa: 8a:f2:55:1f:11:23:9d:2a:d0:dc:52:bd:6a:43:d3: eb:11:ba:9a:42:1d:e7:38:36:2c:8e:71:c1:fd:2c: 2e:f8:d5:fd:20:a3:57:4a:db:8d:6d:a1:f1:2e:46: 08:98:41:cd:86:f4:79:79:05:7b:60:ff:4c:ec:e7: 46:b1:79:60:5e:d5:39:57:68:68:82:11:a1:b2:b7: 07:c8:e0:39:41:20:1c:b2:38:65:74:07:b6:31:25: ab:df:b4:bc:28:c8:48:00:72:f2:42:34:69:c1:d3: 1c:a7:c3:da:5c:e6:70:72:d2:58:96:05:d3:2b:10: b4:80:72:0d:c5:fa:c0:65:7a:4c:28:6b:1f:34:31: 6a:16:be:79:38:cf:0b:60:c5:ea:e4:b0:9e:ab:a9: 03:d3:a0:25:8d:f8:1c:f8:42:ed:b0:da:16:4d:8c: e5:c7:91:1c:4f:52:bf:f5:5e:50:a7:46:42:9b:7c: a4:56:d2:55:ec:bc:3a:4a:89:41:7a:39:69:a9:b6: e6:e8:56:46:ce:87:a6:ee:e1:5c:89:fb:c3:c3:3c: 46:b7:12:48:03:b4:39:f4:93:99:0d:82:28:b7:73: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E8:4B:75:99:FC:5A:CC:E9:3D:04:65:B2:F3:70:F0:FA:4B:1F:15 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:c9:30:17:66:87:4f:03:8f:8c:11:93:5e:e1:92:0b:f9: a3:58:c2:86:04:b1:e6:6d:f6:f0:31:97:5f:d4:3c:b2:a5:e4: 0e:d7:3c:4e:c8:74:2a:f5:19:dc:f5:a3:36:3a:73:9d:52:0d: 0f:ec:3e:03:b6:dc:8c:5e:54:78:6d:4e:20:5a:d6:f6:1e:71: c8:2b:6a:a8:8c:d6:a6:b1:0e:2c:38:d5:8c:09:29:8a:99:0b: f2:de:95:9e:44:11:cf:cd:cc:59:cd:c8:26:bd:d9:8d:65:05: 15:04:5b:9b:9c:03:79:43:d0:47:06:ed:b9:88:58:6b:05:54: 3b:17:fa:4a:f2:d6:b9:0d:ea:ec:d8:d0:45:f5:1e:0b:db:fc: 4a:02:2b:c1:da:80:27:68:3a:63:a1:bd:c6:3d:6c:ac:db:1b: ea:29:01:39:ee:14:a4:ff:7b:b0:72:d8:b7:65:05:22:54:32: 7f:ff:99:5f:0c:15:2f:15:6e:d7:8a:c9:20:ce:0c:ad:b7:e1: 63:53:14:9e:57:e2:4c:f9:7f:b7:8d:f4:e3:5b:c4:c5:26:d4: 3f:46:63:45:38:d8:91:45:aa:18:4e:19:2a:6d:53:db:d8:32: d4:9a:61:d2:67:03:73:78:36:33:d8:e4:27:ac:1a:d5:fe:90: c7:ab:7f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwODIyMjAwNjQ0WhcNMjUwODI5MjAwNjQ0WjAYMRYwFAYD VQQDEw02OGE4Y2RkNC03YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM3vqvZWth1yXWWixJ/tdj0WvwK72lFRMswWJPqK8lUfESOdKtDcUr1qQ9Pr EbqaQh3nODYsjnHB/Swu+NX9IKNXStuNbaHxLkYImEHNhvR5eQV7YP9M7OdGsXlg XtU5V2hoghGhsrcHyOA5QSAcsjhldAe2MSWr37S8KMhIAHLyQjRpwdMcp8PaXOZw ctJYlgXTKxC0gHINxfrAZXpMKGsfNDFqFr55OM8LYMXq5LCeq6kD06Aljfgc+ELt sNoWTYzlx5EcT1K/9V5Qp0ZCm3ykVtJV7Lw6SolBejlpqbbm6FZGzoem7uFcifvD wzxGtxJIA7Q59JOZDYIot3OGCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7oS3WZ /FrM6T0EZbLzcPD6Sx8VMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBENckwF2aHTwOPjBGTXuGSC/mjWMKGBLHmbfbwMZdf1DyypeQO1zxO yHQq9Rnc9aM2OnOdUg0P7D4DttyMXlR4bU4gWtb2HnHIK2qojNamsQ4sONWMCSmK mQvy3pWeRBHPzcxZzcgmvdmNZQUVBFubnAN5Q9BHBu25iFhrBVQ7F/pK8ta5Ders 2NBF9R4L2/xKAivB2oAnaDpjob3GPWys2xvqKQE57hSk/3uwcti3ZQUiVDJ//5lf DBUvFW7Xiskgzgytt+FjUxSeV+JM+X+3jfTjW8TFJtQ/RmNFONiRRaoYThkqbVPb 2DLUmmHSZwNzeDYz2OQnrBrV/pDHq38O -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:29 2025 by rpki-client