$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json) Hash identifier: bcexrjrf5b9VsVH6YwAkYxIT/Fc1MSLjVE11y0CmO3A= Subject key identifier: A9:DA:CC:8B:72:BD:89:E6:FB:97:67:63:24:2E:47:B9:72:B7:3D:A1 Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft Manifest number: 08CD Signing time: Wed 02 Jul 2025 22:02:28 +0000 Manifest this update: Wed 02 Jul 2025 22:02:28 +0000 Manifest next update: Wed 09 Jul 2025 22:02:28 +0000 Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: MFzRBbZZP3cV6NDut+XcajQgo4vql+ha/zNMUfJamuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Validity Not Before: Jul 2 22:02:28 2025 GMT Not After : Jul 9 22:02:28 2025 GMT Subject: CN=6865ac74-22bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:ea:18:11:6f:e6:79:a7:7c:63:83:00:5e: b3:a2:ce:5b:64:ed:a2:d2:ed:ef:d1:38:23:c0:15: c6:61:b5:68:18:15:e3:d9:02:3c:f3:f2:25:32:dd: 22:f9:e5:03:73:11:f9:73:f9:23:7e:11:ad:96:eb: f8:2a:f9:89:55:87:1c:48:cc:98:db:b6:fe:be:22: 9f:1d:53:14:dc:7e:41:c1:68:b8:a4:39:3d:88:b0: ee:9f:ef:be:e9:53:b0:a8:20:e0:1e:4e:8c:f1:5e: 2d:d1:ae:ac:27:61:6c:83:8c:c5:fb:74:51:db:13: 54:7e:b7:e7:f3:90:c5:9f:44:ef:66:76:5b:4d:ea: 9c:20:6e:58:34:ea:b0:16:f1:a5:11:5c:d9:0a:08: 6d:12:08:5f:cb:b7:e2:c4:cb:7a:3e:44:79:4c:fb: 41:21:70:25:71:6c:a8:6a:e7:43:b0:d3:cb:b8:cd: b1:56:1a:41:27:56:f1:c8:dd:f1:1a:9e:ed:75:9b: e1:3b:c5:0e:3c:ea:4b:05:2d:2c:a8:b9:9e:a3:ca: c8:ef:a9:bc:14:04:b4:5a:d8:59:d6:16:86:22:36: 3e:5b:20:ae:dc:b7:52:c5:a7:07:78:8b:03:6a:df: f4:53:f6:9c:a5:8e:d3:cd:30:e9:19:08:b7:26:87: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:CC:8B:72:BD:89:E6:FB:97:67:63:24:2E:47:B9:72:B7:3D:A1 X509v3 Authority Key Identifier: keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:50:4b:de:41:27:23:17:d9:59:64:37:46:cb:28:eb:3f:10: 25:1f:11:33:91:f2:b2:0d:7d:d3:08:d2:79:6f:0e:8e:f8:14: 94:18:1c:8d:7d:13:60:50:a1:fe:5e:cc:77:18:54:18:82:b8: ca:9d:f0:1d:9b:6e:55:ac:33:25:9a:f8:e5:01:c8:69:82:ff: 0e:ae:4d:c7:c7:84:aa:7f:35:ea:3b:40:fa:1b:df:7d:71:3a: 84:e5:53:cc:49:c1:ec:26:db:73:be:c7:e4:c8:ee:97:8e:e5: 10:7e:42:fa:c0:3c:17:9c:97:a6:13:9b:ba:72:3d:98:b4:db: d6:31:f3:f9:ef:ba:ab:3b:f7:17:06:93:16:01:b3:88:9b:22: 63:e6:06:01:cb:59:42:3a:10:f7:73:02:e1:3e:c1:60:5e:0c: a8:4c:c1:eb:1f:d0:60:cb:39:34:74:ac:08:5e:d5:ff:cc:fa: 16:82:3d:eb:a7:ce:2f:ab:71:40:4d:56:f9:16:1e:06:5f:e1: 3f:fa:3a:49:62:93:77:ac:1a:85:97:40:73:65:64:fb:29:21: fd:9c:5b:be:55:5c:33:c7:15:2a:c2:76:72:8a:e2:8c:a0:df: 34:f6:69:88:1a:d5:f0:68:67:f5:ae:c7:e8:38:c9:c4:ee:8e: e8:81:ba:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1 QTI1OEExNTIwHhcNMjUwNzAyMjIwMjI4WhcNMjUwNzA5MjIwMjI4WjAYMRYwFAYD VQQDEw02ODY1YWM3NC0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PzqGBFv5nmnfGODAF6zos5bZO2i0u3v0TgjwBXGYbVoGBXj2QI88/IlMt0i +eUDcxH5c/kjfhGtluv4KvmJVYccSMyY27b+viKfHVMU3H5BwWi4pDk9iLDun+++ 6VOwqCDgHk6M8V4t0a6sJ2Fsg4zF+3RR2xNUfrfn85DFn0TvZnZbTeqcIG5YNOqw FvGlEVzZCghtEghfy7fixMt6PkR5TPtBIXAlcWyoaudDsNPLuM2xVhpBJ1bxyN3x Gp7tdZvhO8UOPOpLBS0sqLmeo8rI76m8FAS0WthZ1haGIjY+WyCu3LdSxacHeIsD at/0U/acpY7TzTDpGQi3JocpEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnazIty vYnm+5dnYyQuR7lytz2hMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9UEveQScjF9lZZDdGyyjrPxAlHxEzkfKyDX3TCNJ5bw6O+BSUGByN fRNgUKH+Xsx3GFQYgrjKnfAdm25VrDMlmvjlAchpgv8Ork3Hx4SqfzXqO0D6G999 cTqE5VPMScHsJttzvsfkyO6XjuUQfkL6wDwXnJemE5u6cj2YtNvWMfP577qrO/cX BpMWAbOImyJj5gYBy1lCOhD3cwLhPsFgXgyoTMHrH9Bgyzk0dKwIXtX/zPoWgj3r p84vq3FATVb5Fh4GX+E/+jpJYpN3rBqFl0BzZWT7KSH9nFu+VVwzxxUqwnZyiuKM oN809mmIGtXwaGf1rsfoOMnE7o7ogboF -----END CERTIFICATE-----Generated at Thu Jul 3 07:36:39 2025 by rpki-client