$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: EWLsfgC6CahdiJKZ5UZpF/+fB2pYnCNXqVMpPyJEJxE= Subject key identifier: C6:F1:C6:FB:FE:23:25:99:31:01:67:20:2F:4B:E2:A9:E7:E9:49:A3 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 44 Signing time: Tue 01 Jul 2025 08:12:20 +0000 Manifest this update: Tue 01 Jul 2025 08:12:19 +0000 Manifest next update: Tue 08 Jul 2025 08:12:19 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: 7phDJj/pjH+5Rz78RDOnBNIzOaIlLYrjBF4QVLj+zXg=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Jul 1 08:12:19 2025 GMT Not After : Jul 8 08:12:19 2025 GMT Subject: CN=68639863-f4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:ec:dc:9f:ac:52:78:c8:7a:72:d6:ec:5b: a1:92:83:e3:27:b7:9e:6c:c3:93:f9:20:24:30:f7: 39:f8:18:37:88:8b:ab:71:09:4e:bb:63:40:aa:ff: 38:1e:a7:a6:e1:6f:b4:87:2f:64:35:8e:57:b3:c4: e7:bb:38:ad:58:8f:71:0f:3e:ce:a2:d6:37:d4:17: 80:62:30:3f:1b:f9:5f:85:38:ed:70:88:9b:7e:e4: 04:1a:04:db:54:4c:1a:cf:4c:aa:82:80:7a:ff:8e: 32:f6:bc:eb:42:e5:4a:de:a4:94:9c:1b:4c:8f:5b: 2a:34:dc:9c:f5:05:c0:0c:e2:bc:43:7b:75:3c:26: 04:07:7c:85:0f:56:58:1c:60:27:b9:da:47:fe:58: cf:b1:44:9b:47:43:d6:96:e3:75:8c:27:d8:10:d1: 2a:ac:9e:96:39:28:5d:b9:19:cd:4b:a9:d7:cb:72: 90:f9:47:4d:f4:ac:5c:a2:56:22:76:16:ce:ec:84: 57:1a:52:dd:e4:38:22:b0:e2:b9:1a:fa:0b:f4:98: 0e:23:84:bb:70:5d:9d:ad:9c:5c:31:0c:16:19:0e: fd:40:f8:53:62:3d:bd:63:97:6b:d7:84:83:b7:5e: 95:c9:d7:5f:25:17:e9:42:5c:8f:7f:2c:d7:41:66: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:C6:FB:FE:23:25:99:31:01:67:20:2F:4B:E2:A9:E7:E9:49:A3 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7b:5e:f2:79:5f:8d:4b:e9:6b:ce:65:19:07:31:a9:0a:fa: d4:d7:b9:f4:27:7b:1b:59:e0:08:b1:fd:1d:60:c3:15:0e:de: c0:58:da:36:86:4e:af:04:e3:cc:31:0d:7e:09:18:e1:36:27: ff:ee:e7:73:95:e4:87:02:1d:25:58:3b:33:e3:aa:08:5f:99: 04:bc:5d:86:56:e1:e4:d3:37:fe:8a:31:c4:62:e4:39:35:4b: 29:bf:d6:9b:ed:fd:19:16:eb:b9:ad:3b:20:4a:76:30:e6:07: 47:58:79:29:78:c0:89:33:6c:de:54:9e:2c:5a:b0:ca:12:9c: d2:0b:62:ee:72:63:db:4c:10:68:45:65:1c:02:00:d9:0e:86: 64:1b:f3:17:d5:16:0d:91:62:82:b5:ae:2a:ea:47:b7:6b:7c: eb:7c:72:a3:2c:b2:1e:6e:13:a4:2c:b0:81:7c:ee:c5:87:ca: 0f:89:a6:ff:7b:70:58:59:14:74:86:e6:54:b1:18:9f:2a:fd: e8:e8:12:36:4a:07:21:f6:28:fe:77:27:ac:39:a8:0a:07:f2: f4:0c:58:7c:31:e1:02:b8:61:35:69:bb:82:87:d1:73:58:96: ce:3a:d8:81:06:dd:db:e2:c5:00:d7:c1:f2:70:78:6c:57:6a: 68:29:2d:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA3MDEwODEyMTlaFw0yNTA3MDgwODEyMTlaMBgxFjAUBgNV BAMTDTY4NjM5ODYzLWY0YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEuezcn6xSeMh6ctbsW6GSg+Mnt55sw5P5ICQw9zn4GDeIi6txCU67Y0Cq/zge p6bhb7SHL2Q1jlezxOe7OK1Yj3EPPs6i1jfUF4BiMD8b+V+FOO1wiJt+5AQaBNtU TBrPTKqCgHr/jjL2vOtC5UrepJScG0yPWyo03Jz1BcAM4rxDe3U8JgQHfIUPVlgc YCe52kf+WM+xRJtHQ9aW43WMJ9gQ0SqsnpY5KF25Gc1LqdfLcpD5R030rFyiViJ2 Fs7shFcaUt3kOCKw4rka+gv0mA4jhLtwXZ2tnFwxDBYZDv1A+FNiPb1jl2vXhIO3 XpXJ118lF+lCXI9/LNdBZhGpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxvHG+/4j JZkxAWcgL0viqefpSaMwHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGh7XvJ5X41L6WvOZRkHMakK+tTXufQnextZ4Aix/R1gwxUO3sBY2jaG Tq8E48wxDX4JGOE2J//u53OV5IcCHSVYOzPjqghfmQS8XYZW4eTTN/6KMcRi5Dk1 Sym/1pvt/RkW67mtOyBKdjDmB0dYeSl4wIkzbN5UnixasMoSnNILYu5yY9tMEGhF ZRwCANkOhmQb8xfVFg2RYoK1rirqR7drfOt8cqMssh5uE6QssIF87sWHyg+Jpv97 cFhZFHSG5lSxGJ8q/ejoEjZKByH2KP53J6w5qAoH8vQMWHwx4QK4YTVpu4KH0XNY ls462IEG3dvixQDXwfJweGxXamgpLdc= -----END CERTIFICATE-----Generated at Thu Jul 3 05:06:53 2025 by rpki-client