$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: 0IY725VdQCzMaY41J4qUAXUhyPc7d/p23IwDqj9xMWg= Subject key identifier: 7A:D8:A9:CC:D0:AB:2E:CB:D8:32:2F:FC:13:D8:C8:7D:A0:F0:F7:9D Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 5F Signing time: Sat 23 Aug 2025 07:20:40 +0000 Manifest this update: Sat 23 Aug 2025 07:20:39 +0000 Manifest next update: Sat 30 Aug 2025 07:20:39 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: JBuTlf8IoCf9bSmA7ICF8jPuG6vrF1EoUhEds6Gg2KU=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Aug 23 07:20:39 2025 GMT Not After : Aug 30 07:20:39 2025 GMT Subject: CN=68a96bc7-16c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:61:cf:70:8b:90:60:07:62:20:c5:bb:e9: 73:0d:c7:d2:c7:e8:b9:41:af:f1:66:f2:14:2d:a6: 77:fc:ec:5c:57:a3:b6:ce:9a:e5:cc:17:cf:76:ca: f9:a3:61:74:df:22:a9:a1:88:8d:69:d2:a6:e9:ec: ea:66:71:0f:f7:b4:ed:2b:80:9f:69:c5:87:91:6e: e1:c3:70:2c:b9:ea:2b:c7:dd:dd:6b:f2:b0:21:f9: 4a:b1:20:8b:d2:cb:22:72:e0:59:1d:5e:48:66:2f: 6f:51:8c:c3:27:ec:96:0e:c5:6d:3a:15:af:50:96: e5:22:82:4e:df:bc:52:28:84:5c:b4:e5:be:3a:5d: aa:41:f3:59:1c:ca:74:cd:53:7b:ea:fd:ae:a6:1b: 1a:02:28:95:d2:31:16:1a:ab:d8:92:98:41:dc:8c: 3d:e2:a4:7f:77:63:89:0e:38:43:e5:68:bb:3b:32: 6f:b1:70:3a:4f:3f:b5:9a:3c:02:76:43:15:44:47: 12:c1:57:83:9a:0c:71:f8:be:b1:87:41:b8:c1:4f: 5f:ee:fc:93:fa:7b:fa:35:b8:e6:f8:05:c9:1c:2a: de:b4:6b:6b:68:f1:ea:39:54:70:9b:17:15:da:75: 6c:44:72:2d:97:b4:b1:6d:df:f3:13:42:43:36:4f: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:A9:CC:D0:AB:2E:CB:D8:32:2F:FC:13:D8:C8:7D:A0:F0:F7:9D X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e7:a0:1d:d8:56:64:ae:a2:6f:63:83:05:a0:21:f7:8e:fb: d0:56:f9:77:c3:3a:94:d8:d1:f6:10:bd:fd:dd:a1:05:21:a0: 04:8a:dc:f0:f4:d0:70:cf:20:de:71:a6:c4:ad:d5:32:70:4c: 8e:cb:2a:7e:a7:38:e5:f8:bd:ef:6d:2c:22:8f:8c:70:fd:d8: 1f:21:b6:96:4b:9d:6b:5b:e0:52:b6:b3:89:33:a5:42:1f:d2: 6b:6d:d7:86:60:d8:55:f8:9a:80:e9:68:45:dd:e1:26:b3:8a: 1e:43:5a:6a:ae:32:9f:64:fd:90:c9:3c:89:80:3e:5e:5a:a3: 26:5a:6c:ee:86:82:28:e6:dd:ea:f0:9d:17:77:13:42:97:b7: e9:10:16:c4:07:68:ce:52:59:fd:d0:25:d9:0c:54:8e:7f:e3: 7c:e1:04:fb:f1:9c:9c:9f:f8:3c:07:e8:ae:b9:2b:83:91:f6: 5e:14:9b:22:78:09:05:46:b9:10:13:87:23:56:d6:6e:15:93: a1:22:41:a8:9a:d4:41:46:79:2f:2e:b7:90:d1:36:f7:d7:3a: f4:41:73:0b:7b:17:ed:41:90:72:a1:9c:e2:34:19:ee:1b:ba: 1b:04:57:7d:7a:cb:12:74:b8:89:7a:bb:e2:6d:2c:f1:7a:87: 2e:c6:0a:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA4MjMwNzIwMzlaFw0yNTA4MzAwNzIwMzlaMBgxFjAUBgNV BAMTDTY4YTk2YmM3LTE2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClrWHPcIuQYAdiIMW76XMNx9LH6LlBr/Fm8hQtpnf87FxXo7bOmuXMF892yvmj YXTfIqmhiI1p0qbp7OpmcQ/3tO0rgJ9pxYeRbuHDcCy56ivH3d1r8rAh+UqxIIvS yyJy4FkdXkhmL29RjMMn7JYOxW06Fa9QluUigk7fvFIohFy05b46XapB81kcynTN U3vq/a6mGxoCKJXSMRYaq9iSmEHcjD3ipH93Y4kOOEPlaLs7Mm+xcDpPP7WaPAJ2 QxVERxLBV4OaDHH4vrGHQbjBT1/u/JP6e/o1uOb4BckcKt60a2to8eo5VHCbFxXa dWxEci2XtLFt3/MTQkM2TyzdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUetipzNCr LsvYMi/8E9jIfaDw950wHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGznoB3YVmSuom9jgwWgIfeO+9BW+XfDOpTY0fYQvf3doQUhoASK3PD0 0HDPIN5xpsSt1TJwTI7LKn6nOOX4ve9tLCKPjHD92B8htpZLnWtb4FK2s4kzpUIf 0mtt14Zg2FX4moDpaEXd4Sazih5DWmquMp9k/ZDJPImAPl5aoyZabO6Ggijm3erw nRd3E0KXt+kQFsQHaM5SWf3QJdkMVI5/43zhBPvxnJyf+DwH6K65K4OR9l4UmyJ4 CQVGuRAThyNW1m4Vk6EiQaia1EFGeS8ut5DRNvfXOvRBcwt7F+1BkHKhnOI0Ge4b uhsEV316yxJ0uIl6u+JtLPF6hy7GCoc= -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:23 2025 by rpki-client