$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft File: daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json) Hash identifier: Q4UGUGDuLhUR3CLHBSV2SYBd5RMMbn64SxOoNRUmDjM= Subject key identifier: 81:75:3E:4B:C7:C7:E9:5E:9D:11:32:8F:66:27:68:1B:FE:59:71:58 Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 Certificate issuer: /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Certificate serial: 1A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft Manifest number: 1A85 Signing time: Fri 22 Aug 2025 16:24:29 +0000 Manifest this update: Fri 22 Aug 2025 16:24:29 +0000 Manifest next update: Fri 29 Aug 2025 16:24:29 +0000 Files and hashes: 1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: vsNIfjxTqcuxKv+9TUN4gm99ceNeggGPPP1T0ogN2L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6789 (0x1a85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Validity Not Before: Aug 22 16:24:29 2025 GMT Not After : Aug 29 16:24:29 2025 GMT Subject: CN=68a899bd-ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:08:a5:ba:30:ef:46:80:93:f9:30:5b:51: 29:14:9a:9f:37:99:2e:e7:b9:2e:ba:a1:f8:a8:c5: 44:b9:0b:2f:e2:c4:c1:39:38:88:8b:05:48:87:5c: 27:da:b3:db:22:b6:2a:97:39:78:5d:18:d7:47:50: ae:b9:1b:9e:ad:69:b7:17:02:07:0a:ed:be:1c:2f: 91:59:22:fa:17:6b:61:2d:f2:0b:8b:fc:15:ff:85: 68:90:d3:f6:66:cb:ab:87:fe:1e:ac:7e:1d:d5:3d: 5f:7e:75:95:cf:d2:c6:fd:27:15:d5:11:94:67:c2: 4c:35:bf:82:02:b4:e8:16:70:2e:4b:da:df:9b:11: ba:4b:17:54:6c:9f:2d:2f:38:a3:4e:8c:99:56:81: ab:1d:80:24:58:1f:93:79:a0:a0:fc:16:0c:64:02: de:1e:78:e8:fa:4c:eb:3a:1f:21:44:b4:62:83:3e: 1f:38:ee:0d:26:86:7d:d3:33:6d:97:d2:c9:ae:5a: 98:c6:be:84:3c:28:19:ba:c6:82:76:92:cb:c2:7c: ff:68:2b:61:f4:19:66:15:cf:17:86:2b:66:6a:5b: be:5e:ea:0a:ab:81:77:0b:a3:04:a5:ed:5c:db:08: 63:cc:57:d6:83:bf:dd:71:65:6e:0e:3f:9a:d5:c3: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:75:3E:4B:C7:C7:E9:5E:9D:11:32:8F:66:27:68:1B:FE:59:71:58 X509v3 Authority Key Identifier: keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f8:43:7c:a2:43:f6:03:4a:1c:8a:4a:92:a8:44:05:4e:3f: b6:da:60:30:28:27:78:68:91:e3:fa:3b:e7:03:58:9a:3a:1f: 06:10:53:36:40:05:ca:4f:9a:fb:dd:c4:b2:19:d6:a9:7d:30: 39:1d:37:38:d9:ba:24:9d:a1:a2:1f:dc:0e:f8:64:93:ca:2c: ff:80:a1:32:22:44:68:fd:a5:60:80:7f:31:9b:f9:ca:81:fc: 34:7c:80:ad:11:e6:02:7c:d8:84:52:dd:0f:fc:d9:39:f9:39: a2:78:38:8c:f8:4f:25:5f:ff:91:de:9b:d2:91:43:97:af:a6: bf:bb:3e:06:cd:fc:a7:92:b6:4a:0e:03:2f:73:fa:46:82:1a: 40:23:6e:2d:a9:55:61:b6:33:f9:08:d1:55:2f:70:ef:41:ed: 05:9a:29:dc:5a:f9:61:0a:3b:73:03:f5:37:5b:5c:0a:69:97: be:e0:22:b7:b0:2e:ec:37:05:81:0d:f6:b7:43:28:a9:3a:4a: 1e:65:8c:91:ba:19:d5:83:87:ad:56:69:53:86:b0:ff:24:fa: 03:24:69:91:00:09:8d:1e:44:ad:ac:42:89:c8:28:65:90:db: e2:5b:95:b6:20:b6:a9:29:67:3b:90:f9:82:f9:ef:dd:de:57: 60:91:af:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND QzU4MURFNTcwHhcNMjUwODIyMTYyNDI5WhcNMjUwODI5MTYyNDI5WjAYMRYwFAYD VQQDEw02OGE4OTliZC1lYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlQIpbow70aAk/kwW1EpFJqfN5ku57kuuqH4qMVEuQsv4sTBOTiIiwVIh1wn 2rPbIrYqlzl4XRjXR1CuuRuerWm3FwIHCu2+HC+RWSL6F2thLfILi/wV/4VokNP2 Zsurh/4erH4d1T1ffnWVz9LG/ScV1RGUZ8JMNb+CArToFnAuS9rfmxG6SxdUbJ8t LzijToyZVoGrHYAkWB+TeaCg/BYMZALeHnjo+kzrOh8hRLRigz4fOO4NJoZ90zNt l9LJrlqYxr6EPCgZusaCdpLLwnz/aCth9BlmFc8Xhitmalu+XuoKq4F3C6MEpe1c 2whjzFfWg7/dcWVuDj+a1cMkNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF1PkvH x+lenREyj2YnaBv+WXFYMB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm b3NObW1leGFSMnpNV0IzbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO+EN8okP2A0ocikqSqEQFTj+22mAwKCd4aJHj+jvnA1iaOh8GEFM2 QAXKT5r73cSyGdapfTA5HTc42boknaGiH9wO+GSTyiz/gKEyIkRo/aVggH8xm/nK gfw0fICtEeYCfNiEUt0P/Nk5+TmieDiM+E8lX/+R3pvSkUOXr6a/uz4GzfynkrZK DgMvc/pGghpAI24tqVVhtjP5CNFVL3DvQe0FmincWvlhCjtzA/U3W1wKaZe+4CK3 sC7sNwWBDfa3QyipOkoeZYyRuhnVg4etVmlThrD/JPoDJGmRAAmNHkStrEKJyChl kNviW5W2ILapKWc7kPmC+e/d3ldgka9y -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:34 2025 by rpki-client