$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft File: daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json) Hash identifier: HFhBxCy82YnzWIPsVHF1tyVgkDSJAz78Ovn+S/NkMEo= Subject key identifier: F2:C8:82:99:85:C6:BB:D6:87:7C:29:CD:7B:4F:21:83:A2:4D:7C:93 Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 Certificate issuer: /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Certificate serial: 1A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft Manifest number: 1A6B Signing time: Wed 02 Jul 2025 16:27:00 +0000 Manifest this update: Wed 02 Jul 2025 16:26:59 +0000 Manifest next update: Wed 09 Jul 2025 16:26:59 +0000 Files and hashes: 1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: 3hWxrs/7YbRPWI5f0luVzyMlF09n8XGu/nIbiJN2yo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6763 (0x1a6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Validity Not Before: Jul 2 16:26:59 2025 GMT Not After : Jul 9 16:26:59 2025 GMT Subject: CN=68655dd4-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:38:56:f6:74:b9:a6:82:17:61:34:88:b6: 76:99:ab:eb:bc:59:2f:b4:6b:5f:ff:07:ea:ce:b5: 84:5c:49:a6:8b:32:7d:61:42:72:6c:3d:db:c6:dd: c5:98:ca:ae:f4:88:51:38:50:7d:95:77:76:9e:c9: 4e:c9:40:f1:48:23:6d:a9:e4:66:85:a5:3e:fe:53: 0f:97:48:80:99:ea:2f:4f:b3:07:c7:31:66:18:ff: 0e:4d:0c:00:42:42:1b:e5:86:9f:44:20:a6:b0:c2: 70:aa:69:34:f3:cf:f0:ae:aa:c1:7b:98:aa:02:a8: e6:b0:7f:8c:4a:dd:0b:8c:ca:6e:47:2e:ea:83:84: af:e9:59:60:3e:01:c8:c0:6c:ee:54:5e:3b:43:0b: b7:bf:04:b5:b9:84:a9:b6:d5:4a:93:0d:27:8d:0e: c2:13:9d:18:d1:84:e1:3e:0e:ad:54:53:ba:ff:b8: a4:ed:1b:69:7d:76:d4:4c:50:23:23:cc:11:47:d8: ab:96:b9:e9:71:b8:4d:eb:6c:25:6e:4a:68:63:18: e0:8e:5f:c2:54:14:2c:15:ee:e6:85:7d:70:d0:4f: 1f:fd:b6:6f:af:e9:11:63:2b:52:d6:3f:d7:a6:47: 04:58:60:b1:38:94:2d:7e:c5:11:7a:b7:bd:06:44: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C8:82:99:85:C6:BB:D6:87:7C:29:CD:7B:4F:21:83:A2:4D:7C:93 X509v3 Authority Key Identifier: keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:30:80:ef:a1:14:4f:d0:bb:67:09:86:45:5d:95:77:fa:8e: ee:c6:8e:10:0e:07:54:c8:1f:c8:ed:8b:cd:31:12:23:95:e2: 07:52:d2:3e:7f:d8:b4:74:78:77:ce:d2:1b:8a:aa:b8:2e:55: 0f:f1:84:17:c2:e0:50:54:ce:3b:35:63:b5:ee:a0:7e:18:67: d0:7a:0d:44:38:00:39:7c:1a:d6:51:47:ab:6b:9b:e8:31:e0: b4:22:c5:a5:14:9a:80:bb:0c:f8:03:3c:9d:e2:6b:67:cb:93: 64:31:bb:28:1c:ea:6d:12:d2:74:dc:4f:3a:be:b1:18:f4:45: 65:0c:91:ab:5d:dd:8f:a3:00:a7:4e:8b:ea:fc:f4:09:67:74: f5:e1:92:cb:fa:2c:d7:0e:e9:8c:f9:c5:27:d9:df:91:99:dd: f6:13:d5:2d:2e:57:5d:59:9c:b5:d2:a9:77:48:a1:d3:98:7f: 1c:dd:93:9d:fd:77:13:c2:1e:c6:5e:1f:5a:4b:35:7c:a1:fe: 84:0f:cd:1e:a2:d2:00:8d:c0:dd:01:36:52:a3:a3:d0:01:42: a4:91:87:95:9e:9b:f4:97:43:65:9b:16:fb:cb:c2:93:36:b0: 2f:28:48:ae:e8:b7:28:e4:27:b3:a6:13:23:1c:f7:10:70:53: 8b:79:76:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND QzU4MURFNTcwHhcNMjUwNzAyMTYyNjU5WhcNMjUwNzA5MTYyNjU5WjAYMRYwFAYD VQQDEw02ODY1NWRkNC0xODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfA4VvZ0uaaCF2E0iLZ2mavrvFkvtGtf/wfqzrWEXEmmizJ9YUJybD3bxt3F mMqu9IhROFB9lXd2nslOyUDxSCNtqeRmhaU+/lMPl0iAmeovT7MHxzFmGP8OTQwA QkIb5YafRCCmsMJwqmk088/wrqrBe5iqAqjmsH+MSt0LjMpuRy7qg4Sv6VlgPgHI wGzuVF47Qwu3vwS1uYSpttVKkw0njQ7CE50Y0YThPg6tVFO6/7ik7RtpfXbUTFAj I8wRR9irlrnpcbhN62wlbkpoYxjgjl/CVBQsFe7mhX1w0E8f/bZvr+kRYytS1j/X pkcEWGCxOJQtfsURere9BkReRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLIgpmF xrvWh3wpzXtPIYOiTXyTMB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm b3NObW1leGFSMnpNV0IzbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRMIDvoRRP0LtnCYZFXZV3+o7uxo4QDgdUyB/I7YvNMRIjleIHUtI+ f9i0dHh3ztIbiqq4LlUP8YQXwuBQVM47NWO17qB+GGfQeg1EOAA5fBrWUUera5vo MeC0IsWlFJqAuwz4Azyd4mtny5NkMbsoHOptEtJ03E86vrEY9EVlDJGrXd2PowCn Tovq/PQJZ3T14ZLL+izXDumM+cUn2d+Rmd32E9UtLlddWZy10ql3SKHTmH8c3ZOd /XcTwh7GXh9aSzV8of6ED80eotIAjcDdATZSo6PQAUKkkYeVnpv0l0Nlmxb7y8KT NrAvKEiu6Lco5CezphMjHPcQcFOLeXaI -----END CERTIFICATE-----Generated at Wed Jul 2 19:24:35 2025 by rpki-client