$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: ip/vANqJwSK1v0PWFU727asFHA7xxdCfVG0GM6nod88= Subject key identifier: 27:B7:18:6F:46:3B:CA:E9:19:37:59:C5:B6:39:37:45:32:51:BC:03 Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 0862 Signing time: Sat 28 Jun 2025 20:22:23 +0000 Manifest this update: Sat 28 Jun 2025 20:22:22 +0000 Manifest next update: Sat 05 Jul 2025 20:22:22 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: mfhL6QnL//91kEFv57u3i88LtcEMcaYDnO2d0ZiCm4M=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Jun 28 20:22:22 2025 GMT Not After : Jul 5 20:22:22 2025 GMT Subject: CN=68604eff-7da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:8f:eb:6b:eb:ac:a8:c6:2b:6b:f3:77:14: f1:6f:84:aa:bd:37:45:e3:df:10:cd:2d:93:91:a2: 5d:84:62:d0:22:0a:ae:56:60:d3:b0:8d:0e:46:1a: 06:f1:ff:c4:2f:c5:72:72:6f:f0:e2:11:30:70:c3: 1a:a6:81:aa:6f:c0:fd:40:96:85:0c:8f:36:9a:a2: 13:68:45:b8:15:70:b0:0f:34:75:7d:9e:e3:9f:0d: 4c:10:ed:aa:cd:ee:36:9d:8f:f2:0e:1f:d7:eb:36: 05:16:ab:ed:80:ea:7e:b4:1e:7a:53:dc:2d:15:b9: 1e:fb:dc:c5:f4:ef:c9:4a:d4:d5:9f:86:df:68:56: d6:80:6d:0b:c4:9b:42:16:3e:af:dc:78:ad:51:14: bb:46:b5:6a:d0:25:be:62:4c:de:4f:5a:63:86:8a: 15:b1:a1:0e:52:22:a7:54:49:64:94:a9:f6:b1:96: 18:42:a7:b9:ea:ba:52:9f:1c:02:ff:0a:f1:e1:5e: 8c:dd:8c:c5:f6:64:5f:61:6e:81:39:e5:35:23:1d: 5a:43:11:f7:6f:f3:7f:0e:ef:22:48:d2:31:d9:30: 43:3c:cb:8d:f2:2d:14:52:f4:4c:fd:2c:0e:c6:6d: 56:7a:4e:57:8b:5f:42:e6:16:52:fe:2d:77:80:73: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B7:18:6F:46:3B:CA:E9:19:37:59:C5:B6:39:37:45:32:51:BC:03 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8e:be:5d:49:2c:3b:da:aa:f2:32:2b:cc:b4:23:e3:41:b9: bb:47:62:d4:ce:38:40:e8:3c:34:4c:aa:cb:0b:4d:5d:d9:3f: c4:87:25:9d:28:50:00:a0:7a:ad:b2:b0:10:9d:b6:8a:ba:c4: fb:c2:66:97:e9:a6:12:bf:89:2c:aa:5a:7e:4f:73:3d:6e:c3: 35:58:35:6a:3e:9f:f2:34:6f:5a:42:fd:06:f8:be:49:b4:0c: 68:4a:c1:ab:55:8e:00:83:02:c8:34:2a:00:4f:2f:90:be:8c: b7:6b:11:55:0b:a0:2d:12:ba:e8:16:46:a6:28:ba:cb:a8:e2: ae:ef:e2:f5:c9:3d:7b:e4:e1:04:df:87:c8:1d:3b:db:f4:a1: c0:7c:50:b4:d7:6a:91:99:15:6f:85:97:bb:7e:e5:3d:c8:aa: 41:84:13:13:44:64:14:a9:37:e1:5e:14:57:14:f5:bf:1c:64: d7:a4:07:49:19:f5:68:66:64:60:d7:ea:db:92:da:06:77:24: 72:9f:2a:15:a7:b5:b0:ec:4f:0e:f8:9b:bc:67:fa:2c:20:71: 57:96:5e:d2:96:27:7e:8c:11:ca:24:f9:81:d8:8c:d9:83:b5: 16:0f:91:cb:31:5c:50:f1:b9:6e:61:cf:9e:ce:c5:a4:dc:56: b4:3d:89:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwNjI4MjAyMjIyWhcNMjUwNzA1MjAyMjIyWjAYMRYwFAYD VQQDEw02ODYwNGVmZi03ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG+P62vrrKjGK2vzdxTxb4SqvTdF498QzS2TkaJdhGLQIgquVmDTsI0ORhoG 8f/EL8Vycm/w4hEwcMMapoGqb8D9QJaFDI82mqITaEW4FXCwDzR1fZ7jnw1MEO2q ze42nY/yDh/X6zYFFqvtgOp+tB56U9wtFbke+9zF9O/JStTVn4bfaFbWgG0LxJtC Fj6v3HitURS7RrVq0CW+YkzeT1pjhooVsaEOUiKnVElklKn2sZYYQqe56rpSnxwC /wrx4V6M3YzF9mRfYW6BOeU1Ix1aQxH3b/N/Du8iSNIx2TBDPMuN8i0UUvRM/SwO xm1Wek5Xi19C5hZS/i13gHMXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe3GG9G O8rpGTdZxbY5N0UyUbwDMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjr5dSSw72qryMivMtCPjQbm7R2LUzjhA6Dw0TKrLC01d2T/EhyWd KFAAoHqtsrAQnbaKusT7wmaX6aYSv4ksqlp+T3M9bsM1WDVqPp/yNG9aQv0G+L5J tAxoSsGrVY4AgwLINCoATy+Qvoy3axFVC6AtErroFkamKLrLqOKu7+L1yT175OEE 34fIHTvb9KHAfFC012qRmRVvhZe7fuU9yKpBhBMTRGQUqTfhXhRXFPW/HGTXpAdJ GfVoZmRg1+rbktoGdyRynyoVp7Ww7E8O+Ju8Z/osIHFXll7Slid+jBHKJPmB2IzZ g7UWD5HLMVxQ8bluYc+ezsWk3Fa0PYkb -----END CERTIFICATE-----Generated at Sun Jun 29 12:24:39 2025 by rpki-client