$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: NAFKnJFhuhIU4uQIy28VDezZAbsrliGR6FtGNu7+5Jc= Subject key identifier: 22:BB:3B:88:87:49:2E:B1:A5:1F:F0:C6:34:49:E5:03:33:26:19:67 Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 05DF Signing time: Wed 02 Jul 2025 23:18:09 +0000 Manifest this update: Wed 02 Jul 2025 23:18:09 +0000 Manifest next update: Wed 09 Jul 2025 23:18:09 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: YI4EnK8fT6+4VTWQWUPkZDOUjxKJ85BBJx/KWRg5ZKA=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: Jul 2 23:18:09 2025 GMT Not After : Jul 9 23:18:09 2025 GMT Subject: CN=6865be31-42c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:d0:6a:da:83:ea:95:6c:a3:2e:b2:26:7b: e1:4d:3f:1d:e4:a6:6e:0b:e8:39:f2:36:93:73:9d: 83:0a:47:92:fd:4d:c0:cc:eb:de:3c:49:4c:93:bd: 05:03:89:ea:4d:75:15:c8:6f:99:54:5d:7e:ea:ca: 05:36:9d:ce:81:88:b6:0e:ce:26:b0:b6:9f:7e:12: 86:e3:97:b2:5f:bc:1c:6a:0f:e1:98:36:19:85:6e: ae:10:f4:9e:3a:f4:fb:e8:59:c6:f5:6c:01:22:1a: 80:7e:80:fb:8b:2a:e8:7d:15:0b:7e:cb:e1:db:f5: f6:f9:66:f5:df:94:9f:ff:d5:c0:ec:15:e4:30:7d: c5:c1:43:c6:d6:de:f5:9c:0c:dd:de:d6:85:7d:30: d3:a2:e2:79:ff:6d:94:d9:64:da:89:79:72:7b:de: a6:fd:95:ad:85:b3:f2:bb:c4:5a:87:bb:5d:d2:2c: 30:68:15:7f:e8:06:e6:ad:ee:ea:d0:dd:84:14:d5: 15:fd:34:3b:02:ff:ce:4a:21:f1:d5:fb:3c:30:c4: 54:c7:bc:43:0d:39:c9:32:71:d3:67:65:9d:c6:e0: 83:0c:c5:a4:ca:35:6c:39:c0:4b:12:9f:ce:da:4b: d4:b7:39:b0:2d:a0:78:1b:42:88:22:a8:12:77:8a: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BB:3B:88:87:49:2E:B1:A5:1F:F0:C6:34:49:E5:03:33:26:19:67 X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:68:f9:84:4b:df:8c:2c:11:53:6c:02:40:3f:7c:bd:7e:49: 9e:60:bc:8a:8e:20:41:f5:4c:76:f3:70:00:3a:9c:44:81:96: 3c:bb:1b:ca:09:db:4a:ae:01:5d:e1:c8:96:08:ce:7b:0a:2f: 90:64:4b:3a:72:a9:16:4a:7d:1b:23:57:f2:b2:13:54:d7:5b: a0:e3:c5:bf:b4:da:f6:46:e0:a8:c6:66:a8:97:ff:aa:e3:54: 75:dc:1b:ba:e6:6a:60:be:5c:42:6c:68:71:c1:90:ac:3f:cd: d5:54:47:69:c5:a0:11:fa:3c:4e:b8:54:b5:a1:e9:f0:a4:bb: 5f:98:b2:32:3f:f0:95:90:95:07:59:34:32:02:da:96:52:4d: e6:68:30:6a:9c:bf:4f:9d:9c:99:04:8f:5b:c2:c5:0c:a1:3c: 2d:20:de:1a:a6:0d:2f:75:dc:78:fd:00:23:de:cf:08:3b:00: d4:fa:35:d4:ec:c0:e9:a4:ee:32:ed:a6:4e:dd:6d:c2:63:9f: 8c:8c:fc:07:39:df:48:f7:80:cd:93:17:f2:70:bc:f6:98:a3: 09:7e:08:5c:58:66:a1:2d:00:10:2f:62:50:cc:ba:6a:25:4b: c7:3f:e5:47:85:63:b7:36:f3:ba:dd:09:5d:47:9d:8b:2d:bf: 8f:7d:bc:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUwNzAyMjMxODA5WhcNMjUwNzA5MjMxODA5WjAYMRYwFAYD VQQDEw02ODY1YmUzMS00MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8bQatqD6pVsoy6yJnvhTT8d5KZuC+g58jaTc52DCkeS/U3AzOvePElMk70F A4nqTXUVyG+ZVF1+6soFNp3OgYi2Ds4msLaffhKG45eyX7wcag/hmDYZhW6uEPSe OvT76FnG9WwBIhqAfoD7iyrofRULfsvh2/X2+Wb135Sf/9XA7BXkMH3FwUPG1t71 nAzd3taFfTDTouJ5/22U2WTaiXlye96m/ZWthbPyu8Rah7td0iwwaBV/6Abmre7q 0N2EFNUV/TQ7Av/OSiHx1fs8MMRUx7xDDTnJMnHTZ2WdxuCDDMWkyjVsOcBLEp/O 2kvUtzmwLaB4G0KIIqgSd4qeAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCK7O4iH SS6xpR/wxjRJ5QMzJhlnMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/aPmES9+MLBFTbAJAP3y9fkmeYLyKjiBB9Ux283AAOpxEgZY8uxvK CdtKrgFd4ciWCM57Ci+QZEs6cqkWSn0bI1fyshNU11ug48W/tNr2RuCoxmaol/+q 41R13Bu65mpgvlxCbGhxwZCsP83VVEdpxaAR+jxOuFS1oenwpLtfmLIyP/CVkJUH WTQyAtqWUk3maDBqnL9PnZyZBI9bwsUMoTwtIN4apg0vddx4/QAj3s8IOwDU+jXU 7MDppO4y7aZO3W3CY5+MjPwHOd9I94DNkxfycLz2mKMJfghcWGahLQAQL2JQzLpq JUvHP+VHhWO3NvO63QldR52LLb+Pfby8 -----END CERTIFICATE-----Generated at Thu Jul 3 23:05:05 2025 by rpki-client