$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: 3HiKQltif1eBOm6WD3eT1Anq1mh8Do9Ajs8d5fcMUaU= Subject key identifier: 90:AC:F7:E8:45:88:88:A0:6C:D9:D5:7A:C1:CA:4C:F9:69:90:8F:F3 Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 0104 Signing time: Thu 03 Jul 2025 05:13:27 +0000 Manifest this update: Thu 03 Jul 2025 05:13:27 +0000 Manifest next update: Thu 10 Jul 2025 05:13:27 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: /tlcrVAKsASjJB/v9I2igpFBrWFCrtmt4vCDNyVwb7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Jul 3 05:13:27 2025 GMT Not After : Jul 10 05:13:27 2025 GMT Subject: CN=68661177-0069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:99:bc:a2:92:3f:30:e5:d3:cb:c3:7d:f8: 07:90:8e:00:dd:ef:eb:39:fe:c8:b0:9d:38:a3:87: 68:25:7d:29:6f:e1:f3:1a:9b:35:c1:f0:f8:d1:71: 41:70:fa:3d:95:0a:44:67:9b:87:a9:03:af:a6:db: e5:51:25:e8:7e:10:ab:da:a4:38:c9:cd:cf:b7:2a: bf:c6:d8:e8:5a:42:09:04:ec:4d:0a:ca:ff:39:5f: ef:7f:48:4e:8a:58:c6:d7:ec:9f:27:d5:12:e6:bf: c7:b1:e5:5c:e7:97:f5:fb:f6:70:23:d0:11:fc:87: 31:2e:46:5f:b7:d2:b2:25:24:07:d9:fa:4a:60:a7: 2d:8a:38:c5:2f:45:6d:54:b3:23:eb:a9:1d:31:74: a8:98:3b:8e:1a:0e:fc:2d:d6:a1:bb:d0:06:f7:a7: 5b:d0:46:57:69:c0:25:5f:ff:5e:a6:d5:12:2a:42: 65:2d:18:f1:6a:52:58:d9:9f:76:8c:70:46:e8:45: 74:fc:94:11:f0:07:5d:69:d3:73:46:97:a1:33:00: ce:50:1a:ac:77:fe:c2:b3:e9:3a:97:51:00:6d:44: 2f:c7:1a:91:89:37:07:ad:22:33:fb:18:fe:7b:14: 8b:62:c4:e6:e6:7e:e4:fc:9d:65:cd:49:f1:74:ef: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:F7:E8:45:88:88:A0:6C:D9:D5:7A:C1:CA:4C:F9:69:90:8F:F3 X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fe:d8:d0:1e:e7:91:df:8f:1f:9d:5a:19:3b:a8:22:c6:8d: f1:ee:41:9d:e0:88:60:27:81:ff:64:fe:4c:b3:1c:64:1f:44: a3:8b:cd:36:f4:04:3e:8c:4a:ed:72:bd:93:9e:3f:9d:42:da: 1a:3f:7f:ba:45:1b:e8:45:a1:c2:99:07:49:3a:56:93:d8:64: 88:70:17:da:ab:21:ce:91:bb:31:76:26:76:e1:53:6e:02:ee: 85:7a:b3:c0:98:93:00:cd:1a:04:e0:d6:c9:a5:03:37:cd:a7: ab:fe:03:18:63:9c:d4:60:b5:57:97:cb:8a:ef:bc:2d:c5:9f: e1:98:df:d0:93:92:c1:58:29:5b:02:3c:0d:e4:7c:91:e3:4c: 36:f4:22:d2:2e:ca:dd:47:9a:94:ce:0b:3c:4c:f8:1c:4e:59: 0f:f7:ad:b7:e2:70:f9:d4:e3:2f:0e:a1:23:67:9d:7c:e8:fe: 9d:f4:32:a0:f0:71:8e:ba:87:54:ec:60:1a:13:d6:62:88:1a: 63:64:f2:3d:ab:cf:ac:8f:e6:42:3e:72:13:5b:6e:74:92:8f: be:6f:8b:08:10:a1:ef:08:ff:da:ca:cd:ee:4e:d1:24:0e:63: ac:88:0c:a7:75:d1:db:ce:b2:1c:fd:1d:23:25:e8:a5:59:a5: bd:1e:40:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwNzAzMDUxMzI3WhcNMjUwNzEwMDUxMzI3WjAYMRYwFAYD VQQDEw02ODY2MTE3Ny0wMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeyZvKKSPzDl08vDffgHkI4A3e/rOf7IsJ04o4doJX0pb+HzGps1wfD40XFB cPo9lQpEZ5uHqQOvptvlUSXofhCr2qQ4yc3Ptyq/xtjoWkIJBOxNCsr/OV/vf0hO iljG1+yfJ9US5r/HseVc55f1+/ZwI9AR/IcxLkZft9KyJSQH2fpKYKctijjFL0Vt VLMj66kdMXSomDuOGg78Ldahu9AG96db0EZXacAlX/9eptUSKkJlLRjxalJY2Z92 jHBG6EV0/JQR8AddadNzRpehMwDOUBqsd/7Cs+k6l1EAbUQvxxqRiTcHrSIz+xj+ exSLYsTm5n7k/J1lzUnxdO/rmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCs9+hF iIigbNnVesHKTPlpkI/zMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY/tjQHueR348fnVoZO6gixo3x7kGd4IhgJ4H/ZP5MsxxkH0Sji802 9AQ+jErtcr2Tnj+dQtoaP3+6RRvoRaHCmQdJOlaT2GSIcBfaqyHOkbsxdiZ24VNu Au6FerPAmJMAzRoE4NbJpQM3zaer/gMYY5zUYLVXl8uK77wtxZ/hmN/Qk5LBWClb AjwN5HyR40w29CLSLsrdR5qUzgs8TPgcTlkP96234nD51OMvDqEjZ5186P6d9DKg 8HGOuodU7GAaE9ZiiBpjZPI9q8+sj+ZCPnITW250ko++b4sIEKHvCP/ays3uTtEk DmOsiAynddHbzrIc/R0jJeilWaW9HkDR -----END CERTIFICATE-----Generated at Thu Jul 3 08:48:31 2025 by rpki-client