$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft File: DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json) Hash identifier: ltYo1LtGYXMBC9FHDyEAvuq9hEbDz7/YumxphjU1plA= Subject key identifier: 32:DC:E2:79:6D:00:78:F6:0E:CB:22:C4:7D:56:D7:DE:3E:C8:6D:BB Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft Manifest number: 066A Signing time: Sat 28 Jun 2025 22:02:15 +0000 Manifest this update: Sat 28 Jun 2025 22:02:14 +0000 Manifest next update: Sat 05 Jul 2025 22:02:14 +0000 Files and hashes: 1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: loIfFHpR0OCY1iOscRg55NMQNxpj9cCfImF8zedizyw=) 2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: /0E6jZ4+7bqUYrWrcsn+EsmkQL/Ndn9BT+YgQs7TIDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Validity Not Before: Jun 28 22:02:14 2025 GMT Not After : Jul 5 22:02:14 2025 GMT Subject: CN=68606667-a6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:fb:f1:eb:01:6e:b9:a9:c6:d0:0f:e7:ba: 2e:b7:ef:17:04:8f:71:1d:35:b0:0d:b0:36:15:5c: 74:29:a4:de:a4:73:3a:f6:89:82:29:ea:33:b6:51: 65:bb:40:6a:ef:46:a8:96:8d:9e:20:25:26:1f:6b: d8:98:f1:65:30:5e:fe:90:8b:3b:34:03:fc:97:e0: 4a:3b:a2:ea:b6:76:ca:fb:78:60:a5:14:6f:a6:3a: fc:f1:56:78:8e:83:40:8c:3c:a0:27:ce:cd:15:43: 62:20:1e:ff:9f:dd:c9:76:95:da:14:a2:6f:fe:be: 61:4c:65:54:93:38:5d:5c:13:67:28:bf:8d:47:7a: d7:36:48:1e:1c:0f:8a:95:db:3d:a0:93:3c:8e:04: a0:75:62:d8:7e:5d:05:b9:1d:9c:39:0c:5b:69:dc: 37:44:b8:15:f0:95:b7:1f:31:d4:74:ab:f5:db:91: fc:fb:f6:bd:27:71:ab:26:dd:7a:2d:1e:20:f2:f9: 62:2e:2d:49:dc:ab:55:c5:4a:92:ec:d0:a7:b3:02: 8c:00:84:17:fb:ba:f0:cd:24:d1:b2:56:d7:96:55: ec:da:b8:82:e6:92:28:65:fd:02:53:ac:be:44:15: 4c:43:d1:bf:f4:a5:85:c5:c3:14:44:16:a1:b5:3a: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DC:E2:79:6D:00:78:F6:0E:CB:22:C4:7D:56:D7:DE:3E:C8:6D:BB X509v3 Authority Key Identifier: keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f6:ab:20:bf:24:b4:3e:28:54:fb:25:6c:88:65:ff:07:7b: 5a:de:e7:ea:de:9e:f0:6a:6c:b8:8c:3d:af:e5:d3:13:e3:e0: bb:1e:31:44:34:2e:98:b6:25:f6:ff:ce:1a:12:1a:92:1e:35: 7a:31:84:2a:d0:35:f5:f2:b7:96:1b:ed:b5:21:1d:67:a6:7e: 0a:ca:9a:67:50:a4:ea:a7:86:cd:f1:0a:33:59:bf:30:c6:26: b2:9d:31:7c:39:e9:3f:e2:9e:39:82:55:c8:83:34:eb:80:7d: 52:fa:f9:9b:4e:3b:04:a7:65:5b:67:3d:35:19:ac:4a:ba:b0: 0f:e7:c9:78:a8:00:b5:20:a4:8e:4d:71:fe:64:18:de:57:13: d5:0a:5c:8b:ff:bb:e4:5d:d3:97:e8:eb:60:1c:4d:fb:06:58: 49:64:77:40:38:f5:ba:1b:fd:30:2f:bc:1c:44:f6:f9:c3:6f: 76:45:d2:5c:e1:a3:49:20:b2:cf:ff:06:1f:1c:67:71:10:b8: d0:49:99:06:8a:4c:ec:69:2f:d1:ce:f9:04:7b:16:d3:15:02: d7:9f:e7:f8:16:3b:46:a4:6c:0b:d6:70:63:23:1b:7a:bd:80: 78:1c:f7:23:07:87:fe:62:44:d6:34:e0:65:d0:28:bb:52:67: b3:8e:9f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NEYxMTAvBgNVBAUTKDBDMUYyNEU5RTYwMjg1NzY5RUY2MTRDRkE4MTNFRTUx QUM5RTk4RkUwHhcNMjUwNjI4MjIwMjE0WhcNMjUwNzA1MjIwMjE0WjAYMRYwFAYD VQQDEw02ODYwNjY2Ny1hNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Xz78esBbrmpxtAP57out+8XBI9xHTWwDbA2FVx0KaTepHM69omCKeoztlFl u0Bq70aolo2eICUmH2vYmPFlMF7+kIs7NAP8l+BKO6LqtnbK+3hgpRRvpjr88VZ4 joNAjDygJ87NFUNiIB7/n93JdpXaFKJv/r5hTGVUkzhdXBNnKL+NR3rXNkgeHA+K lds9oJM8jgSgdWLYfl0FuR2cOQxbadw3RLgV8JW3HzHUdKv125H8+/a9J3GrJt16 LR4g8vliLi1J3KtVxUqS7NCnswKMAIQX+7rwzSTRslbXllXs2riC5pIoZf0CU6y+ RBVMQ9G/9KWFxcMURBahtTpwGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLc4nlt AHj2DssixH1W194+yG27MB8GA1UdIwQYMBaAFAwfJOnmAoV2nvYUz6gT7lGsnpj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU0Ri9CNDUyQkY4Qzg0 MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hYYWU5aFRQcUJQdVVheWVt UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCOGs2ZVlDaFhhZTloVFBxQlB1VWF5ZW1QNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU0Ri9CNDUyQkY4Qzg0MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hY YWU5aFRQcUJQdVVheWVtUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9qsgvyS0PihU+yVsiGX/B3ta3ufq3p7wamy4jD2v5dMT4+C7HjFE NC6YtiX2/84aEhqSHjV6MYQq0DX18reWG+21IR1npn4KyppnUKTqp4bN8QozWb8w xiaynTF8Oek/4p45glXIgzTrgH1S+vmbTjsEp2VbZz01GaxKurAP58l4qAC1IKSO TXH+ZBjeVxPVClyL/7vkXdOX6OtgHE37BlhJZHdAOPW6G/0wL7wcRPb5w292RdJc 4aNJILLP/wYfHGdxELjQSZkGikzsaS/RzvkEexbTFQLXn+f4FjtGpGwL1nBjIxt6 vYB4HPcjB4f+YkTWNOBl0Ci7Umezjp95 -----END CERTIFICATE-----Generated at Mon Jun 30 15:07:47 2025 by rpki-client