$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: B/GMEBgdgLcomgv6dIm6IOsfVXt27v0jArxfPDvAu7E= Subject key identifier: 04:E7:E5:68:CC:A7:72:70:DF:BF:6D:8B:86:BC:40:96:39:50:FD:71 Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 1213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1A62 Signing time: Fri 22 Aug 2025 17:17:19 +0000 Manifest this update: Fri 22 Aug 2025 17:17:19 +0000 Manifest next update: Fri 29 Aug 2025 17:17:19 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: jvtk4RcCICAI47U2DfNun9oUGwy6XkGwxTteSoX7FeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Aug 22 17:17:19 2025 GMT Not After : Aug 29 17:17:19 2025 GMT Subject: CN=68a8a61f-6105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:df:d9:0d:77:0e:35:d2:61:84:f2:db:29: 26:dc:5d:c0:79:46:06:d8:b8:72:10:89:ce:4f:8e: 6d:50:0b:ae:8f:0b:f9:bb:e4:4a:3d:3c:84:f5:aa: 34:9c:2f:34:05:fe:30:5c:ac:bc:96:29:99:99:95: 99:3b:ea:35:c2:e1:7a:d0:d6:22:7a:a6:2a:a6:f0: d5:9f:c4:23:df:da:0a:f9:5f:d0:8d:11:f1:5e:d7: 05:cf:c6:c4:e4:a5:32:be:2d:61:13:33:69:07:06: a6:a0:6a:76:81:36:f3:1b:ff:ce:c8:c1:c3:e1:35: 51:df:87:0c:3d:9c:d5:95:7e:0d:c4:4f:f9:f4:1e: 71:f7:63:f8:d7:4c:1e:cf:84:7e:62:b5:ed:29:24: 15:44:47:23:76:b6:e2:6c:fe:b0:c7:24:df:d0:ac: a8:21:36:c0:ce:0f:fa:d0:8a:38:65:66:db:16:0b: 6d:11:29:aa:c3:47:cb:64:43:9c:63:27:4b:ab:4c: 55:8a:d7:bb:e4:28:d3:c1:ae:c1:d8:b9:2f:97:d9: 78:19:e3:92:0f:f3:93:ce:6a:68:78:cf:d0:a8:3b: fc:cc:5f:34:11:a0:55:bb:04:68:b8:0b:f1:62:92: fb:a2:18:93:1c:e2:91:d7:77:9c:f3:80:bd:ef:ae: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:E5:68:CC:A7:72:70:DF:BF:6D:8B:86:BC:40:96:39:50:FD:71 X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:10:7c:a6:9b:1d:5f:10:37:a0:0f:cf:70:40:98:a6:f4:2d: 3c:f9:1a:39:50:c6:36:7c:33:2f:bc:0b:d9:73:25:83:b1:b1: 79:af:4f:bf:3b:75:6b:a4:eb:5d:22:06:5c:7d:bb:ce:30:8e: 22:57:d0:3a:7d:a9:a1:b2:1a:38:2c:74:d1:ee:ba:42:bf:54: a3:7d:c3:d6:d5:9b:63:29:cf:9b:ba:dc:0b:f1:37:9d:9c:ee: 04:0d:6f:87:9f:fa:ac:6f:49:6e:8a:5d:89:08:82:db:b9:a0: ec:74:82:28:9b:f8:f6:66:35:06:a0:6d:28:1a:11:8b:e5:0d: 12:52:b8:54:0f:de:e7:33:f8:8a:05:69:91:43:01:68:93:a5: d7:82:fe:a9:7d:76:2d:16:e5:97:c3:07:8b:9b:cb:68:e9:fd: 1e:d2:0a:1d:57:8e:1e:9f:b5:15:eb:76:44:f9:ba:94:63:e7: 0d:ba:00:ca:97:57:65:12:92:d3:17:d7:1e:1c:62:56:52:b0: 23:c3:20:cb:24:fa:be:ec:05:84:e8:ff:c6:22:e4:dd:65:1b: 11:53:63:39:c5:d5:fb:0c:54:e9:8d:d8:8a:b9:90:9c:dc:8e: df:93:a2:ec:43:26:f3:af:a2:16:4e:9e:bf:b7:e2:73:64:e7: ac:19:e4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwODIyMTcxNzE5WhcNMjUwODI5MTcxNzE5WjAYMRYwFAYD VQQDEw02OGE4YTYxZi02MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAff2Q13DjXSYYTy2ykm3F3AeUYG2LhyEInOT45tUAuujwv5u+RKPTyE9ao0 nC80Bf4wXKy8limZmZWZO+o1wuF60NYieqYqpvDVn8Qj39oK+V/QjRHxXtcFz8bE 5KUyvi1hEzNpBwamoGp2gTbzG//OyMHD4TVR34cMPZzVlX4NxE/59B5x92P410we z4R+YrXtKSQVREcjdrbibP6wxyTf0KyoITbAzg/60Io4ZWbbFgttESmqw0fLZEOc YydLq0xVite75CjTwa7B2Lkvl9l4GeOSD/OTzmpoeM/QqDv8zF80EaBVuwRouAvx YpL7ohiTHOKR13ec84C9765tCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATn5WjM p3Jw379ti4a8QJY5UP1xMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJEHymmx1fEDegD89wQJim9C08+Ro5UMY2fDMvvAvZcyWDsbF5r0+/ O3VrpOtdIgZcfbvOMI4iV9A6famhsho4LHTR7rpCv1SjfcPW1ZtjKc+butwL8Ted nO4EDW+Hn/qsb0luil2JCILbuaDsdIIom/j2ZjUGoG0oGhGL5Q0SUrhUD97nM/iK BWmRQwFok6XXgv6pfXYtFuWXwweLm8to6f0e0godV44en7UV63ZE+bqUY+cNugDK l1dlEpLTF9ceHGJWUrAjwyDLJPq+7AWE6P/GIuTdZRsRU2M5xdX7DFTpjdiKuZCc 3I7fk6LsQybzr6IWTp6/t+JzZOesGeTe -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:46 2025 by rpki-client