$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: cVj3DaBxBb08WganSsGRuf+vwIipTpy7OLJg1qiG9CY= Subject key identifier: F4:DE:48:C1:C0:FD:5A:EA:7B:85:0B:83:64:DF:7C:BA:34:89:2F:B6 Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 11F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1A2E Signing time: Wed 02 Jul 2025 17:21:56 +0000 Manifest this update: Wed 02 Jul 2025 17:21:55 +0000 Manifest next update: Wed 09 Jul 2025 17:21:55 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: ZN/leap8TjQPQ08jVX+ZfiZiQuYhUnPqKxxikUsWqDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4601 (0x11f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Jul 2 17:21:55 2025 GMT Not After : Jul 9 17:21:55 2025 GMT Subject: CN=68656ab3-9857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:76:ac:76:82:0c:7f:c5:b7:5b:77:dc:3f: 9b:f8:6c:16:69:aa:b3:df:2a:03:5f:45:c9:3e:af: 24:5f:87:d6:49:85:57:99:b9:30:1a:0d:d5:d4:91: e4:b6:43:c4:4b:8c:a5:42:26:06:9e:51:f9:90:05: eb:67:65:0e:71:63:fd:6c:c3:6e:aa:3c:db:c3:60: 12:40:3c:96:63:a9:6c:0c:83:96:09:ea:92:8c:b6: 96:d4:f6:8f:43:b2:49:dd:90:c5:18:41:d6:06:c6: d7:d4:66:57:5e:c1:d5:91:ac:21:ea:90:38:ea:b6: e1:fa:2f:d9:be:ee:88:ad:7e:f9:0d:77:bf:ad:fc: 6d:bf:56:e9:15:1a:08:0f:4b:dc:25:0a:27:a7:c5: 8c:95:e5:ea:05:f0:13:3f:b8:55:11:ce:7c:64:9b: 74:f3:94:59:be:b8:81:76:03:40:91:4a:d3:ae:bc: 98:d2:a9:d9:d7:5e:12:b2:11:14:45:2c:5e:99:2e: 7b:1d:0d:09:c8:35:2d:0c:15:12:b2:aa:e2:ba:8d: bc:4b:e3:f1:7f:3d:87:64:3b:bc:ef:09:30:33:76: 1a:2f:ae:99:e1:72:82:0d:75:53:74:f6:b4:8f:5a: a5:72:47:08:35:b4:6e:94:a1:ac:6b:3c:55:ac:50: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DE:48:C1:C0:FD:5A:EA:7B:85:0B:83:64:DF:7C:BA:34:89:2F:B6 X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:58:08:53:c9:8d:fc:09:01:22:54:d4:b1:5b:e1:44:4c: c2:01:25:11:ec:9f:71:9d:b8:95:70:d8:30:d3:86:c3:04:e0: 50:fc:9c:63:52:29:4d:3d:bc:94:5f:3f:4d:26:d6:51:32:bd: ed:97:e5:86:4f:39:e3:1e:83:1e:1e:43:3e:20:1d:c4:e9:7a: b6:85:7e:0e:bf:4d:42:6c:00:17:d7:e4:39:31:e4:68:f9:2d: dd:14:99:27:ba:7c:96:af:97:05:bf:5e:3d:ee:ea:36:b1:a0: 98:16:fe:ad:b9:16:0b:bf:46:e6:b2:86:e8:ab:e3:15:81:bf: 49:16:b8:da:a4:78:2e:22:f6:95:7a:1a:1e:f1:26:11:ba:9e: f4:5a:7e:61:f7:bc:4f:f5:12:e6:7d:5e:f6:7f:0d:b0:06:3b: fe:c9:60:3c:7b:4c:0e:e8:f8:d9:e8:16:06:e9:bb:6c:9e:df: 25:5b:1c:f7:86:ae:f4:f3:2a:34:21:9b:ba:79:e4:ec:5b:a8: 12:07:4b:71:fb:77:7b:66:46:f2:29:54:82:c9:d5:0c:8e:df: d2:a7:8f:67:9d:54:1e:4a:67:d5:94:5b:2d:4a:cd:e6:39:a0: c5:05:e6:a6:f0:68:ae:1f:f0:14:c3:32:d2:e2:c0:e3:f2:32: 3b:79:30:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwNzAyMTcyMTU1WhcNMjUwNzA5MTcyMTU1WjAYMRYwFAYD VQQDEw02ODY1NmFiMy05ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsZ2rHaCDH/Ft1t33D+b+GwWaaqz3yoDX0XJPq8kX4fWSYVXmbkwGg3V1JHk tkPES4ylQiYGnlH5kAXrZ2UOcWP9bMNuqjzbw2ASQDyWY6lsDIOWCeqSjLaW1PaP Q7JJ3ZDFGEHWBsbX1GZXXsHVkawh6pA46rbh+i/Zvu6IrX75DXe/rfxtv1bpFRoI D0vcJQonp8WMleXqBfATP7hVEc58ZJt085RZvriBdgNAkUrTrryY0qnZ114SshEU RSxemS57HQ0JyDUtDBUSsqriuo28S+Pxfz2HZDu87wkwM3YaL66Z4XKCDXVTdPa0 j1qlckcINbRulKGsazxVrFDpGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTeSMHA /Vrqe4ULg2TffLo0iS+2MB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw7FgIU8mN/AkBIlTUsVvhREzCASUR7J9xnbiVcNgw04bDBOBQ/Jxj UilNPbyUXz9NJtZRMr3tl+WGTznjHoMeHkM+IB3E6Xq2hX4Ov01CbAAX1+Q5MeRo +S3dFJknunyWr5cFv1497uo2saCYFv6tuRYLv0bmsoboq+MVgb9JFrjapHguIvaV ehoe8SYRup70Wn5h97xP9RLmfV72fw2wBjv+yWA8e0wO6PjZ6BYG6btsnt8lWxz3 hq708yo0IZu6eeTsW6gSB0tx+3d7ZkbyKVSCydUMjt/Sp49nnVQeSmfVlFstSs3m OaDFBeam8GiuH/AUwzLS4sDj8jI7eTBh -----END CERTIFICATE-----Generated at Thu Jul 3 00:52:09 2025 by rpki-client