$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: 9q92S5NE6CQQ4Xlq0YZUMPsNmbzwGJNKzH9wUKbIvZs= Subject key identifier: 40:19:EC:E6:8D:73:07:98:DA:E5:DB:6A:85:16:54:95:D4:69:39:17 Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 0E Signing time: Tue 01 Jul 2025 08:54:20 +0000 Manifest this update: Tue 01 Jul 2025 08:54:19 +0000 Manifest next update: Tue 08 Jul 2025 08:54:19 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: neG1XKUsOF82A3362xpRC+FkW7lYg4Afr/9CPzYTrGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Jul 1 08:54:19 2025 GMT Not After : Jul 8 08:54:19 2025 GMT Subject: CN=6863a23b-85ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:40:cb:7b:17:f4:c7:44:9b:ef:71:33:61: 33:56:ae:d4:c0:97:65:00:75:1b:5d:62:d8:fc:f2: 95:3e:61:85:f8:5b:6e:c3:cf:8b:7e:54:80:73:72: c1:3d:59:e6:96:3f:c2:c8:9d:d8:22:be:8b:6c:e7: f3:41:80:3b:12:f9:5a:0e:b0:70:87:bb:4d:fb:10: 36:0e:84:66:3f:3f:2e:38:18:0b:31:45:1e:d5:6a: 3d:05:28:c4:7b:2f:1c:5b:58:99:f3:7f:66:0b:36: b2:21:68:67:33:53:6d:09:a1:ec:18:05:97:15:ac: 79:0c:6f:77:05:a9:5f:1f:8f:12:d5:5c:99:71:cf: 99:7b:07:1e:0f:df:07:52:6b:24:fe:77:66:1f:c1: 84:91:b6:33:b5:b6:b0:80:86:5e:3d:d0:21:03:62: 90:66:b6:54:7d:b1:c1:30:5c:a5:6a:f4:40:89:0e: c2:f7:86:ea:8c:94:b4:95:74:6d:22:29:8e:6a:a8: a9:ca:c2:3c:47:20:12:6a:26:67:ab:71:ca:03:29: 74:5d:0b:82:5a:5b:91:83:2e:92:88:e6:bc:17:fc: a3:35:0a:f2:f1:ce:4e:c9:97:9c:44:be:5c:3e:5a: aa:44:26:32:34:65:ea:22:a6:6b:0a:97:31:10:b6: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:19:EC:E6:8D:73:07:98:DA:E5:DB:6A:85:16:54:95:D4:69:39:17 X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:61:f9:ad:f9:2d:a0:22:a6:84:ed:b8:cb:d8:cc:d4:99:69: d2:b2:b6:26:e3:c0:73:9b:6a:6a:e4:9c:7c:5c:e3:60:31:e6: 53:3e:18:ae:e7:d4:ba:7c:1f:d6:e4:9e:5b:07:44:ec:3a:7e: 10:c3:0c:35:1e:52:ad:77:57:c8:57:32:b4:b3:e2:b2:93:75: 30:2a:56:bd:65:5f:df:7e:46:d4:5f:f4:c1:a6:44:a1:a5:7f: 45:05:25:56:5e:27:47:14:ca:85:aa:dd:71:32:d4:19:f4:b8: 8c:5c:29:3c:45:e0:29:52:c8:c3:c5:c6:a8:63:db:cf:1f:f6: b0:6a:98:c1:48:0d:a5:c6:18:68:06:4e:32:cb:89:22:89:c6: f9:e4:31:33:61:a4:d7:d0:e7:3f:ef:c4:e2:9e:a7:3e:d5:2a: db:d4:2f:95:dc:26:f6:d7:41:38:8a:3a:38:0a:b0:c1:0a:ce: 21:86:6d:86:92:38:98:2d:74:26:9d:84:e9:07:85:5a:fc:7f: 2f:e7:2b:0e:15:4c:c5:44:bb:4d:b0:18:3a:e8:4a:bb:a4:27: 55:40:da:ac:45:24:f4:4e:bb:ef:2c:b7:a6:f5:cc:f6:f8:1e: 28:c3:6d:ed:c6:5f:48:b3:85:c5:8e:6d:06:2b:2f:5d:be:cf: c6:40:12:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTA3MDEwODU0MTlaFw0yNTA3MDgwODU0MTlaMBgxFjAUBgNV BAMTDTY4NjNhMjNiLTg1YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLQUDLexf0x0Sb73EzYTNWrtTAl2UAdRtdYtj88pU+YYX4W27Dz4t+VIBzcsE9 WeaWP8LIndgivots5/NBgDsS+VoOsHCHu037EDYOhGY/Py44GAsxRR7Vaj0FKMR7 LxxbWJnzf2YLNrIhaGczU20JoewYBZcVrHkMb3cFqV8fjxLVXJlxz5l7Bx4P3wdS ayT+d2YfwYSRtjO1trCAhl490CEDYpBmtlR9scEwXKVq9ECJDsL3huqMlLSVdG0i KY5qqKnKwjxHIBJqJmerccoDKXRdC4JaW5GDLpKI5rwX/KM1CvLxzk7Jl5xEvlw+ WqpEJjI0ZeoipmsKlzEQto15AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQBns5o1z B5ja5dtqhRZUldRpORcwHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJh+a35LaAipoTtuMvYzNSZadKytibjwHObamrknHxc42Ax5lM+GK7n 1Lp8H9bknlsHROw6fhDDDDUeUq13V8hXMrSz4rKTdTAqVr1lX99+RtRf9MGmRKGl f0UFJVZeJ0cUyoWq3XEy1Bn0uIxcKTxF4ClSyMPFxqhj288f9rBqmMFIDaXGGGgG TjLLiSKJxvnkMTNhpNfQ5z/vxOKepz7VKtvUL5XcJvbXQTiKOjgKsMEKziGGbYaS OJgtdCadhOkHhVr8fy/nKw4VTMVEu02wGDroSrukJ1VA2qxFJPROu+8st6b1zPb4 HijDbe3GX0izhcWObQYrL12+z8ZAEvg= -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:13 2025 by rpki-client