$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json) Hash identifier: a/C+AAGE9KFsui7WjDffWGq+3VTst6iuxzoF4+HIs6E= Subject key identifier: B8:2F:68:5B:76:E3:F8:40:E6:50:74:F2:5F:2F:A3:73:05:80:56:7D Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4 Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft Manifest number: 0732 Signing time: Fri 08 Aug 2025 22:10:38 +0000 Manifest this update: Fri 08 Aug 2025 22:10:37 +0000 Manifest next update: Fri 15 Aug 2025 22:10:37 +0000 Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: vg6CNQRIHUy9mgj6qjWj6Z6cPQgcccfkYWpgaYJHMTU=) 2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: Vr7eqcQZAVOzBkNtRv4RGA5ST9LjW4Xtker8ajEEVvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112BDE, serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4 Validity Not Before: Aug 8 22:10:37 2025 GMT Not After : Aug 15 22:10:37 2025 GMT Subject: CN=689675dd-bf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:85:68:56:af:3f:f2:e6:ec:cd:0b:85:8c: eb:ce:68:4d:a8:4b:d5:d8:df:5c:56:5a:3e:84:c4: b6:b2:af:89:86:0f:ff:4d:32:6e:e6:16:20:13:80: 83:86:cb:3f:3d:9f:18:d0:33:39:13:67:c6:f2:e6: ca:90:a7:82:ce:7b:eb:50:09:1f:83:3a:5b:84:db: 1a:e7:83:52:5d:4e:f1:bb:27:bc:4a:67:16:26:a0: e1:f0:d4:c0:3f:d9:38:c9:e3:f8:0d:42:90:7f:5b: ca:85:ec:32:ba:04:d6:f5:0a:e5:aa:5a:82:c3:0a: a8:78:98:6d:81:a5:c4:69:dd:e8:c9:42:a2:e1:b4: 13:f8:cf:3c:0d:27:39:15:f9:3e:c4:90:aa:55:7c: 81:bb:1e:89:14:5d:fc:42:4d:6a:f7:6d:9f:1a:f0: 75:7e:92:43:2c:c6:f6:19:e9:45:20:5a:22:20:3f: 3b:e9:31:70:d3:8c:60:24:9b:d5:a3:04:e0:74:25: e5:33:e9:c3:12:6a:3a:5d:d2:c8:fc:38:02:51:d6: 70:88:78:b2:89:05:bb:05:5a:61:b3:fd:cf:46:9c: 09:03:8f:b0:2b:87:3c:07:1e:05:c8:1b:6d:91:15: 8a:b3:9a:73:28:32:fc:c0:c8:c9:0a:de:45:60:13: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:68:5B:76:E3:F8:40:E6:50:74:F2:5F:2F:A3:73:05:80:56:7D X509v3 Authority Key Identifier: keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:ba:da:d5:23:b8:23:d2:4f:aa:95:a9:bd:eb:c4:98:31: 0e:85:fd:5e:e0:44:d7:62:ce:f5:8c:e2:db:37:f9:f3:56:2d: 8b:0a:b5:e9:20:54:94:8e:ea:56:4a:93:be:7e:b1:68:0b:a3: 62:9a:43:2b:4f:d2:64:fa:3c:3a:f3:98:a7:a1:76:db:fa:8e: cb:f0:17:16:1a:8c:50:8e:67:79:67:ea:46:30:94:6e:51:3d: b3:8c:2c:4d:6c:e1:50:04:96:df:b7:db:c3:9c:1a:3f:a8:3e: fe:b2:01:8d:55:37:da:6f:07:f5:a9:ad:b3:52:61:57:77:5a: 9c:2d:b7:d6:f3:e6:28:10:e7:9f:32:91:05:34:03:74:54:0d: 09:8a:20:d7:59:c2:fe:98:c5:08:5c:b8:fe:99:ab:b3:0d:29: b6:f6:61:8f:d2:34:96:4a:bd:6f:85:ae:a6:01:b8:da:6c:39: 78:07:86:8b:94:57:83:8c:27:3e:e4:87:64:9f:d1:33:3c:02: c0:28:16:fb:44:4a:fa:3f:a3:47:87:06:5f:c0:b6:85:2a:46: e2:bf:93:20:cf:de:2b:25:84:36:ef:5a:93:72:f5:2f:5d:6e: de:cc:cd:56:fe:5f:f8:8f:74:ad:be:bf:35:a4:96:f1:58:0d: d0:0c:34:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCREUxMTAvBgNVBAUTKDBEMDM0NkM4QTI2NkJFNkFEQ0U0QjdFODM5NTBBRjVG RTFFQkU1QzQwHhcNMjUwODA4MjIxMDM3WhcNMjUwODE1MjIxMDM3WjAYMRYwFAYD VQQDEw02ODk2NzVkZC1iZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05qFaFavP/Lm7M0LhYzrzmhNqEvV2N9cVlo+hMS2sq+Jhg//TTJu5hYgE4CD hss/PZ8Y0DM5E2fG8ubKkKeCznvrUAkfgzpbhNsa54NSXU7xuye8SmcWJqDh8NTA P9k4yeP4DUKQf1vKhewyugTW9QrlqlqCwwqoeJhtgaXEad3oyUKi4bQT+M88DSc5 Ffk+xJCqVXyBux6JFF38Qk1q922fGvB1fpJDLMb2GelFIFoiID876TFw04xgJJvV owTgdCXlM+nDEmo6XdLI/DgCUdZwiHiyiQW7BVphs/3PRpwJA4+wK4c8Bx4FyBtt kRWKs5pzKDL8wMjJCt5FYBMl/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgvaFt2 4/hA5lB08l8vo3MFgFZ9MB8GA1UdIwQYMBaAFA0DRsiiZr5q3OS36DlQr1/h6+XE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkJERS81RTEyOEZGQzNF N0QxMUVCQkJFRjI3NENDNEY5QUUwMi9EUU5HeUtKbXZtcmM1TGZvT1ZDdlgtSHI1 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RRTkd5S0ptdm1yYzVMZm9PVkN2WC1IcjVjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkJERS81RTEyOEZGQzNFN0QxMUVCQkJFRjI3NENDNEY5QUUwMi9EUU5HeUtKbXZt cmM1TGZvT1ZDdlgtSHI1Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4Lra1SO4I9JPqpWpvevEmDEOhf1e4ETXYs71jOLbN/nzVi2LCrXp IFSUjupWSpO+frFoC6NimkMrT9Jk+jw685inoXbb+o7L8BcWGoxQjmd5Z+pGMJRu UT2zjCxNbOFQBJbft9vDnBo/qD7+sgGNVTfabwf1qa2zUmFXd1qcLbfW8+YoEOef MpEFNAN0VA0JiiDXWcL+mMUIXLj+mauzDSm29mGP0jSWSr1vha6mAbjabDl4B4aL lFeDjCc+5Idkn9EzPALAKBb7REr6P6NHhwZfwLaFKkbiv5Mgz94rJYQ271qTcvUv XW7ezM1W/l/4j3Stvr81pJbxWA3QDDQ4 -----END CERTIFICATE-----Generated at Sat Aug 9 01:15:40 2025 by rpki-client