$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: G2kZUFZ8c6lbTJ62JybDX98mH0dR9CIp7gEakpEzhcc= Subject key identifier: E4:1E:A9:F4:42:A9:77:2E:4E:52:5F:6E:B5:9E:D9:F8:FF:6A:C2:ED Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01EA Signing time: Tue 05 Aug 2025 03:23:59 +0000 Manifest this update: Tue 05 Aug 2025 03:23:58 +0000 Manifest next update: Tue 12 Aug 2025 03:23:58 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: W34Zgj64lOJHqrPdIRJ5PWZBvXKmU/xoe0zVjCnI2K4=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Aug 5 03:23:58 2025 GMT Not After : Aug 12 03:23:58 2025 GMT Subject: CN=6891794e-df8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:d0:b9:f9:73:64:a8:f6:b5:1c:71:17:93: 27:47:0a:b1:12:d7:d4:a1:26:4f:83:20:1a:f4:7a: 01:26:a0:b9:67:93:2d:8e:bb:15:52:72:74:6a:64: bf:fd:27:37:7c:cb:f3:0f:f1:bc:4c:66:d6:9d:d4: ca:9f:b6:e9:ee:4d:45:d6:d2:ac:91:85:e0:3e:12: bf:73:cf:95:85:fc:cb:c3:2b:ca:c8:50:f6:39:db: 11:bb:02:f3:2f:45:c3:04:2c:fd:20:ab:db:3d:35: 52:88:3a:29:f0:f1:81:17:58:11:ec:52:35:4a:56: b8:37:f9:07:90:82:a4:fb:28:01:f7:f2:4f:bf:08: 61:69:15:62:75:ca:a2:67:fd:d9:de:8d:ea:f0:e5: 02:ca:ce:dd:0c:be:5e:5e:2b:72:d3:64:6c:ad:77: 4d:02:eb:4f:88:9a:c0:3d:55:a4:13:df:97:3c:c1: ff:30:9a:25:64:7f:e7:1b:2d:4e:ee:ad:2e:ad:2c: 4f:0c:a6:64:aa:9e:f2:14:13:ed:d5:9a:82:68:8b: 2b:73:fe:a8:5a:07:07:a3:df:39:0b:4e:17:7b:ae: e9:90:e0:1b:3d:8e:b2:09:62:c8:fa:69:70:d2:5e: 20:85:a5:a5:9c:cc:11:c7:78:7a:c5:28:7c:0a:df: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:A9:F4:42:A9:77:2E:4E:52:5F:6E:B5:9E:D9:F8:FF:6A:C2:ED X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:dd:12:73:06:7f:bb:6f:7a:f0:66:dc:8d:3b:90:9d:fe:a7: 8c:ee:b9:e2:1c:6b:de:81:e5:a1:f8:e0:71:51:8c:ae:a7:ef: e6:c3:10:43:b1:61:3f:8d:44:61:b4:37:68:6c:9f:10:35:07: aa:6c:cf:4f:fd:0c:b4:33:d9:81:ab:68:32:c7:61:13:cf:2e: 25:88:94:77:20:1e:8d:5a:70:be:4b:93:9f:b5:e1:2e:59:ae: ee:54:33:24:46:7b:75:04:17:7a:1b:60:45:0d:39:10:d6:25: 8b:8e:c1:e9:42:6c:12:91:04:d3:57:a8:7b:fb:cc:4b:ef:d5: 46:66:41:53:5f:72:e7:07:fb:ef:5a:e1:5a:50:d1:d5:92:64: 1f:d5:04:a5:3e:82:7e:d2:2b:8f:68:52:29:df:0b:d3:18:8c: 13:33:18:34:04:33:f5:a7:88:a4:ae:0b:a8:da:55:d0:14:da: 18:18:47:f8:66:89:bc:22:e8:c6:58:6f:bc:a7:2a:32:97:da: 20:60:35:7d:28:02:8e:00:7f:7f:fb:86:77:4b:63:7e:fb:54: 9a:13:09:ba:87:5a:7c:57:67:30:68:52:fa:34:da:f7:ae:88: a9:41:7c:51:aa:0b:20:e2:4e:c3:e7:61:13:57:46:7d:da:85: 35:19:88:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwODA1MDMyMzU4WhcNMjUwODEyMDMyMzU4WjAYMRYwFAYD VQQDEw02ODkxNzk0ZS1kZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNvQuflzZKj2tRxxF5MnRwqxEtfUoSZPgyAa9HoBJqC5Z5MtjrsVUnJ0amS/ /Sc3fMvzD/G8TGbWndTKn7bp7k1F1tKskYXgPhK/c8+VhfzLwyvKyFD2OdsRuwLz L0XDBCz9IKvbPTVSiDop8PGBF1gR7FI1Sla4N/kHkIKk+ygB9/JPvwhhaRVidcqi Z/3Z3o3q8OUCys7dDL5eXity02RsrXdNAutPiJrAPVWkE9+XPMH/MJolZH/nGy1O 7q0urSxPDKZkqp7yFBPt1ZqCaIsrc/6oWgcHo985C04Xe67pkOAbPY6yCWLI+mlw 0l4ghaWlnMwRx3h6xSh8Ct/bmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQeqfRC qXcuTlJfbrWe2fj/asLtMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3RJzBn+7b3rwZtyNO5Cd/qeM7rniHGvegeWh+OBxUYyup+/mwxBD sWE/jURhtDdobJ8QNQeqbM9P/Qy0M9mBq2gyx2ETzy4liJR3IB6NWnC+S5OfteEu Wa7uVDMkRnt1BBd6G2BFDTkQ1iWLjsHpQmwSkQTTV6h7+8xL79VGZkFTX3LnB/vv WuFaUNHVkmQf1QSlPoJ+0iuPaFIp3wvTGIwTMxg0BDP1p4ikrguo2lXQFNoYGEf4 Zom8IujGWG+8pyoyl9ogYDV9KAKOAH9/+4Z3S2N++1SaEwm6h1p8V2cwaFL6NNr3 roipQXxRqgsg4k7D52ETV0Z92oU1GYhR -----END CERTIFICATE-----Generated at Wed Aug 6 07:51:58 2025 by rpki-client