$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: abL19OEKjXnQwp744oYs05hO02pqU+r79XWVm+Mzcec= Subject key identifier: 49:F0:7D:AA:CE:28:7F:61:6D:D9:7B:DC:78:0A:2D:35:B5:1E:6F:BD Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 017A Signing time: Sat 09 Aug 2025 04:04:29 +0000 Manifest this update: Sat 09 Aug 2025 04:04:29 +0000 Manifest next update: Sat 16 Aug 2025 04:04:28 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: OK3WK9abI29Knict11ORHsBmcKVeRN3z7fha7G/cmQE=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: Aug 9 04:04:29 2025 GMT Not After : Aug 16 04:04:28 2025 GMT Subject: CN=6896c8cd-c425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:e4:e5:c5:5f:35:f5:34:d7:25:7d:8f:de: ba:ee:1a:2e:80:5a:4b:39:f4:58:da:e0:a4:da:2d: c5:7f:74:d8:b3:7c:ed:bc:6e:78:ee:18:14:d4:3a: 4b:8f:b3:f0:45:19:8c:c9:95:25:6f:07:d9:06:44: 96:ca:84:ea:74:8c:8d:e7:ee:7a:a8:32:f8:d7:12: 88:c0:f4:fe:a2:cb:e8:57:f8:45:57:71:89:99:ab: 05:09:23:3f:e7:74:78:81:cb:52:73:b6:25:d7:7e: 69:85:c8:83:fa:06:58:fb:71:63:27:0f:38:d3:46: 97:5a:db:5c:76:fa:3f:5a:48:7f:82:7a:3e:e1:50: 47:a9:26:e9:cb:0a:6e:1c:68:c0:16:63:1c:52:b8: 79:0c:33:15:4a:c1:f6:8d:4a:3c:1b:ce:9b:23:f3: 71:e5:e9:01:f9:87:da:b6:f7:7d:2c:2a:39:b5:e1: 10:20:18:b0:e1:65:03:2b:91:83:5e:71:d1:de:13: a4:16:65:91:c5:7b:d0:45:0e:37:00:9f:79:8d:57: 9b:29:54:f8:d0:0d:f1:46:a8:0a:c1:d4:c0:ad:5f: 06:7a:b9:3c:65:eb:51:62:ef:ca:5e:40:7e:49:e2: 2e:88:62:05:d0:72:6f:27:75:60:39:41:9f:1e:fe: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:7D:AA:CE:28:7F:61:6D:D9:7B:DC:78:0A:2D:35:B5:1E:6F:BD X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:38:4d:29:05:ab:c7:0a:01:5a:b7:f4:fe:34:28:cc:d4:5b: 32:15:c4:02:2e:47:e0:09:a1:20:58:59:76:0e:72:dd:56:31: 41:95:dd:f4:a2:23:b0:ce:6c:d6:01:49:e4:b4:8d:f7:7d:e1: f7:82:ec:a7:d1:24:32:00:de:c4:62:b6:d5:2b:10:92:8b:06: 04:04:3c:a3:3d:4d:39:c9:45:89:08:01:e5:69:72:ad:12:ff: 84:09:d2:30:50:c1:4a:69:6e:63:19:91:7f:ce:3d:03:31:33: a2:b8:a8:c4:11:a6:f1:1d:b5:ad:1a:dc:e2:bf:d8:56:61:34: 42:f0:cb:54:ae:8c:76:07:87:9b:48:33:1e:c4:bb:ff:b3:ca: 28:1a:36:87:d1:7e:78:f8:79:6f:2d:8e:8a:2e:af:b2:41:e9: a5:d4:20:b1:e4:ca:39:62:2d:c0:06:c7:cd:31:05:35:17:9f: a4:03:15:e4:e7:5e:b4:a8:f7:cb:bc:6b:c8:42:10:a1:e1:94: 9a:f7:14:cb:67:7a:74:cd:2b:e0:8b:09:a0:a4:9e:a0:01:d4: 49:0c:be:20:08:06:59:88:51:60:b5:bf:94:ae:2e:4d:dd:1d: f8:8b:ae:51:7e:bf:dd:3d:82:8c:ab:27:b9:61:9a:fd:b4:7b: 89:21:2f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjUwODA5MDQwNDI5WhcNMjUwODE2MDQwNDI4WjAYMRYwFAYD VQQDEw02ODk2YzhjZC1jNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUXk5cVfNfU01yV9j9667hougFpLOfRY2uCk2i3Ff3TYs3ztvG547hgU1DpL j7PwRRmMyZUlbwfZBkSWyoTqdIyN5+56qDL41xKIwPT+osvoV/hFV3GJmasFCSM/ 53R4gctSc7Yl135phciD+gZY+3FjJw8400aXWttcdvo/Wkh/gno+4VBHqSbpywpu HGjAFmMcUrh5DDMVSsH2jUo8G86bI/Nx5ekB+Yfatvd9LCo5teEQIBiw4WUDK5GD XnHR3hOkFmWRxXvQRQ43AJ95jVebKVT40A3xRqgKwdTArV8Gerk8ZetRYu/KXkB+ SeIuiGIF0HJvJ3VgOUGfHv6BiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnwfarO KH9hbdl73HgKLTW1Hm+9MB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHOE0pBavHCgFat/T+NCjM1FsyFcQCLkfgCaEgWFl2DnLdVjFBld30 oiOwzmzWAUnktI33feH3guyn0SQyAN7EYrbVKxCSiwYEBDyjPU05yUWJCAHlaXKt Ev+ECdIwUMFKaW5jGZF/zj0DMTOiuKjEEabxHbWtGtziv9hWYTRC8MtUrox2B4eb SDMexLv/s8ooGjaH0X54+HlvLY6KLq+yQeml1CCx5Mo5Yi3ABsfNMQU1F5+kAxXk 5160qPfLvGvIQhCh4ZSa9xTLZ3p0zSvgiwmgpJ6gAdRJDL4gCAZZiFFgtb+Uri5N 3R34i65Rfr/dPYKMqye5YZr9tHuJIS9T -----END CERTIFICATE-----Generated at Sun Aug 10 05:45:01 2025 by rpki-client