$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: 3H/SpbvG82czQfR0Ri1pAZY6r1WSZoJLqhvFotfzwZM= Subject key identifier: B5:D1:AE:54:73:33:C0:E4:B9:59:46:A4:4E:A9:F4:FE:9B:90:BB:45 Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: 8F Signing time: Thu 07 Aug 2025 07:06:43 +0000 Manifest this update: Thu 07 Aug 2025 07:06:43 +0000 Manifest next update: Thu 14 Aug 2025 07:06:43 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: RhfkajYoCz1DorsWzKciNoagclc2K1WvujUubDINFE0=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: vRtRviaQ6XNpWyRhEwggmiLTt0iFQyzvKucYtEN77kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Aug 7 07:06:43 2025 GMT Not After : Aug 14 07:06:43 2025 GMT Subject: CN=68945083-cac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:e0:b2:54:4c:52:03:ee:e6:3c:2c:a4:94: 3a:bc:7a:99:c3:47:03:a6:66:32:b1:d0:0c:b5:95: 1c:4d:f0:c5:38:90:26:cb:f5:64:9d:ea:90:90:58: 69:f2:ad:67:f3:e2:98:a8:0d:40:a8:8e:4c:3a:c8: fa:43:04:01:ae:f3:a6:ed:c4:2c:72:ab:6f:3f:7b: df:6d:c1:61:79:97:0c:0e:5b:97:45:de:0c:f1:e1: 00:d7:08:8d:f1:dd:bd:93:0f:66:35:6d:c4:b8:33: d7:36:e1:fb:07:d3:c4:91:e4:f4:b3:3f:46:ef:d5: 72:1c:30:b5:e6:37:00:f7:a8:eb:bf:79:b1:f4:69: bd:0a:c3:f1:7f:5c:cf:ee:d6:48:5a:83:12:7a:de: dc:eb:b3:94:41:a6:68:58:f9:e8:f2:08:2e:65:a2: 72:93:7e:1a:fc:8d:ec:3d:b7:1f:04:24:53:de:20: 5d:74:ff:ae:f0:68:d7:73:c1:d4:f6:82:ce:d5:3b: 0d:4e:42:46:52:ec:b2:31:0d:a1:9b:39:88:7b:64: f0:98:11:88:f8:ce:20:39:2a:07:7e:36:73:ee:c9: 33:a2:10:91:e8:25:ce:a3:55:b0:4b:77:60:a8:c5: 50:5d:bd:a2:7f:2e:91:3d:a9:3d:52:90:45:7b:da: f4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D1:AE:54:73:33:C0:E4:B9:59:46:A4:4E:A9:F4:FE:9B:90:BB:45 X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a7:f6:fd:88:bf:87:07:de:f4:d0:34:60:27:90:9b:fc:62: 43:22:45:7a:18:67:01:e1:e6:67:95:37:e9:0f:ea:72:27:fa: 3e:0d:84:5e:88:f0:bd:3a:eb:80:35:09:da:18:06:16:80:a7: 49:9d:ae:8e:9c:c9:d3:17:ea:85:31:77:3c:3c:77:5c:a5:d8: 85:1f:a9:d0:98:48:7b:90:ed:10:1f:fe:e9:e6:4b:52:f4:d2: 37:9c:bf:19:cd:ef:8c:6d:68:67:21:89:e1:8f:59:b7:4f:bb: ff:48:c8:ea:cd:31:e3:75:5f:fb:39:19:e1:58:96:16:bf:7d: a6:84:b5:0e:86:8b:87:25:14:4a:5d:60:92:f7:a1:5f:c9:2d: c6:fe:96:76:b0:ed:08:29:2c:33:0d:cb:b0:e0:5f:99:a7:a6: a8:4c:ed:91:55:73:d6:30:2f:e7:16:a2:15:66:a1:9d:3c:73: 79:0e:2b:a1:23:fd:59:20:d1:41:27:44:17:4b:e6:1d:52:75: b8:cf:e1:22:bf:f5:04:c2:42:7a:cd:6f:52:8d:58:ac:2f:b0: 6f:ed:cb:72:f6:a3:15:22:b2:18:c0:26:c1:bc:2a:e5:d3:8d: fe:43:f9:c8:54:28:7d:67:b2:a6:27:c9:c5:fb:cf:8a:dc:db: 8f:3d:6d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MzkxMTAvBgNVBAUTKDBDMUJDRTAyNEI0M0ZEREE4N0YzOTYxNUQ5OTRCQTM3 MDYyNDZDNTAwHhcNMjUwODA3MDcwNjQzWhcNMjUwODE0MDcwNjQzWjAYMRYwFAYD VQQDEw02ODk0NTA4My1jYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh3gslRMUgPu5jwspJQ6vHqZw0cDpmYysdAMtZUcTfDFOJAmy/VkneqQkFhp 8q1n8+KYqA1AqI5MOsj6QwQBrvOm7cQscqtvP3vfbcFheZcMDluXRd4M8eEA1wiN 8d29kw9mNW3EuDPXNuH7B9PEkeT0sz9G79VyHDC15jcA96jrv3mx9Gm9CsPxf1zP 7tZIWoMSet7c67OUQaZoWPno8gguZaJyk34a/I3sPbcfBCRT3iBddP+u8GjXc8HU 9oLO1TsNTkJGUuyyMQ2hmzmIe2TwmBGI+M4gOSoHfjZz7skzohCR6CXOo1WwS3dg qMVQXb2ify6RPak9UpBFe9r0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXRrlRz M8DkuVlGpE6p9P6bkLtFMB8GA1UdIwQYMBaAFAwbzgJLQ/3ah/OWFdmUujcGJGxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTczOS9DOTVEMzk3QzlG NTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9kcUg4NVlWMlpTNk53WWti RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTczOS9DOTVEMzk3QzlGNTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9k cUg4NVlWMlpTNk53WWtiRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbp/b9iL+HB9700DRgJ5Cb/GJDIkV6GGcB4eZnlTfpD+pyJ/o+DYRe iPC9OuuANQnaGAYWgKdJna6OnMnTF+qFMXc8PHdcpdiFH6nQmEh7kO0QH/7p5ktS 9NI3nL8Zze+MbWhnIYnhj1m3T7v/SMjqzTHjdV/7ORnhWJYWv32mhLUOhouHJRRK XWCS96FfyS3G/pZ2sO0IKSwzDcuw4F+Zp6aoTO2RVXPWMC/nFqIVZqGdPHN5Diuh I/1ZINFBJ0QXS+YdUnW4z+Eiv/UEwkJ6zW9SjVisL7Bv7cty9qMVIrIYwCbBvCrl 043+Q/nIVCh9Z7KmJ8nF+8+K3NuPPW0M -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:36 2025 by rpki-client