$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: byqaAHOmQsph/PayDTOki9QMKtTZUNj3QX/Mb5mV7Cg= Subject key identifier: F0:D9:9C:93:E6:D1:7D:0F:F3:E0:04:4B:DD:C7:2A:3D:65:C1:5D:9C Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 021B Signing time: Thu 07 Aug 2025 02:42:03 +0000 Manifest this update: Thu 07 Aug 2025 02:42:02 +0000 Manifest next update: Thu 14 Aug 2025 02:42:02 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: OJm0dSZqMWMbD1aU0gletA9Ilf99fHa2zQ6MS5UyTUg=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Aug 7 02:42:02 2025 GMT Not After : Aug 14 02:42:02 2025 GMT Subject: CN=6894127a-34c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bd:8a:0c:36:a9:9e:23:82:48:09:ea:ad:51: 84:74:d9:30:eb:4b:84:14:1d:e5:32:37:4a:5c:30: f0:19:a2:1d:86:ad:3b:26:71:72:ac:d1:4e:c9:ac: d8:d9:b4:cb:ce:18:b8:60:04:75:2e:c1:87:ce:24: 3e:e1:de:20:4f:e1:47:e5:4d:a6:7b:03:1f:75:e7: a7:61:10:96:d3:2c:61:e3:b0:3c:a7:3d:21:a8:46: 2e:f0:9a:d1:88:be:82:e6:f3:26:dd:bd:7b:56:03: 2a:4f:32:3c:14:20:bf:6a:be:34:ae:2d:5e:0f:56: 30:c4:c8:19:fc:16:9b:8b:01:68:68:6a:f3:66:e1: 2d:e9:31:2c:4f:6a:f8:c1:73:a5:4e:0b:6e:b8:bc: 67:6a:d0:53:c9:b0:26:d7:d5:6b:25:c4:e6:0c:27: db:02:16:e1:b0:8b:70:89:d3:61:c9:0f:6c:8d:45: 92:0a:74:1e:3d:42:2f:e8:b5:05:92:58:ff:bd:98: 00:f0:81:1f:bd:dd:0a:d2:1d:94:b2:95:1a:c1:a0: f3:cf:23:8e:e1:22:6b:df:b5:3a:e7:7f:30:2e:56: 78:b3:a4:55:74:13:84:8c:88:be:2d:f7:05:89:3a: 06:b9:a5:58:fc:d4:34:40:0e:92:b7:7d:b7:9f:dd: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:9C:93:E6:D1:7D:0F:F3:E0:04:4B:DD:C7:2A:3D:65:C1:5D:9C X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:24:af:8c:6a:ba:ee:5b:23:4d:c8:d7:bf:78:9b:4e:8c:f4: a9:ff:df:f0:77:2f:bb:1f:4e:7c:df:a6:29:57:e7:65:2a:3f: c3:19:cb:6d:e8:1a:be:3c:ca:3b:f5:b6:ec:0b:ab:cf:9e:9b: fd:12:73:40:f3:b7:b6:01:f3:36:9a:d6:2e:5b:54:9b:e2:10: 13:8f:54:02:3b:5f:ed:4a:69:ed:3f:6c:8e:56:75:f1:28:5f: db:53:42:1f:25:90:53:ff:0b:4c:9c:f6:36:ef:c8:d2:09:bf: 69:77:a6:9d:b4:53:09:56:8c:17:2f:00:89:7a:fe:1e:a3:82: f1:e6:5b:52:d8:14:ef:52:b7:2b:a9:85:86:49:9b:52:29:73: 44:5c:2c:ba:fc:ff:5c:86:ae:d2:c1:bf:89:d9:57:15:eb:d2: 89:87:eb:5e:de:76:e8:56:dd:05:ad:0e:8d:a9:ac:0d:41:c3: 5d:f8:68:c6:b9:0b:e7:7b:47:cc:77:f4:29:5e:1f:7b:c3:dd: 6a:6b:f4:0d:7c:b4:8a:89:5b:8c:a0:55:ea:14:e1:f8:1c:37: ae:27:fa:b7:c5:bf:9e:c2:16:cb:e6:6f:f8:c2:6a:7a:a8:f3: 7c:fb:54:d2:b7:2b:f6:c5:e3:79:38:bc:8c:33:43:1f:7b:e1: d0:f6:93:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwODA3MDI0MjAyWhcNMjUwODE0MDI0MjAyWjAYMRYwFAYD VQQDEw02ODk0MTI3YS0zNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA672KDDapniOCSAnqrVGEdNkw60uEFB3lMjdKXDDwGaIdhq07JnFyrNFOyazY 2bTLzhi4YAR1LsGHziQ+4d4gT+FH5U2mewMfdeenYRCW0yxh47A8pz0hqEYu8JrR iL6C5vMm3b17VgMqTzI8FCC/ar40ri1eD1YwxMgZ/BabiwFoaGrzZuEt6TEsT2r4 wXOlTgtuuLxnatBTybAm19VrJcTmDCfbAhbhsItwidNhyQ9sjUWSCnQePUIv6LUF klj/vZgA8IEfvd0K0h2UspUawaDzzyOO4SJr37U6538wLlZ4s6RVdBOEjIi+LfcF iToGuaVY/NQ0QA6St323n91ANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDZnJPm 0X0P8+AES93HKj1lwV2cMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnJK+MarruWyNNyNe/eJtOjPSp/9/wdy+7H05836YpV+dlKj/DGctt 6Bq+PMo79bbsC6vPnpv9EnNA87e2AfM2mtYuW1Sb4hATj1QCO1/tSmntP2yOVnXx KF/bU0IfJZBT/wtMnPY278jSCb9pd6adtFMJVowXLwCJev4eo4Lx5ltS2BTvUrcr qYWGSZtSKXNEXCy6/P9chq7Swb+J2VcV69KJh+te3nboVt0FrQ6NqawNQcNd+GjG uQvne0fMd/QpXh97w91qa/QNfLSKiVuMoFXqFOH4HDeuJ/q3xb+ewhbL5m/4wmp6 qPN8+1TStyv2xeN5OLyMM0Mfe+HQ9pNU -----END CERTIFICATE-----Generated at Thu Aug 7 14:45:06 2025 by rpki-client