$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: s21J8zVaIFcmCWY9zGMhmgaU86PTjE0cZ/3vWsTkKoI= Subject key identifier: FB:B4:A9:81:8D:18:B4:EC:2A:EC:EC:FD:3C:26:F2:42:82:51:A4:99 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 0922 Signing time: Fri 08 Aug 2025 20:35:29 +0000 Manifest this update: Fri 08 Aug 2025 20:35:29 +0000 Manifest next update: Fri 15 Aug 2025 20:35:29 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: lPHgjhSDl7U680Jihm4s2ZmYNjgu/5yMsU37sn8xZqE=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Aug 8 20:35:29 2025 GMT Not After : Aug 15 20:35:29 2025 GMT Subject: CN=68965f91-5ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:c4:85:1e:c1:81:67:de:89:9f:fd:a2:ba: bf:03:af:1e:8c:58:90:2a:e0:f3:f5:a1:86:3f:59: 90:5a:5f:c9:28:1e:5a:84:d3:8f:0c:73:a3:9b:36: db:fd:04:e0:ff:b0:7c:b2:84:a9:6f:14:f7:10:1a: 53:ff:31:2e:23:03:30:70:e7:b6:f5:39:5f:25:fa: 29:30:0f:3e:90:3d:09:26:f7:fb:9e:55:93:cb:60: 91:da:02:03:fc:8d:07:6d:98:b4:4f:11:d3:b3:de: d1:f1:71:a9:68:1b:37:54:fa:35:ab:7e:2b:3e:3f: f8:fc:08:9a:a8:d1:24:fd:b3:3a:be:56:7f:8e:be: aa:98:e4:b8:c8:a0:72:e9:61:34:28:14:3c:f1:a5: 49:3c:2b:7a:ab:3d:21:cc:ed:15:0e:5c:0c:df:24: 1f:d6:a3:30:5e:93:39:65:98:89:b7:3a:01:2d:7b: 97:ff:20:1c:04:8f:5e:0f:d5:9a:dd:65:e4:bb:a4: 4c:3d:31:ed:f8:ad:6f:ae:2a:30:5b:ca:2e:b6:2b: 58:1a:b8:8c:64:24:14:b1:06:8a:b8:fc:d0:81:a0: f5:b3:87:6c:da:b7:ee:64:14:ca:d8:98:8d:46:ed: f8:26:fb:ea:55:3f:75:3e:2f:47:7e:9f:b3:32:ae: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B4:A9:81:8D:18:B4:EC:2A:EC:EC:FD:3C:26:F2:42:82:51:A4:99 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:ae:86:02:f6:53:86:5f:b7:45:9e:1c:4e:63:a2:b8:b5: 11:30:cb:74:ab:1f:bc:9f:3e:60:da:7a:66:7c:19:5c:7c:87: a7:0b:fb:0c:d6:36:06:b7:81:96:aa:d1:2f:54:b8:1a:87:7c: 94:4e:6a:54:04:ad:50:9f:20:f7:ef:a9:06:33:d5:1e:65:fe: b5:ef:0b:48:9f:cb:35:d1:0f:9d:2c:54:4a:e3:49:7c:d2:4e: 5d:f4:9e:cf:cc:8a:0b:3c:65:d5:19:da:be:dc:5c:fa:94:3c: 60:37:ab:7f:7e:15:dc:be:2a:50:a0:2c:a1:43:1c:89:0a:7a: 5e:85:1c:ab:73:0f:8a:3a:cd:42:3a:37:41:77:68:65:ea:4e: f1:7f:8f:8a:a0:8d:1b:e0:0c:36:95:8f:a3:db:4b:8d:f0:e8: 8b:83:34:35:70:70:e4:1e:69:bf:d1:ba:6e:88:66:c9:41:4b: be:34:9a:0e:3f:2d:2d:09:46:0b:7e:d8:ef:73:82:cd:2d:ee: fb:7c:72:f7:4a:6d:3d:28:c0:58:d6:32:ea:5f:8d:cd:76:60: a4:1e:74:61:cb:8c:eb:95:94:95:90:a7:4a:c6:dc:1c:b9:f2: ea:13:47:b9:a5:e0:09:b3:72:e0:f7:1d:2a:b6:62:41:db:98: aa:8d:d6:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUwODA4MjAzNTI5WhcNMjUwODE1MjAzNTI5WjAYMRYwFAYD VQQDEw02ODk2NWY5MS01YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx17EhR7BgWfeiZ/9orq/A68ejFiQKuDz9aGGP1mQWl/JKB5ahNOPDHOjmzbb /QTg/7B8soSpbxT3EBpT/zEuIwMwcOe29TlfJfopMA8+kD0JJvf7nlWTy2CR2gID /I0HbZi0TxHTs97R8XGpaBs3VPo1q34rPj/4/AiaqNEk/bM6vlZ/jr6qmOS4yKBy 6WE0KBQ88aVJPCt6qz0hzO0VDlwM3yQf1qMwXpM5ZZiJtzoBLXuX/yAcBI9eD9Wa 3WXku6RMPTHt+K1vriowW8outitYGriMZCQUsQaKuPzQgaD1s4ds2rfuZBTK2JiN Ru34JvvqVT91Pi9Hfp+zMq7rXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu0qYGN GLTsKuzs/Twm8kKCUaSZMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaz66GAvZThl+3RZ4cTmOiuLURMMt0qx+8nz5g2npmfBlcfIenC/sM 1jYGt4GWqtEvVLgah3yUTmpUBK1QnyD376kGM9UeZf617wtIn8s10Q+dLFRK40l8 0k5d9J7PzIoLPGXVGdq+3Fz6lDxgN6t/fhXcvipQoCyhQxyJCnpehRyrcw+KOs1C OjdBd2hl6k7xf4+KoI0b4Aw2lY+j20uN8OiLgzQ1cHDkHmm/0bpuiGbJQUu+NJoO Py0tCUYLftjvc4LNLe77fHL3Sm09KMBY1jLqX43NdmCkHnRhy4zrlZSVkKdKxtwc ufLqE0e5peAJs3Lg9x0qtmJB25iqjdZX -----END CERTIFICATE-----Generated at Sun Aug 10 13:55:33 2025 by rpki-client