$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: +O0lKKoyyWYRxN5mHqGS+l17ZminBq6ellHqCGcVHYM= Subject key identifier: B9:B0:56:08:91:AA:36:29:24:C0:C0:74:77:E8:E7:38:79:8A:51:05 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 2E Signing time: Tue 05 Aug 2025 08:21:44 +0000 Manifest this update: Tue 05 Aug 2025 08:21:43 +0000 Manifest next update: Tue 12 Aug 2025 08:21:43 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: CpGkWxklKXlqYZUf20Oeg/J6N/webnunhpSwZzFyY3c=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 4: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 7: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Aug 5 08:21:43 2025 GMT Not After : Aug 12 08:21:43 2025 GMT Subject: CN=6891bf18-58c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:47:63:64:0b:5a:7d:5f:9c:4e:7f:6f:23: 74:b0:c2:63:a8:89:8a:43:8a:44:96:5b:c4:8e:93: 7c:47:34:d3:81:c3:a6:75:c2:b0:07:4b:70:8f:b1: 15:60:2a:47:ee:65:ab:89:60:16:b4:1b:cc:0e:c4: 44:ef:bc:41:d2:b0:62:bc:d9:01:e6:dc:ce:68:45: c1:79:20:da:f4:76:7d:08:5c:b7:f2:a6:0e:5a:86: 50:9c:99:62:48:d0:12:e3:52:1b:c5:13:d6:83:34: 4c:46:43:21:3d:70:6a:47:35:91:a6:b2:77:d8:8b: 63:cf:48:24:75:1d:93:b6:66:53:5f:1a:ef:66:42: 16:a4:ac:8c:ab:0e:e7:ae:6f:df:55:4c:e5:c6:e8: 44:ae:a3:71:6c:66:ab:c1:44:f0:03:c6:db:c1:aa: 4d:5f:9c:d4:c6:3f:78:6a:e8:bb:24:95:3d:eb:57: 2c:aa:d5:e1:f7:c1:30:18:8b:6e:6a:e9:07:c7:78: c5:4e:e5:8a:b3:50:b3:c0:1a:df:19:3d:ec:a6:e4: 76:45:1f:c7:c8:d4:7c:27:23:bb:55:67:ac:06:94: e2:41:05:e0:20:00:5e:e4:38:3c:8c:8f:96:d5:b9: f1:75:33:19:d8:aa:37:52:4f:47:59:0c:99:4b:44: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:56:08:91:AA:36:29:24:C0:C0:74:77:E8:E7:38:79:8A:51:05 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:61:67:8b:cd:05:3c:c6:89:b5:7c:dc:8f:dc:30:7d:8b:dc: ce:a1:96:8c:e7:4b:ab:07:62:7a:81:43:21:5b:30:76:47:16: 9e:22:5a:28:d7:0e:7c:61:b3:3d:ec:da:f1:ff:15:da:e2:c2: 6c:a4:da:55:7a:f3:90:39:18:31:6f:e5:97:2e:cc:69:92:ce: 73:35:df:d2:19:0e:bf:64:6e:9f:e7:2f:58:67:29:e7:57:d3: f8:f0:c4:05:4f:09:90:67:50:c7:f7:68:04:63:5a:e6:ca:7f: dc:e5:51:4d:9a:7a:3f:28:10:9a:9b:94:f2:26:e9:32:10:48: e8:19:83:41:64:6a:ae:ab:45:b4:4a:a5:80:5f:76:8b:34:79: ef:13:34:40:26:49:b3:ab:a9:ea:11:fc:75:e4:4a:1d:1b:0e: 8d:af:a1:8f:05:d6:f7:7d:93:50:44:6b:e3:96:ee:a1:d9:f4: 73:9c:31:fd:c3:0d:7c:69:e4:3d:cf:5b:71:35:36:ae:e9:96: 52:0d:66:db:c5:58:64:be:4f:1f:83:ac:ab:4f:82:09:b5:9e: 83:4d:0f:0c:0f:ca:33:cc:7e:72:2c:41:66:19:e4:96:b3:c9: 85:52:b7:b2:f0:83:90:90:c2:45:f5:06:d9:32:4e:a2:24:12: 4b:4a:2c:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA4MDUwODIxNDNaFw0yNTA4MTIwODIxNDNaMBgxFjAUBgNV BAMTDTY4OTFiZjE4LTU4YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtuEdjZAtafV+cTn9vI3SwwmOoiYpDikSWW8SOk3xHNNOBw6Z1wrAHS3CPsRVg KkfuZauJYBa0G8wOxETvvEHSsGK82QHm3M5oRcF5INr0dn0IXLfypg5ahlCcmWJI 0BLjUhvFE9aDNExGQyE9cGpHNZGmsnfYi2PPSCR1HZO2ZlNfGu9mQhakrIyrDueu b99VTOXG6ESuo3FsZqvBRPADxtvBqk1fnNTGP3hq6LsklT3rVyyq1eH3wTAYi25q 6QfHeMVO5YqzULPAGt8ZPeym5HZFH8fI1HwnI7tVZ6wGlOJBBeAgAF7kODyMj5bV ufF1MxnYqjdST0dZDJlLRLLtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUubBWCJGq NikkwMB0d+jnOHmKUQUwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxhZ4vNBTzGibV83I/cMH2L3M6hloznS6sHYnqBQyFbMHZHFp4iWijX Dnxhsz3s2vH/Fdriwmyk2lV685A5GDFv5ZcuzGmSznM139IZDr9kbp/nL1hnKedX 0/jwxAVPCZBnUMf3aARjWubKf9zlUU2aej8oEJqblPIm6TIQSOgZg0Fkaq6rRbRK pYBfdos0ee8TNEAmSbOrqeoR/HXkSh0bDo2voY8F1vd9k1BEa+OW7qHZ9HOcMf3D DXxp5D3PW3E1Nq7pllINZtvFWGS+Tx+DrKtPggm1noNNDwwPyjPMfnIsQWYZ5Jaz yYVSt7Lwg5CQwkX1BtkyTqIkEktKLHM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:41:23 2025 by rpki-client