$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: Mfkbgt1ej7se6wx/8DCgh31PKN1uH1fyajdyodTWGgA= Subject key identifier: 96:32:FE:17:4F:68:3B:99:91:95:65:DB:B2:02:6F:46:F1:94:86:BF Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0352 Signing time: Sat 09 Aug 2025 01:32:31 +0000 Manifest this update: Sat 09 Aug 2025 01:32:30 +0000 Manifest next update: Sat 16 Aug 2025 01:32:30 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: 9NGwaDBRNNBdb2cZBkzcn9/MWjAu6vOJ5RaexU6/RZc=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Aug 9 01:32:30 2025 GMT Not After : Aug 16 01:32:30 2025 GMT Subject: CN=6896a52e-6c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:4d:fb:03:98:af:e5:63:f6:de:a6:8c:06: 81:4a:91:b6:ac:a0:b2:3b:30:95:2c:4d:ba:5e:94: 16:f4:00:18:5d:b9:7f:44:a3:56:92:db:b7:6d:a6: 97:65:2e:03:64:61:01:25:0c:6b:ae:4c:49:d6:27: c7:b7:db:bf:dd:1d:e3:e9:d9:40:b3:6e:d3:c9:11: ad:f3:a7:8d:69:63:8c:3b:14:f0:bd:a9:88:0f:2a: 61:60:29:15:ec:47:5b:aa:37:a8:e9:67:4a:7d:8d: e4:25:ed:9e:fa:50:2f:85:c7:c7:bf:27:69:41:46: 29:c0:fd:71:92:16:a5:4f:b4:0a:75:7a:ba:cd:9c: dc:0d:61:0a:5b:84:17:73:98:b2:04:dc:b5:70:85: f5:af:3f:5a:92:c8:06:91:9b:79:ba:c9:6d:4c:aa: d8:5d:2c:5d:a2:b6:33:47:0c:b2:12:a6:12:86:14: 70:9a:2d:2e:c3:d4:55:f0:9f:29:97:85:10:67:d6: 19:6c:a8:cf:fd:3b:ba:bc:dc:a3:ef:a1:c1:cb:a8: 9b:30:30:78:1e:38:32:a9:73:b6:aa:48:b2:26:79: 88:d5:d0:29:83:a7:88:0d:90:24:93:2e:57:4e:a6: 41:98:54:dc:45:cb:b9:06:77:b8:ee:84:97:77:0f: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:FE:17:4F:68:3B:99:91:95:65:DB:B2:02:6F:46:F1:94:86:BF X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8b:c4:6a:34:7a:f8:c1:37:ce:55:5d:3b:2e:8c:de:66:de: 7d:a7:b7:e2:5b:80:1f:df:e7:95:de:a1:3c:eb:bd:e0:5e:27: cb:0b:cb:77:9b:bf:b5:55:eb:ef:32:0e:e0:28:31:0f:79:32: 67:05:29:c1:e8:a6:70:8a:67:be:99:5a:71:7d:f1:46:40:5b: 70:96:cd:d2:80:8e:6c:81:8f:5b:83:07:3b:42:42:e4:18:0d: 72:79:f1:48:85:6b:28:36:ad:ce:31:a6:db:ee:be:01:b1:e6: 21:b7:a8:3e:c4:61:ad:fa:9b:18:75:64:34:4c:4c:86:dd:f1: 20:43:b7:75:c0:72:9b:65:9e:93:0d:ab:7e:f7:1e:c9:71:b7: a8:16:c4:67:a2:d2:c5:47:07:f5:b8:08:d8:1d:22:af:e9:1b: 7b:85:2a:f2:9c:bb:6b:5b:44:f6:54:ed:b0:de:a7:92:13:03: 5a:59:7d:ce:85:1e:47:0d:ee:3e:89:06:2f:8d:c6:18:a6:6e: a6:ad:85:f8:5b:20:2d:9c:9e:b3:91:9b:a6:1d:2d:51:c2:f0: 79:bb:90:b5:f7:8e:bb:ca:f2:9d:0a:64:20:1d:86:ff:dd:79: 99:bb:9b:69:9e:24:18:6a:7b:17:27:ee:55:64:6c:bd:4f:6c: 51:fc:8f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwODA5MDEzMjMwWhcNMjUwODE2MDEzMjMwWjAYMRYwFAYD VQQDEw02ODk2YTUyZS02YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kZN+wOYr+Vj9t6mjAaBSpG2rKCyOzCVLE26XpQW9AAYXbl/RKNWktu3baaX ZS4DZGEBJQxrrkxJ1ifHt9u/3R3j6dlAs27TyRGt86eNaWOMOxTwvamIDyphYCkV 7Edbqjeo6WdKfY3kJe2e+lAvhcfHvydpQUYpwP1xkhalT7QKdXq6zZzcDWEKW4QX c5iyBNy1cIX1rz9aksgGkZt5usltTKrYXSxdorYzRwyyEqYShhRwmi0uw9RV8J8p l4UQZ9YZbKjP/Tu6vNyj76HBy6ibMDB4HjgyqXO2qkiyJnmI1dApg6eIDZAkky5X TqZBmFTcRcu5Bne47oSXdw/txQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYy/hdP aDuZkZVl27ICb0bxlIa/MB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsi8RqNHr4wTfOVV07LozeZt59p7fiW4Af3+eV3qE8673gXifLC8t3 m7+1VevvMg7gKDEPeTJnBSnB6KZwime+mVpxffFGQFtwls3SgI5sgY9bgwc7QkLk GA1yefFIhWsoNq3OMabb7r4BseYht6g+xGGt+psYdWQ0TEyG3fEgQ7d1wHKbZZ6T Dat+9x7JcbeoFsRnotLFRwf1uAjYHSKv6Rt7hSrynLtrW0T2VO2w3qeSEwNaWX3O hR5HDe4+iQYvjcYYpm6mrYX4WyAtnJ6zkZumHS1RwvB5u5C19467yvKdCmQgHYb/ 3XmZu5tpniQYansXJ+5VZGy9T2xR/I/u -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:55 2025 by rpki-client