$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: 4S+We9U8UDTo7O8iebuMV0TO9gEhwlrM2mqcaOwNVuU= Subject key identifier: 0F:FD:88:9D:0C:15:1A:FE:86:DA:38:BB:B0:C1:1B:58:24:0F:F4:FD Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 0508 Signing time: Thu 07 Aug 2025 00:08:12 +0000 Manifest this update: Thu 07 Aug 2025 00:08:11 +0000 Manifest next update: Thu 14 Aug 2025 00:08:11 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: Po6JBt4d5vg6NYZE5ZD5meIk6Fcg55/Hyx14SfzGY/U=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Aug 7 00:08:11 2025 GMT Not After : Aug 14 00:08:11 2025 GMT Subject: CN=6893ee6b-8bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:d0:49:40:c6:d5:ac:58:12:ec:22:0e:da: 18:d7:5a:2e:99:e9:4e:a1:03:ba:40:6c:65:a1:ee: bd:bb:c7:76:5b:50:94:df:32:2e:94:99:6c:9e:23: f2:18:46:f8:e1:19:0d:7b:f8:68:92:fc:c7:28:ed: bb:52:3b:3e:ea:c4:f1:2c:4a:80:b5:8c:da:7a:89: 87:11:ad:5f:af:66:48:51:ab:e2:0f:f3:3e:98:a4: ef:29:dc:99:d4:41:48:17:a5:aa:14:14:6c:00:73: 3b:85:af:77:44:d6:64:d5:fb:87:3f:30:62:ac:d5: 1e:26:0f:32:37:cb:37:8c:b4:75:cb:43:22:e4:9b: 51:7f:32:40:fe:3c:66:ef:8c:e1:ed:ff:f2:2f:12: e8:86:bb:c9:3e:19:a8:71:bb:01:88:bc:b9:c1:e8: 56:17:fe:2f:b9:07:cb:99:0c:84:2c:28:b5:4b:99: 63:21:d1:c5:bf:9f:eb:73:ef:e9:ce:21:2e:de:de: fb:87:b4:2c:bf:46:4d:5b:02:8f:2f:04:2f:36:0a: 8e:e9:c6:c4:68:12:14:7d:b3:49:28:dd:e4:02:67: fb:3b:13:6c:9a:64:95:52:95:39:29:2a:bc:b8:ab: a1:0a:ec:86:3a:ca:47:27:75:55:5c:c9:83:3e:67: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FD:88:9D:0C:15:1A:FE:86:DA:38:BB:B0:C1:1B:58:24:0F:F4:FD X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:44:6b:ef:59:d8:5c:b8:49:c6:54:20:d2:8c:5a:67:58:a5: dc:50:2f:08:f4:03:4b:e7:20:91:2b:ad:b6:b6:3f:8d:e4:c3: 49:bc:1f:8e:ce:da:dd:cb:58:9f:96:bb:4d:79:75:6c:b2:16: 86:3b:00:df:cf:94:60:ea:bb:2d:43:7f:44:60:0b:de:41:b8: 7f:3c:8c:c1:77:72:d0:2b:9e:e4:77:93:d8:a5:00:df:c9:34: f3:ab:e2:22:96:9c:9a:5f:3e:09:29:da:e3:42:ea:65:bd:e0: 6f:ff:42:3e:5d:3b:e7:88:4e:6e:11:19:48:67:18:23:38:2a: 00:ee:7a:97:93:9e:61:0d:cf:be:8c:d2:fb:f1:31:6d:bc:b9: 9f:bd:18:72:45:97:3d:6f:f7:4f:93:5c:54:8c:67:20:dc:07: 09:08:cf:6a:77:b6:5e:fe:49:2c:59:ea:99:31:f3:46:0b:68: 30:87:e4:3e:3f:f7:82:ec:24:37:ed:ef:f8:86:e7:0b:db:ee: dc:cc:58:47:d2:27:84:8d:f0:33:75:35:01:ec:19:a5:3f:f3: af:09:70:95:8a:08:b7:de:0c:0b:ce:c4:83:14:e7:0a:b2:e4: 01:90:34:ad:1b:bf:c4:d2:9b:a7:30:83:c6:55:24:a0:ba:d3: a5:ca:d5:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwODA3MDAwODExWhcNMjUwODE0MDAwODExWjAYMRYwFAYD VQQDEw02ODkzZWU2Yi04YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHHQSUDG1axYEuwiDtoY11oumelOoQO6QGxloe69u8d2W1CU3zIulJlsniPy GEb44RkNe/hokvzHKO27Ujs+6sTxLEqAtYzaeomHEa1fr2ZIUaviD/M+mKTvKdyZ 1EFIF6WqFBRsAHM7ha93RNZk1fuHPzBirNUeJg8yN8s3jLR1y0Mi5JtRfzJA/jxm 74zh7f/yLxLohrvJPhmocbsBiLy5wehWF/4vuQfLmQyELCi1S5ljIdHFv5/rc+/p ziEu3t77h7Qsv0ZNWwKPLwQvNgqO6cbEaBIUfbNJKN3kAmf7OxNsmmSVUpU5KSq8 uKuhCuyGOspHJ3VVXMmDPmeFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/9iJ0M FRr+hto4u7DBG1gkD/T9MB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2RGvvWdhcuEnGVCDSjFpnWKXcUC8I9ANL5yCRK622tj+N5MNJvB+O ztrdy1iflrtNeXVsshaGOwDfz5Rg6rstQ39EYAveQbh/PIzBd3LQK57kd5PYpQDf yTTzq+IilpyaXz4JKdrjQuplveBv/0I+XTvniE5uERlIZxgjOCoA7nqXk55hDc++ jNL78TFtvLmfvRhyRZc9b/dPk1xUjGcg3AcJCM9qd7Ze/kksWeqZMfNGC2gwh+Q+ P/eC7CQ37e/4hucL2+7czFhH0ieEjfAzdTUB7BmlP/OvCXCVigi33gwLzsSDFOcK suQBkDStG7/E0punMIPGVSSgutOlytXJ -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:39 2025 by rpki-client