$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: R/MzQer7LvsjuIoy605ffAJUOb4C6VLUDZO+b/5R+RU= Subject key identifier: 3F:A7:34:C8:AC:1D:D7:9F:1A:D4:31:55:40:22:72:67:CB:C8:6D:93 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0C5E Signing time: Sun 10 Aug 2025 18:29:53 +0000 Manifest this update: Sun 10 Aug 2025 18:29:53 +0000 Manifest next update: Sun 17 Aug 2025 18:29:53 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: b6Qyg6e0zfjVIv/MACGsFBsUvINiUpotDJVDwdFQ5Ls=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: Aug 10 18:29:53 2025 GMT Not After : Aug 17 18:29:53 2025 GMT Subject: CN=6898e521-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:33:81:7f:71:65:a6:e8:b2:a4:da:72:77: 20:c3:8e:c7:7c:33:dc:28:3d:6c:0b:45:3a:77:34: 1f:b4:03:78:70:6f:e4:06:83:20:9f:53:b4:67:9e: 35:22:00:f3:93:60:02:da:92:ff:7b:77:31:68:09: 04:f7:c7:f4:4e:8c:aa:88:ae:5c:cd:1c:36:ec:ed: 0e:8e:7a:83:2a:1a:8d:5e:ec:f9:c3:9b:64:4c:86: b0:37:a7:0e:4b:ca:9a:76:7b:d0:96:e7:05:dd:4c: 69:ac:c4:c7:51:4b:b0:e4:25:b7:9a:63:3a:83:fc: 01:a4:8d:1b:00:67:8b:78:fc:55:2f:14:9f:2f:30: d0:12:ba:6a:ef:c7:97:cd:7f:45:c5:64:4f:01:25: d2:bb:d5:7b:0d:88:03:eb:ab:5d:1c:d0:42:b4:1e: 22:0b:72:22:fc:81:b6:23:30:7a:c7:18:e4:25:ba: b0:65:ae:2a:f5:5e:51:92:60:cf:ab:10:f4:d8:10: 26:f0:1b:e1:f7:92:2d:73:f9:7a:de:2a:51:eb:c4: cb:2b:b0:9b:53:be:d9:ba:f9:94:bf:64:fe:5b:cc: cc:b7:79:9a:13:f8:b5:5c:a4:26:16:7c:9d:4a:d0: 81:2e:db:0b:58:05:eb:6a:55:ea:57:68:33:d0:2c: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:34:C8:AC:1D:D7:9F:1A:D4:31:55:40:22:72:67:CB:C8:6D:93 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:37:c2:3b:88:d4:f7:8d:66:31:52:ee:d6:2f:8b:1e:8f: 22:2a:9f:2b:db:49:19:dc:fb:e5:2a:89:a1:2b:83:d7:87:dc: 0b:7b:57:26:f3:7f:f4:0d:94:9c:bd:0c:a2:39:c3:84:80:b2: 34:dc:05:8b:c2:f1:e8:b4:ce:50:b8:4d:15:2e:82:bc:39:ad: ef:db:25:87:5b:97:e6:62:cc:3c:69:7a:0a:13:57:7e:0f:26: e1:ff:09:0a:bd:8f:64:23:41:71:63:d8:19:17:ed:21:a4:9a: f5:e5:9c:f2:9a:37:94:f4:e0:0b:50:22:68:3e:51:c6:f4:30: d2:2a:5b:30:b6:ee:06:26:cf:78:80:3d:95:8d:c8:21:70:f8: fc:d3:77:9f:7a:4f:9e:77:c4:8f:e6:39:c1:6b:a3:60:75:a7: 76:40:6e:fa:bc:0d:80:81:65:a3:85:be:f2:d9:03:b4:ef:51: 8a:ee:84:33:5b:46:ef:b4:eb:43:65:d7:04:5d:45:5e:df:15: f9:f2:5e:72:19:25:cc:1e:21:b1:15:39:dd:7e:a4:78:cd:92: d8:fa:5a:9d:51:f0:e6:0d:d2:3e:07:ac:f1:97:41:7e:46:28: 1e:7f:9d:74:eb:9e:ab:eb:fb:12:a6:af:7c:90:18:96:7e:71: 03:1f:f9:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjUwODEwMTgyOTUzWhcNMjUwODE3MTgyOTUzWjAYMRYwFAYD VQQDEw02ODk4ZTUyMS04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvQzgX9xZabosqTacncgw47HfDPcKD1sC0U6dzQftAN4cG/kBoMgn1O0Z541 IgDzk2AC2pL/e3cxaAkE98f0ToyqiK5czRw27O0OjnqDKhqNXuz5w5tkTIawN6cO S8qadnvQlucF3UxprMTHUUuw5CW3mmM6g/wBpI0bAGeLePxVLxSfLzDQErpq78eX zX9FxWRPASXSu9V7DYgD66tdHNBCtB4iC3Ii/IG2IzB6xxjkJbqwZa4q9V5RkmDP qxD02BAm8Bvh95Itc/l63ipR68TLK7CbU77ZuvmUv2T+W8zMt3maE/i1XKQmFnyd StCBLtsLWAXralXqV2gz0CxPdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+nNMis HdefGtQxVUAicmfLyG2TMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/DfCO4jU941mMVLu1i+LHo8iKp8r20kZ3PvlKomhK4PXh9wLe1cm 83/0DZScvQyiOcOEgLI03AWLwvHotM5QuE0VLoK8Oa3v2yWHW5fmYsw8aXoKE1d+ Dybh/wkKvY9kI0FxY9gZF+0hpJr15ZzymjeU9OALUCJoPlHG9DDSKlswtu4GJs94 gD2VjcghcPj803efek+ed8SP5jnBa6Ngdad2QG76vA2AgWWjhb7y2QO071GK7oQz W0bvtOtDZdcEXUVe3xX58l5yGSXMHiGxFTndfqR4zZLY+lqdUfDmDdI+B6zxl0F+ Rigef510656r6/sSpq98kBiWfnEDH/mp -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:50 2025 by rpki-client