$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: gx11OmwSL+tVaq3YzeFe0POsVhGdJ6ZiIXMMklD/JzA= Subject key identifier: 9A:B0:EB:F8:52:1B:27:4F:22:83:D7:8E:63:C4:08:A1:A7:0C:40:B1 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0B20 Signing time: Fri 08 Aug 2025 19:50:51 +0000 Manifest this update: Fri 08 Aug 2025 19:50:50 +0000 Manifest next update: Fri 15 Aug 2025 19:50:50 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: UoIWUrnjHDSYlwyVzadKKTrHsQJEq6svU7GNCSRm5/c=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: Qwutn9B3CDHm9n0iew3RV9fUFrgygonwXrMYgIgIKWc=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Aug 8 19:50:50 2025 GMT Not After : Aug 15 19:50:50 2025 GMT Subject: CN=6896551a-57b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:bc:18:d1:c5:25:c6:ef:93:fd:b9:d3:13: f5:9d:61:22:c1:4b:57:38:a5:d5:27:93:a9:1e:81: d6:2b:03:c0:25:9a:6a:51:78:a4:14:5f:df:c1:ff: 8b:62:ae:ac:2f:56:ae:a8:7d:dc:89:0c:a5:3a:b5: aa:77:cf:35:b5:c0:40:2c:e3:b2:80:63:38:51:16: 8f:3e:9d:28:03:ce:ee:e5:3b:2a:86:1c:d9:5f:5e: 7b:52:32:56:d8:4f:69:3f:44:c9:e2:b3:87:e5:d9: e8:a3:41:af:60:87:87:27:e8:d0:05:6e:28:d6:0a: ab:fe:19:ed:ef:38:6f:45:3e:83:fb:a1:d9:d0:8b: f6:6a:b1:ac:50:7c:9d:5d:c0:4f:f8:2c:15:91:9c: fb:52:28:d5:70:91:4d:7d:ec:52:c3:52:c9:52:10: 71:f6:93:68:af:94:94:75:3b:5c:2b:99:d5:83:1d: 85:9b:35:00:65:8e:20:8c:e4:71:0c:e0:d6:ce:ff: b4:a9:d7:46:47:60:8c:dc:fb:e1:0a:c3:90:a5:ab: c5:7a:67:5d:00:65:f4:68:95:2e:30:0a:34:77:e7: 6b:c7:0b:0c:f8:5a:f6:8d:7a:0e:99:5c:1a:58:c0: ed:05:0c:61:ec:96:15:3c:83:c7:7d:99:81:cd:20: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B0:EB:F8:52:1B:27:4F:22:83:D7:8E:63:C4:08:A1:A7:0C:40:B1 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:85:47:4e:cd:5a:ac:78:ac:0e:01:31:39:de:38:f8:70:93: d6:bb:13:2e:9f:a3:16:93:14:f4:52:8c:0c:be:62:13:0b:7d: 66:2e:e6:63:9c:b5:6a:3d:45:31:67:33:6e:30:0f:4a:88:ba: af:41:bb:e1:56:93:6e:14:3b:ba:e8:67:c3:3a:fd:cc:57:e9: 06:29:ad:66:7a:13:ca:5c:ff:78:c8:d3:d7:4b:eb:01:9f:92: 46:7f:b6:05:f6:9e:37:99:0b:d1:1e:ee:63:68:44:09:d4:d1: 81:c2:a6:a5:7a:c9:a7:86:62:1f:ff:71:32:b9:9e:0a:0c:5f: 39:e2:e5:24:ca:4c:8d:9b:61:25:3c:5c:a3:04:46:fe:45:bd: f0:ec:8b:2c:c6:bd:2b:62:7b:8a:9d:cd:fb:a1:64:98:b1:72: 0f:3f:f3:b9:af:47:4f:1f:c3:a9:ae:2b:70:5f:c9:64:18:b2: 1e:2c:1f:3f:5d:e5:97:c3:16:fd:ae:56:81:45:e7:8d:e8:ce: a2:a9:ac:c1:e0:ef:31:b7:64:81:cc:f1:c4:7c:d4:d2:cc:1e: 0a:47:bd:42:fc:31:36:a6:0c:9d:49:57:13:94:fe:f5:d7:62: 7d:76:58:c6:0f:3f:b1:16:c9:66:74:79:cd:82:c3:8a:92:72: 69:ef:52:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwODA4MTk1MDUwWhcNMjUwODE1MTk1MDUwWjAYMRYwFAYD VQQDEw02ODk2NTUxYS01N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEW8GNHFJcbvk/250xP1nWEiwUtXOKXVJ5OpHoHWKwPAJZpqUXikFF/fwf+L Yq6sL1auqH3ciQylOrWqd881tcBALOOygGM4URaPPp0oA87u5TsqhhzZX157UjJW 2E9pP0TJ4rOH5dnoo0GvYIeHJ+jQBW4o1gqr/hnt7zhvRT6D+6HZ0Iv2arGsUHyd XcBP+CwVkZz7UijVcJFNfexSw1LJUhBx9pNor5SUdTtcK5nVgx2FmzUAZY4gjORx DODWzv+0qddGR2CM3PvhCsOQpavFemddAGX0aJUuMAo0d+drxwsM+Fr2jXoOmVwa WMDtBQxh7JYVPIPHfZmBzSDqfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqw6/hS GydPIoPXjmPECKGnDECxMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmhUdOzVqseKwOATE53jj4cJPWuxMun6MWkxT0UowMvmITC31mLuZj nLVqPUUxZzNuMA9KiLqvQbvhVpNuFDu66GfDOv3MV+kGKa1mehPKXP94yNPXS+sB n5JGf7YF9p43mQvRHu5jaEQJ1NGBwqalesmnhmIf/3EyuZ4KDF854uUkykyNm2El PFyjBEb+Rb3w7Issxr0rYnuKnc37oWSYsXIPP/O5r0dPH8OpritwX8lkGLIeLB8/ XeWXwxb9rlaBReeN6M6iqazB4O8xt2SBzPHEfNTSzB4KR71C/DE2pgydSVcTlP71 12J9dljGDz+xFslmdHnNgsOKknJp71Iz -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:33 2025 by rpki-client