$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: 7sgyRgSOG/eowiMVwy9+ZYbvU3SNu11mr6PsljnAxAM= Subject key identifier: 2B:20:C8:6A:A5:DD:23:16:EC:A0:55:C7:86:2B:F9:A0:2F:AA:C2:F7 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 1092 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 1086 Signing time: Sun 10 Aug 2025 17:21:36 +0000 Manifest this update: Sun 10 Aug 2025 17:21:36 +0000 Manifest next update: Sun 17 Aug 2025 17:21:36 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: //t2anUe1NF8SutnGMs5jUMQFfGQnkD5fP4wm9BtnRc=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4242 (0x1092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Aug 10 17:21:36 2025 GMT Not After : Aug 17 17:21:36 2025 GMT Subject: CN=6898d520-332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:7d:bb:a3:f9:90:9f:76:14:5d:dc:ca:09: 09:ab:5a:52:67:0a:c5:03:73:fb:c9:6e:59:13:bb: 8b:75:9f:2c:41:60:27:39:8d:32:14:4d:a9:10:86: 8f:a6:e9:c1:cb:16:c4:2d:23:43:f6:2d:80:bc:7f: 76:09:6e:86:ca:35:f1:a4:b9:a9:20:e5:2b:71:34: 22:be:05:12:3c:0c:04:c7:10:40:e4:68:f0:6e:80: 91:3e:e4:d7:f4:de:33:63:3c:d8:63:67:f9:f1:9b: 44:40:82:c0:e3:ac:ae:0f:10:75:a3:53:91:29:09: 48:7c:05:ad:4d:f5:01:01:bd:2a:4e:a0:4b:07:74: 7d:1e:99:82:82:c3:69:55:63:b3:e5:74:b5:f2:c0: d2:5a:0a:91:0d:c9:25:80:00:1e:3f:84:e4:63:22: b3:a6:19:38:4a:bc:09:35:be:a7:4f:cb:07:47:9b: 7a:c6:c8:30:4c:51:7c:b5:a1:fa:88:a8:ef:57:56: 87:b1:ff:fb:98:66:4d:de:4a:3c:a3:e9:0f:12:19: d6:0a:c5:7b:af:f7:43:31:94:26:2a:37:93:06:c1: a3:27:b2:21:0e:38:e9:53:d7:8e:a0:cd:43:ff:f8: 10:78:8d:b5:1c:c4:8c:77:d6:7c:c7:97:60:05:11: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:C8:6A:A5:DD:23:16:EC:A0:55:C7:86:2B:F9:A0:2F:AA:C2:F7 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:30:47:0b:f1:6b:ae:19:57:f4:a8:cb:3e:8f:c5:a4:e0: 8b:a8:f4:9e:69:6c:d5:62:37:45:83:2b:7c:bd:c6:ef:75:4a: 55:40:5f:29:f9:43:b3:9f:ed:13:d7:09:9a:f6:a1:c6:ba:c7: ea:08:14:9f:9c:1a:dc:17:a9:f0:1d:7e:eb:af:4f:f3:08:2c: 47:a0:03:1a:4b:b3:d5:0b:09:2f:78:3b:21:54:7c:21:50:75: 5e:38:e5:96:cc:2b:49:9b:a0:35:77:83:be:d8:d5:05:11:19: 48:2e:b0:22:91:1e:46:c1:1c:5e:38:53:66:3a:e4:e5:68:c0: 53:4b:a0:50:6f:b8:d4:00:91:fd:ef:05:7a:5a:58:83:88:6a: 6f:29:eb:c0:26:c0:3d:97:7c:be:9c:c8:86:84:60:7a:ce:f9: 72:d3:5c:42:28:07:0d:b3:3b:08:31:21:1e:49:4c:c4:91:77: a1:c7:76:cc:ff:c7:74:49:cc:61:6c:50:8c:8b:49:89:8b:89: a8:bd:87:6e:46:44:06:ef:b8:12:3f:e5:7c:df:99:d0:43:67: 03:86:6f:40:77:0c:c1:46:24:26:66:6a:1d:0f:bf:5b:c9:c0: bc:88:36:5b:a2:7d:40:31:d8:4c:9d:ae:e2:d4:cc:11:67:66: a3:4b:35:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwODEwMTcyMTM2WhcNMjUwODE3MTcyMTM2WjAYMRYwFAYD VQQDEw02ODk4ZDUyMC0zMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlf19u6P5kJ92FF3cygkJq1pSZwrFA3P7yW5ZE7uLdZ8sQWAnOY0yFE2pEIaP punByxbELSND9i2AvH92CW6GyjXxpLmpIOUrcTQivgUSPAwExxBA5GjwboCRPuTX 9N4zYzzYY2f58ZtEQILA46yuDxB1o1ORKQlIfAWtTfUBAb0qTqBLB3R9HpmCgsNp VWOz5XS18sDSWgqRDcklgAAeP4TkYyKzphk4SrwJNb6nT8sHR5t6xsgwTFF8taH6 iKjvV1aHsf/7mGZN3ko8o+kPEhnWCsV7r/dDMZQmKjeTBsGjJ7IhDjjpU9eOoM1D //gQeI21HMSMd9Z8x5dgBRF9EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsgyGql 3SMW7KBVx4Yr+aAvqsL3MB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpPDBHC/FrrhlX9KjLPo/FpOCLqPSeaWzVYjdFgyt8vcbvdUpVQF8p +UOzn+0T1wma9qHGusfqCBSfnBrcF6nwHX7rr0/zCCxHoAMaS7PVCwkveDshVHwh UHVeOOWWzCtJm6A1d4O+2NUFERlILrAikR5GwRxeOFNmOuTlaMBTS6BQb7jUAJH9 7wV6WliDiGpvKevAJsA9l3y+nMiGhGB6zvly01xCKAcNszsIMSEeSUzEkXehx3bM /8d0ScxhbFCMi0mJi4movYduRkQG77gSP+V835nQQ2cDhm9AdwzBRiQmZmodD79b ycC8iDZbon1AMdhMna7i1MwRZ2ajSzUm -----END CERTIFICATE-----Generated at Sun Aug 10 18:58:48 2025 by rpki-client