$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: +39c1ifzr8jUfmm72+4PwgiQPUXQmeTMW4tDXJn41/s= Subject key identifier: 92:4A:CA:54:0F:BB:91:80:FF:6F:94:6F:46:9A:4B:75:E8:35:EC:08 Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0C23 Signing time: Tue 12 Aug 2025 18:52:14 +0000 Manifest this update: Tue 12 Aug 2025 18:52:14 +0000 Manifest next update: Tue 19 Aug 2025 18:52:14 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: yCnJO3+4b9uF/gR4LoIdhk1040w7QgscNCCHoS222F4=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Aug 12 18:52:14 2025 GMT Not After : Aug 19 18:52:14 2025 GMT Subject: CN=689b8d5e-0d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:75:87:ec:11:d3:36:d8:b7:36:c3:4e:08: d0:75:ac:30:93:79:4b:7a:78:2d:a1:34:44:0e:87: 8f:50:fc:04:84:2e:2c:5f:4d:3f:f5:ac:ee:1a:c3: df:89:22:1f:95:8a:9c:84:0b:50:ce:c5:45:e5:09: 01:37:ec:c7:9e:eb:e7:a6:83:6e:80:40:f4:30:47: 65:fa:da:48:68:8a:44:cb:5c:41:a6:f5:01:99:43: 1d:99:8a:85:e6:bd:4e:7a:76:f3:64:63:e0:06:62: f2:71:51:ce:a9:86:c7:52:41:0e:d4:ed:7e:d4:57: 2d:72:0c:5f:48:3d:c5:24:3b:13:84:ba:b2:c2:25: c0:86:14:e1:29:11:35:66:f2:b2:50:1e:53:44:f6: b2:8f:2b:73:f2:5f:3f:39:4c:be:b2:58:b2:80:49: 4e:3e:88:1c:4b:52:08:83:d3:1e:64:6b:65:9b:ba: 98:b1:52:48:ae:ed:5c:a4:d6:25:90:29:b1:97:03: db:0c:b3:bc:6c:4d:1c:a7:db:14:11:92:91:00:d2: fc:06:13:f0:0a:dc:dc:f9:53:f6:09:8b:7c:07:e8: 4d:7f:83:1d:69:cf:46:8a:f0:27:49:d3:e6:7c:ba: e1:75:65:67:8b:fe:41:5a:0a:9d:16:bb:9a:db:8c: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4A:CA:54:0F:BB:91:80:FF:6F:94:6F:46:9A:4B:75:E8:35:EC:08 X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ae:21:a7:02:a9:f7:48:be:b8:ed:e1:c4:29:a0:08:91:e2: 5d:a9:f2:49:73:cb:1a:f5:2d:74:f5:a6:a7:a0:0d:53:71:53: 2c:03:2c:d5:6e:22:5a:8d:b6:f3:e6:bf:58:70:01:b7:ea:ac: 05:51:5a:aa:1b:81:9c:99:42:03:6a:7f:4a:bb:74:38:18:b9: 00:01:0f:a4:df:10:70:7b:1f:12:42:9c:47:ad:e2:b1:b1:e4: 58:15:69:05:e7:24:91:4c:35:20:73:51:4c:66:dd:07:98:db: 47:6e:9c:e4:f8:02:4f:45:46:2d:4f:fe:18:95:ee:a9:39:a7: e7:54:0d:fe:4e:77:35:03:54:7c:cb:b5:b6:06:4b:8c:82:30: a8:8d:86:97:2a:e6:b5:8b:38:b8:eb:d6:9a:c2:2a:41:99:b7: 8c:01:02:db:56:b1:fd:99:d6:0c:d0:22:be:94:28:7e:b6:c7: ac:ba:9f:2c:45:2d:f8:2b:43:fd:f6:2a:12:3c:45:93:10:9a: 21:96:b5:1f:2e:02:01:e9:ab:03:0e:65:7d:58:32:91:78:fe: d0:77:95:1d:7c:9b:b5:65:92:c4:aa:6c:93:5b:7c:eb:5f:29: 14:39:16:f2:98:e1:77:d4:c8:d5:05:03:68:03:c8:22:e2:2b: 57:a7:ba:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwODEyMTg1MjE0WhcNMjUwODE5MTg1MjE0WjAYMRYwFAYD VQQDEw02ODliOGQ1ZS0wZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyid1h+wR0zbYtzbDTgjQdawwk3lLengtoTREDoePUPwEhC4sX00/9azuGsPf iSIflYqchAtQzsVF5QkBN+zHnuvnpoNugED0MEdl+tpIaIpEy1xBpvUBmUMdmYqF 5r1OenbzZGPgBmLycVHOqYbHUkEO1O1+1FctcgxfSD3FJDsThLqywiXAhhThKRE1 ZvKyUB5TRPayjytz8l8/OUy+sliygElOPogcS1IIg9MeZGtlm7qYsVJIru1cpNYl kCmxlwPbDLO8bE0cp9sUEZKRANL8BhPwCtzc+VP2CYt8B+hNf4Mdac9GivAnSdPm fLrhdWVni/5BWgqdFrua24y/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJKylQP u5GA/2+Ub0aaS3XoNewIMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgriGnAqn3SL647eHEKaAIkeJdqfJJc8sa9S109aanoA1TcVMsAyzV biJajbbz5r9YcAG36qwFUVqqG4GcmUIDan9Ku3Q4GLkAAQ+k3xBwex8SQpxHreKx seRYFWkF5ySRTDUgc1FMZt0HmNtHbpzk+AJPRUYtT/4Yle6pOafnVA3+Tnc1A1R8 y7W2BkuMgjCojYaXKua1izi469aawipBmbeMAQLbVrH9mdYM0CK+lCh+tsesup8s RS34K0P99ioSPEWTEJohlrUfLgIB6asDDmV9WDKReP7Qd5UdfJu1ZZLEqmyTW3zr XykUORbymOF31MjVBQNoA8gi4itXp7pY -----END CERTIFICATE-----Generated at Wed Aug 13 04:25:36 2025 by rpki-client