$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: EdhPcOgvZDmIhka2YFJJQxvVpf5xkGBqTkukEShSEL0= Subject key identifier: 21:7F:02:72:C3:EE:0D:55:32:62:B9:C2:30:45:65:DC:23:77:67:2B Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 039E Signing time: Sat 09 Aug 2025 01:19:57 +0000 Manifest this update: Sat 09 Aug 2025 01:19:56 +0000 Manifest next update: Sat 16 Aug 2025 01:19:56 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: H2/9b+LoNg+k56xQh6SP3hSOqYOpPKUXqSebdBBgYjQ=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Aug 9 01:19:56 2025 GMT Not After : Aug 16 01:19:56 2025 GMT Subject: CN=6896a23c-3bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:e9:d0:c3:72:da:fc:34:72:94:ec:0f:9f: 5d:31:68:91:d9:94:4a:8c:a0:be:dd:0b:0d:f0:52: 0e:b1:71:1a:5c:98:a5:6e:ab:00:00:93:72:cc:81: 8d:d9:03:50:e5:b1:9c:06:d3:70:32:76:9d:fc:b4: 15:ef:b3:83:3f:7d:1f:e9:64:a2:20:44:cd:50:10: 6d:9e:13:64:b6:3d:17:0c:49:a1:3d:b5:78:1e:ce: 50:89:25:3a:36:a8:18:3b:c2:e9:fe:9b:27:e8:96: 85:ca:b1:f5:59:30:ec:2f:58:91:5b:77:70:84:9c: 08:00:66:0a:56:88:df:cc:80:a5:c7:45:79:cc:99: a9:54:2d:67:43:0f:46:03:de:c6:6b:d1:aa:b8:39: d9:1d:22:44:fe:a0:55:62:0d:ca:29:05:bb:b7:7b: 57:fe:01:13:0b:4e:17:5c:f3:51:85:b5:7a:d2:bc: ee:6f:bd:fb:53:2b:b3:1a:27:b1:84:60:10:a3:ec: 07:03:03:5a:9d:2d:68:a8:3f:06:27:32:ad:f1:d2: c1:7a:5b:7a:67:4a:58:0c:ed:af:61:9f:b4:63:29: 3b:f6:d3:2f:50:63:6a:98:fc:4f:8c:aa:e4:1b:d9: cc:76:7f:78:bc:2c:17:f6:cf:8e:0f:6b:b2:98:87: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:02:72:C3:EE:0D:55:32:62:B9:C2:30:45:65:DC:23:77:67:2B X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f8:85:90:56:15:f1:ae:ea:7d:4c:8f:95:02:60:7f:34:af: 00:7e:c0:74:3f:48:2c:5a:a6:1a:8d:f1:cf:b1:89:f1:4b:de: a4:82:7b:76:ed:6a:78:63:36:cd:f0:2d:9c:c3:f0:6f:67:39: 55:bb:52:a8:b6:41:5e:b4:4a:27:94:30:7d:9a:7b:6c:66:c4: a5:78:41:e5:9e:39:15:3e:c4:ca:c5:74:f8:5d:9e:a3:eb:5e: 8b:7d:e0:89:c7:00:d5:4a:76:55:46:7c:92:8a:74:95:07:a2: 00:87:cf:05:b7:9e:eb:bc:e0:c8:8c:f4:d0:86:ac:c1:ab:d1: 56:f1:e7:62:23:11:8f:ca:de:ce:4b:1b:15:ec:a2:c2:5b:17: d4:97:66:15:26:e6:a3:3c:b5:0b:bb:5d:38:08:8c:e5:73:3d: 06:38:d3:dd:ca:2d:f6:8a:f1:9f:d0:fb:c3:5b:a7:02:d7:4f: 0f:8e:44:1b:52:f4:69:b8:5d:23:ea:ab:b3:07:e5:11:29:3d: 34:93:6f:b3:e9:88:59:dc:99:81:17:94:8a:f3:89:c7:e4:f3: cc:71:0c:fb:5e:b7:d2:25:ed:0d:6a:c0:a6:bb:b2:92:97:bc: 6d:43:39:10:13:ff:b3:cc:96:dd:9f:fa:e0:ad:91:ec:55:f1: 80:e3:ac:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwODA5MDExOTU2WhcNMjUwODE2MDExOTU2WjAYMRYwFAYD VQQDEw02ODk2YTIzYy0zYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85Hp0MNy2vw0cpTsD59dMWiR2ZRKjKC+3QsN8FIOsXEaXJilbqsAAJNyzIGN 2QNQ5bGcBtNwMnad/LQV77ODP30f6WSiIETNUBBtnhNktj0XDEmhPbV4Hs5QiSU6 NqgYO8Lp/psn6JaFyrH1WTDsL1iRW3dwhJwIAGYKVojfzIClx0V5zJmpVC1nQw9G A97Ga9GquDnZHSJE/qBVYg3KKQW7t3tX/gETC04XXPNRhbV60rzub737UyuzGiex hGAQo+wHAwNanS1oqD8GJzKt8dLBelt6Z0pYDO2vYZ+0Yyk79tMvUGNqmPxPjKrk G9nMdn94vCwX9s+OD2uymIdYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCF/AnLD 7g1VMmK5wjBFZdwjd2crMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+IWQVhXxrup9TI+VAmB/NK8AfsB0P0gsWqYajfHPsYnxS96kgnt2 7Wp4YzbN8C2cw/BvZzlVu1KotkFetEonlDB9mntsZsSleEHlnjkVPsTKxXT4XZ6j 616LfeCJxwDVSnZVRnySinSVB6IAh88Ft57rvODIjPTQhqzBq9FW8ediIxGPyt7O SxsV7KLCWxfUl2YVJuajPLULu104CIzlcz0GONPdyi32ivGf0PvDW6cC108PjkQb UvRpuF0j6quzB+URKT00k2+z6YhZ3JmBF5SK84nH5PPMcQz7XrfSJe0NasCmu7KS l7xtQzkQE/+zzJbdn/rgrZHsVfGA46x6 -----END CERTIFICATE-----Generated at Sat Aug 9 02:56:13 2025 by rpki-client