$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: Bcn5XGPNVGIT32L6Q+Y/BKP0qSGsy7fJ2uP6H1v2Pak= Subject key identifier: 04:50:83:18:DE:80:29:60:AA:94:C2:ED:81:84:3E:C1:19:A0:DE:36 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 34B4 Signing time: Fri 08 Aug 2025 14:17:15 +0000 Manifest this update: Fri 08 Aug 2025 14:17:14 +0000 Manifest next update: Fri 15 Aug 2025 14:17:14 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: Q+yOFPawcNBPxOpLPtgvwrTUsi9WbCCOUDAgpRqKu7Y=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Aug 8 14:17:14 2025 GMT Not After : Aug 15 14:17:14 2025 GMT Subject: CN=689606eb-c044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:fb:51:50:e8:c8:76:43:9f:ba:83:f2:12: f4:f3:14:0d:5d:32:cd:de:a4:17:bd:1a:cb:ad:f6: b8:24:e6:97:3d:eb:f6:11:92:a8:28:ca:58:0f:90: a0:3c:03:ad:6e:36:66:84:b5:12:b4:ca:ca:b0:de: 07:82:c4:6d:1b:65:20:5c:fb:4e:49:9f:1e:c3:44: 5b:48:56:e6:4e:55:1c:4e:5c:df:92:70:45:07:5c: bb:ab:f8:39:3f:7e:71:6d:e6:fe:a6:33:06:d7:c7: b9:c0:7e:6d:d7:ea:60:0e:1a:f3:eb:d8:07:f0:06: 00:59:1b:37:2a:f2:a4:15:52:3b:c2:19:4e:79:c0: 90:73:9e:95:8d:87:fa:5e:3d:3c:c4:78:a8:34:d2: 3e:2e:0f:fb:a3:3a:1d:99:d5:f0:59:19:1f:12:44: 1d:e1:44:b8:d8:c3:88:e2:3b:4a:d0:88:51:d9:3d: c5:2e:43:e2:f2:16:51:e5:f5:0d:12:23:ac:c7:91: 94:7b:e1:6d:59:5c:75:87:bb:ad:66:92:d4:2f:17: 15:11:b6:07:2e:1e:96:ee:ab:9c:e1:ae:0e:cf:70: 00:fa:26:cc:a8:d7:ad:df:a8:76:ac:f6:6f:28:00: ce:f6:4c:71:af:07:2e:30:bc:b1:7a:3f:b8:fb:55: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:83:18:DE:80:29:60:AA:94:C2:ED:81:84:3E:C1:19:A0:DE:36 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:63:00:0e:d4:9b:b9:81:7f:38:67:54:4b:ed:b1:f2:a1: cb:da:f3:2b:87:c5:c3:0e:38:c5:c2:db:56:bb:6e:a1:a2:08: 46:36:25:51:e4:3c:79:11:27:3d:67:0c:6f:2b:fe:1f:09:fb: 97:cc:dd:61:83:08:c6:4e:e9:ba:35:7d:c1:f0:39:31:6a:8b: ea:dd:e2:02:3b:e7:fa:34:99:0a:9a:55:52:bc:ee:9f:33:c9: 8a:28:cd:c0:b7:d3:b3:82:c0:6a:00:3a:ff:67:0a:f2:93:4f: 47:0f:a9:2f:4f:4a:e0:a1:0b:41:b6:d4:07:3b:87:61:dd:59: 81:d3:8f:3b:fd:68:9f:ab:6d:01:52:ee:ec:b6:4c:d1:1a:9d: 95:e3:81:09:1c:b6:9e:49:04:1b:46:af:0a:8f:e2:52:c0:bb: a8:de:e0:6a:5d:30:8d:af:bc:e3:b5:ea:1a:6e:e6:57:56:04: fa:05:33:3b:34:70:2c:97:26:e5:58:61:06:a2:f5:fb:fd:30: f6:fc:03:7b:4b:f8:fb:0b:95:e8:43:91:62:c2:c4:8f:4a:a7: 4a:ed:06:93:98:4a:ac:62:27:e5:92:78:03:b2:96:0f:42:d6: 0c:0b:4a:7c:00:40:95:fb:97:21:8e:1a:fc:38:74:74:03:94: da:4d:bc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUwODA4MTQxNzE0WhcNMjUwODE1MTQxNzE0WjAYMRYwFAYD VQQDEw02ODk2MDZlYi1jMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt/7UVDoyHZDn7qD8hL08xQNXTLN3qQXvRrLrfa4JOaXPev2EZKoKMpYD5Cg PAOtbjZmhLUStMrKsN4HgsRtG2UgXPtOSZ8ew0RbSFbmTlUcTlzfknBFB1y7q/g5 P35xbeb+pjMG18e5wH5t1+pgDhrz69gH8AYAWRs3KvKkFVI7whlOecCQc56VjYf6 Xj08xHioNNI+Lg/7ozodmdXwWRkfEkQd4US42MOI4jtK0IhR2T3FLkPi8hZR5fUN EiOsx5GUe+FtWVx1h7utZpLULxcVEbYHLh6W7quc4a4Oz3AA+ibMqNet36h2rPZv KADO9kxxrwcuMLyxej+4+1WY2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARQgxje gClgqpTC7YGEPsEZoN42MB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HWMADtSbuYF/OGdUS+2x8qHL2vMrh8XDDjjFwttWu26hoghGNiVR 5Dx5ESc9ZwxvK/4fCfuXzN1hgwjGTum6NX3B8Dkxaovq3eICO+f6NJkKmlVSvO6f M8mKKM3At9OzgsBqADr/Zwryk09HD6kvT0rgoQtBttQHO4dh3VmB0487/Wifq20B Uu7stkzRGp2V44EJHLaeSQQbRq8Kj+JSwLuo3uBqXTCNr7zjteoabuZXVgT6BTM7 NHAslyblWGEGovX7/TD2/AN7S/j7C5XoQ5FiwsSPSqdK7QaTmEqsYiflkngDspYP QtYMC0p8AECV+5chjhr8OHR0A5TaTbzc -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:30 2025 by rpki-client