$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft File: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json) Hash identifier: fPdlvjnyUTyZgzrvwI79ZgoFn7BCur6cGvyHXSKwu3M= Subject key identifier: 9F:EB:2D:67:AB:31:30:9E:6C:B8:DE:37:8A:E0:9C:B1:30:25:91:E2 Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft Manifest number: 0CD1 Signing time: Fri 08 Aug 2025 19:24:32 +0000 Manifest this update: Fri 08 Aug 2025 19:24:31 +0000 Manifest next update: Fri 15 Aug 2025 19:24:31 +0000 Files and hashes: 1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: q1Yf6TlUK2xM+TnEtAi2w+3sPEO3kb4ULjqUxZRbOog=) 2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Validity Not Before: Aug 8 19:24:31 2025 GMT Not After : Aug 15 19:24:31 2025 GMT Subject: CN=68964eef-fcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:59:c6:85:4b:72:3e:c9:e2:c1:fe:45:2e: ee:bc:b7:1b:de:45:08:4b:41:36:e8:f1:7b:10:47: 4a:02:93:8c:09:76:39:dd:ca:1f:3c:17:f4:79:c3: 69:bd:8b:62:45:7d:29:de:fa:32:a2:45:30:3e:b7: a1:7b:0b:64:ab:1e:9f:8c:56:bc:97:a8:a2:9d:6a: 1f:0c:ec:34:9b:ea:c9:e7:44:7f:0d:df:82:b1:74: a0:1c:1c:08:78:52:ea:45:ac:89:12:65:7c:33:d6: aa:66:8a:9f:5a:fb:73:74:3b:22:cd:18:45:4a:43: c9:6e:65:c0:2a:e3:b2:0d:e5:d4:68:e5:a3:f8:e9: 35:68:43:c7:0d:8c:c9:6b:b4:35:86:45:9d:9e:93: ce:32:5f:7c:9b:6e:b5:a8:ae:8d:ba:87:c2:30:6c: 7a:2d:70:22:a5:13:cf:b5:ea:c9:f8:11:46:c7:e7: 35:22:9e:9f:c2:c7:3a:01:74:1c:ea:bc:76:78:15: d5:53:79:48:7f:cb:d1:b2:cd:74:f2:3c:99:17:c3: 0a:b6:4a:9a:d6:23:cd:35:3f:ae:d6:d2:6e:e5:f9: 9c:eb:80:9a:4a:75:8a:25:05:ef:a8:54:8c:b7:8c: b6:8f:01:e1:81:26:ca:31:7f:7b:4b:60:16:29:7a: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EB:2D:67:AB:31:30:9E:6C:B8:DE:37:8A:E0:9C:B1:30:25:91:E2 X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e4:40:d3:2f:5d:a0:9a:10:6a:f6:8c:05:c3:4f:79:ca:71: dd:dc:89:0d:67:31:8c:e4:a4:c8:30:75:4d:9e:7f:ab:af:96: 2e:5c:9d:59:17:27:19:eb:42:f2:32:2f:f8:1c:b1:01:08:15: 8e:f2:bf:90:ea:bd:8d:a4:f8:e4:c0:f5:15:f0:ed:d6:ac:5a: e9:b0:f0:70:84:18:bd:82:82:8d:b7:31:29:f4:aa:79:53:8e: 31:14:b1:45:dc:39:f2:97:bb:ac:e7:fe:42:50:87:b5:52:a8: 73:1b:59:cb:e0:ec:02:90:09:0d:3c:0d:b3:6b:f9:05:c9:26: 0d:34:8c:1f:ea:b4:fe:af:d8:c9:e2:6a:3c:bd:a9:0c:fe:b4: 94:a6:e6:68:cb:f1:9c:6f:cc:61:ea:6f:69:5a:af:a1:58:f0: 8e:6f:80:be:1b:ad:08:37:41:24:11:d1:1e:58:53:bd:61:aa: 32:5b:43:01:9c:0c:9f:7e:49:b4:04:61:ac:cf:0b:9a:d0:f2: 75:59:7a:93:73:81:87:25:35:73:57:55:92:95:e4:cc:bb:ad: 61:25:31:3f:02:41:ee:5e:b9:d4:93:78:07:13:ca:7a:c4:a1: 71:93:03:60:4c:01:0b:97:b7:8d:0b:e3:cd:48:e5:ff:49:5e: 27:95:4a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUwODA4MTkyNDMxWhcNMjUwODE1MTkyNDMxWjAYMRYwFAYD VQQDEw02ODk2NGVlZi1mY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJVZxoVLcj7J4sH+RS7uvLcb3kUIS0E26PF7EEdKApOMCXY53cofPBf0ecNp vYtiRX0p3voyokUwPrehewtkqx6fjFa8l6iinWofDOw0m+rJ50R/Dd+CsXSgHBwI eFLqRayJEmV8M9aqZoqfWvtzdDsizRhFSkPJbmXAKuOyDeXUaOWj+Ok1aEPHDYzJ a7Q1hkWdnpPOMl98m261qK6NuofCMGx6LXAipRPPterJ+BFGx+c1Ip6fwsc6AXQc 6rx2eBXVU3lIf8vRss108jyZF8MKtkqa1iPNNT+u1tJu5fmc64CaSnWKJQXvqFSM t4y2jwHhgSbKMX97S2AWKXpNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/rLWer MTCebLjeN4rgnLEwJZHiMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4 X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm5EDTL12gmhBq9owFw095ynHd3IkNZzGM5KTIMHVNnn+rr5YuXJ1Z FycZ60LyMi/4HLEBCBWO8r+Q6r2NpPjkwPUV8O3WrFrpsPBwhBi9goKNtzEp9Kp5 U44xFLFF3Dnyl7us5/5CUIe1UqhzG1nL4OwCkAkNPA2za/kFySYNNIwf6rT+r9jJ 4mo8vakM/rSUpuZoy/Gcb8xh6m9pWq+hWPCOb4C+G60IN0EkEdEeWFO9YaoyW0MB nAyffkm0BGGszwua0PJ1WXqTc4GHJTVzV1WSleTMu61hJTE/AkHuXrnUk3gHE8p6 xKFxkwNgTAELl7eNC+PNSOX/SV4nlUoZ -----END CERTIFICATE-----Generated at Sat Aug 9 15:12:40 2025 by rpki-client