$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: TOTENwkvo8+L1tzPi56lo6sQFj7HqvdRvZQM58e7Juk= Subject key identifier: A8:FA:D2:7C:46:36:BF:7B:29:57:1D:E5:B1:56:A4:AA:26:16:74:F9 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0322 Signing time: Sat 09 Aug 2025 01:41:35 +0000 Manifest this update: Sat 09 Aug 2025 01:41:35 +0000 Manifest next update: Sat 16 Aug 2025 01:41:35 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: ZkgkvCo5aFpkB5+m32yJjZSggVOldbteP5X2oS7hgrI=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dymLbJxwcC+zoVbs1raLnxC102YzGfBqYVissSmUr50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Aug 9 01:41:35 2025 GMT Not After : Aug 16 01:41:35 2025 GMT Subject: CN=6896a74f-9435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:ee:b1:d0:ec:3f:ba:ad:c3:59:9d:87:b4: 0c:3c:af:49:13:0f:ae:06:f7:cb:66:df:a5:94:62: 31:ce:fa:6e:e4:cf:b8:22:4b:17:44:93:d0:3e:7a: b2:bd:6b:3a:8a:0b:03:b2:2a:d2:84:ff:48:1b:41: 13:d4:43:fa:3d:4e:c1:bc:a2:8f:bc:e8:75:7b:a9: 95:b8:c9:76:17:2f:f5:2c:7c:a7:11:b8:45:1f:dd: 1d:0d:94:4a:d9:64:a2:30:9e:2f:fb:2e:af:72:3d: 4f:98:7f:81:0c:c2:28:3b:3d:e5:51:74:03:de:ee: 1a:06:1c:4c:d6:e0:88:80:5f:72:cf:23:c7:c5:16: ea:a7:ac:dd:a7:0e:86:34:d1:51:74:95:50:d5:74: b4:7a:37:25:ec:c5:b4:f5:10:c2:4d:4d:59:5e:64: cc:48:bd:ae:e1:22:d9:23:3a:05:7b:e9:86:f8:81: 24:74:e8:ad:11:18:69:fc:2e:b9:38:31:28:c8:21: 31:7b:80:59:21:54:53:9f:26:63:ce:6a:31:a5:b3: 6c:82:a1:0a:e0:c2:57:b7:01:eb:34:7a:47:41:68: 48:e0:e1:42:33:33:c6:b9:33:16:be:cc:3a:4f:15: 1f:a9:54:b5:56:cb:5e:fb:0e:6a:26:a9:11:fc:1d: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:D2:7C:46:36:BF:7B:29:57:1D:E5:B1:56:A4:AA:26:16:74:F9 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:65:b0:f5:cf:e2:55:74:9f:3a:1a:0c:96:d4:8c:63:46:0b: 80:50:ab:e7:31:c3:ab:fc:3e:bb:28:31:3d:4e:3c:02:e5:43: fc:b2:c3:b2:f2:d9:53:7b:56:6e:ab:45:6c:b4:69:46:a1:4c: 74:bb:3c:01:4c:6a:b2:79:33:81:57:cd:e3:19:53:56:f5:5d: 4d:5a:c2:62:6e:5d:36:94:d0:2e:d3:d7:c8:bf:91:b7:65:18: 13:f6:1f:38:18:0f:b1:0f:cf:4e:2f:92:79:1b:6b:f3:d0:7a: b7:94:9b:37:1f:9c:c0:e0:12:f4:9f:5d:91:7e:7b:86:25:3b: 1a:1a:3f:6f:2c:a9:28:37:ab:fe:56:7a:d6:5c:ae:f9:c6:06: 9e:88:ef:86:6d:84:fb:21:67:6f:9c:9b:c2:d1:fa:e9:97:fd: 01:4c:78:da:fb:40:f2:c4:a7:ab:01:b9:2d:ed:a0:7c:97:03: 93:2f:e4:47:6b:d9:98:e4:e7:66:1e:21:24:8a:56:a0:dc:31: 57:cc:8e:78:2c:72:bb:d4:09:9b:2a:62:cc:2d:0d:0e:67:8e: 56:24:34:00:2d:cd:ac:ef:65:f3:63:09:49:b3:a3:fa:9e:2a: a2:1f:72:d4:d9:9a:32:fd:26:59:fc:4d:9d:73:9f:c7:ef:12: 2c:c4:89:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjUwODA5MDE0MTM1WhcNMjUwODE2MDE0MTM1WjAYMRYwFAYD VQQDEw02ODk2YTc0Zi05NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX/usdDsP7qtw1mdh7QMPK9JEw+uBvfLZt+llGIxzvpu5M+4IksXRJPQPnqy vWs6igsDsirShP9IG0ET1EP6PU7BvKKPvOh1e6mVuMl2Fy/1LHynEbhFH90dDZRK 2WSiMJ4v+y6vcj1PmH+BDMIoOz3lUXQD3u4aBhxM1uCIgF9yzyPHxRbqp6zdpw6G NNFRdJVQ1XS0ejcl7MW09RDCTU1ZXmTMSL2u4SLZIzoFe+mG+IEkdOitERhp/C65 ODEoyCExe4BZIVRTnyZjzmoxpbNsgqEK4MJXtwHrNHpHQWhI4OFCMzPGuTMWvsw6 TxUfqVS1Vste+w5qJqkR/B3MFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj60nxG Nr97KVcd5bFWpKomFnT5MB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGZbD1z+JVdJ86GgyW1IxjRguAUKvnMcOr/D67KDE9TjwC5UP8ssOy 8tlTe1Zuq0VstGlGoUx0uzwBTGqyeTOBV83jGVNW9V1NWsJibl02lNAu09fIv5G3 ZRgT9h84GA+xD89OL5J5G2vz0Hq3lJs3H5zA4BL0n12RfnuGJTsaGj9vLKkoN6v+ VnrWXK75xgaeiO+GbYT7IWdvnJvC0frpl/0BTHja+0DyxKerAbkt7aB8lwOTL+RH a9mY5OdmHiEkilag3DFXzI54LHK71AmbKmLMLQ0OZ45WJDQALc2s72XzYwlJs6P6 niqiH3LU2Zoy/SZZ/E2dc5/H7xIsxIm0 -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:37 2025 by rpki-client