$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json) Hash identifier: OZYyCXXXJC41F2VVdSKQ3dxEXEHVS4O/x9WYJ1tdLdM= Subject key identifier: 0A:D9:3B:38:A6:83:5F:D4:A0:A0:E8:AA:93:D7:15:15:FB:7E:96:2C Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft Manifest number: 0749 Signing time: Sun 10 Aug 2025 21:47:46 +0000 Manifest this update: Sun 10 Aug 2025 21:47:45 +0000 Manifest next update: Sun 17 Aug 2025 21:47:45 +0000 Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: TO/0Q/FmGCw+XP1h85vKCGy3wwdxutR5L8ut4KrRG6M=) 2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo=) 3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: 49sLLzSLtNmidSVGS5udGErAMHHN/OeLE93kClICECY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Aug 10 21:47:45 2025 GMT Not After : Aug 17 21:47:45 2025 GMT Subject: CN=68991382-c7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:a0:34:ed:0a:84:f7:69:dd:1b:b1:c3:11: ed:43:9f:13:ae:90:8a:5e:2a:95:d4:fd:4a:f2:39: 98:a8:ab:41:2d:de:db:ed:18:10:cd:02:c8:c6:ad: 5f:15:b2:7c:09:54:9b:ba:1d:1e:e6:ff:1d:f5:97: 8c:02:7c:9c:50:4b:f1:55:45:f6:83:a8:4a:13:e1: 5b:71:1b:e5:2d:1b:2b:46:ce:47:57:eb:46:0f:0e: b5:dd:d6:24:f2:87:50:b1:d8:20:bb:37:32:24:99: 16:2f:1e:c6:bd:da:65:24:64:c6:11:a5:37:8e:e1: 0e:64:89:d9:9e:8e:8a:b0:95:78:14:f1:f5:28:e3: 60:27:e5:a5:7b:2a:d6:87:49:cb:52:8b:4d:bd:56: d5:dc:5e:50:a3:e5:d5:8e:65:43:60:bb:13:3f:c3: 89:e6:c2:38:47:ed:7b:33:53:d0:c8:7c:9e:31:ec: 80:05:e8:58:0f:ad:70:b2:93:d8:a3:aa:72:10:c7: 0e:72:ff:a5:20:4c:b5:c7:30:13:6f:69:9a:95:f6: 5a:36:c3:76:ee:40:e2:18:97:38:11:58:17:d9:13: e4:ca:27:fa:82:f0:42:61:52:43:35:b1:fd:65:a6: 01:66:3b:f9:d6:55:b7:7e:a3:42:4c:36:b6:f3:b4: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:3B:38:A6:83:5F:D4:A0:A0:E8:AA:93:D7:15:15:FB:7E:96:2C X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:df:4c:93:49:bc:37:a4:1d:0d:11:45:ca:b6:d3:16:8e:4d: f0:8e:58:12:cc:d8:17:57:ee:91:d0:32:fd:94:86:42:14:71: 23:8e:b5:48:fa:51:02:72:36:a0:90:ba:bf:6d:75:6c:99:70: 87:63:74:ef:08:38:20:c4:38:ad:65:d0:3d:0f:92:96:0f:3d: 76:ff:6c:47:87:50:74:7a:c5:47:b3:cb:53:31:49:40:a2:e9: d2:a0:42:43:fc:cc:91:07:a0:b8:2b:6e:ff:b3:17:ce:58:69: 8e:c1:cf:de:bd:7e:8e:00:15:98:0c:73:e8:35:45:20:2f:52: 36:e4:8f:07:76:ae:05:0e:ea:87:a7:58:db:ab:99:4e:b6:f8: 30:77:3f:09:02:37:3e:46:bd:cf:66:bd:c5:2c:a6:58:85:5b: 09:8f:a1:49:ae:14:a5:37:c0:0a:cf:8b:a7:49:e3:a3:22:75: 35:ff:8f:73:5a:7b:b5:f1:b2:2e:b0:e2:05:84:86:91:fb:d2: d0:cc:70:de:9b:64:7d:87:fb:c4:b0:c2:6a:1a:b5:62:b7:c7: 11:92:a3:b6:8a:3b:b7:4b:98:42:ba:2e:7c:9c:fa:ea:44:7a: 73:cd:ec:63:d4:e5:db:49:57:24:96:7e:8b:44:79:41:59:58: 9f:5f:a1:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUwODEwMjE0NzQ1WhcNMjUwODE3MjE0NzQ1WjAYMRYwFAYD VQQDEw02ODk5MTM4Mi1jN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ6gNO0KhPdp3RuxwxHtQ58TrpCKXiqV1P1K8jmYqKtBLd7b7RgQzQLIxq1f FbJ8CVSbuh0e5v8d9ZeMAnycUEvxVUX2g6hKE+FbcRvlLRsrRs5HV+tGDw613dYk 8odQsdgguzcyJJkWLx7GvdplJGTGEaU3juEOZInZno6KsJV4FPH1KONgJ+WleyrW h0nLUotNvVbV3F5Qo+XVjmVDYLsTP8OJ5sI4R+17M1PQyHyeMeyABehYD61wspPY o6pyEMcOcv+lIEy1xzATb2malfZaNsN27kDiGJc4EVgX2RPkyif6gvBCYVJDNbH9 ZaYBZjv51lW3fqNCTDa287SsBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArZOzim g1/UoKDoqpPXFRX7fpYsMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzIzQy8wOTA3NDRDMjNBM0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVp NDZ5aGgwWTlxWjV6MWFyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA30yTSbw3pB0NEUXKttMWjk3wjlgSzNgXV+6R0DL9lIZCFHEjjrVI +lECcjagkLq/bXVsmXCHY3TvCDggxDitZdA9D5KWDz12/2xHh1B0esVHs8tTMUlA ounSoEJD/MyRB6C4K27/sxfOWGmOwc/evX6OABWYDHPoNUUgL1I25I8Hdq4FDuqH p1jbq5lOtvgwdz8JAjc+Rr3PZr3FLKZYhVsJj6FJrhSlN8AKz4unSeOjInU1/49z Wnu18bIusOIFhIaR+9LQzHDem2R9h/vEsMJqGrVit8cRkqO2iju3S5hCui58nPrq RHpzzexj1OXbSVckln6LRHlBWVifX6Eo -----END CERTIFICATE-----Generated at Mon Aug 11 07:35:48 2025 by rpki-client