$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: YzyumKAtTyY9DZ3weazNJkQs93rkldjmGfsukR/zlUc= Subject key identifier: 8D:4C:E6:FC:36:67:F1:33:D7:8B:EC:B5:6D:C6:9F:21:99:ED:43:98 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: F6 Signing time: Mon 11 Aug 2025 05:23:37 +0000 Manifest this update: Mon 11 Aug 2025 05:23:37 +0000 Manifest next update: Mon 18 Aug 2025 05:23:37 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: hbOFvlZGDQHbDQJ0vYWP2xtjNyt8Tx4BeHwuwdBNxEI=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Aug 11 05:23:37 2025 GMT Not After : Aug 18 05:23:37 2025 GMT Subject: CN=68997e59-eceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:2f:a6:0e:d3:15:ac:68:a0:06:56:ce:1d: d5:13:b5:55:13:a5:af:24:fb:32:d7:81:e3:aa:48: 29:f2:3f:3f:5c:95:73:e6:9e:9e:6c:c1:0f:4c:c6: 42:94:8d:26:1a:ff:f7:a0:47:64:32:5e:ff:cc:43: 39:18:bf:99:7e:6c:26:fc:af:4b:73:42:2d:5c:f5: 28:23:f5:9d:01:bf:e8:d4:21:c3:5f:ea:9b:de:d9: 26:2e:6b:a4:8a:2c:6f:76:0d:6f:95:21:f0:43:b6: 55:72:68:3a:56:86:e2:0a:48:bd:65:22:4f:b3:5e: f5:a9:ab:ef:e5:8b:8b:07:ca:ee:63:64:85:16:4c: 07:c5:2a:12:1c:07:50:f0:27:7f:37:f0:a2:26:8d: 08:fb:b3:63:a6:f0:94:4d:47:2b:e0:bd:35:6b:79: af:27:1f:68:0b:52:ba:53:34:b0:3d:c5:20:81:b9: a4:aa:7d:c0:8d:19:6d:b4:ac:d4:8f:83:49:fa:ce: 66:62:98:83:6a:f3:37:13:5f:10:78:5d:6a:18:5b: 8a:0e:0e:71:fd:a5:79:fc:e2:e1:db:63:02:16:e7: 5f:12:65:42:e1:a1:7c:19:fc:01:f6:08:4d:f9:27: 54:77:81:73:54:22:52:c3:82:1d:05:05:b4:6b:46: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4C:E6:FC:36:67:F1:33:D7:8B:EC:B5:6D:C6:9F:21:99:ED:43:98 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dc:88:c6:c0:8e:ae:33:36:e5:e5:c8:b6:16:ab:cf:dc:a7: df:03:12:35:65:40:aa:86:63:a2:27:81:c0:52:f5:96:5f:22: 3e:ef:f6:a1:16:28:25:70:a5:b7:ef:15:fd:30:48:4e:48:7e: 43:61:c4:00:f9:85:ae:44:d0:bd:e0:7f:cb:49:2b:5d:aa:5f: a9:c9:11:40:7c:ff:30:60:97:9b:fe:f2:c0:d2:f2:c2:f9:12: a0:bb:44:9d:76:1c:8c:6b:63:26:32:b2:45:33:f8:39:c3:41: 39:18:6a:d6:fb:68:35:54:9d:fd:b9:9f:bb:47:55:c4:6a:ec: 20:5b:19:35:13:61:d9:a5:20:5c:7f:4b:84:97:24:8e:dc:e2: 78:1c:74:cb:1e:7d:00:30:25:a3:31:12:f0:e7:48:a8:f3:0a: 03:44:1b:30:c8:32:6f:6b:02:24:69:c7:cd:eb:6f:f4:92:23: 59:05:93:e7:4d:41:c5:51:d0:92:62:69:03:d7:11:c2:25:90: 55:f9:c6:f9:a9:2b:cc:24:5f:40:42:cc:d7:cf:30:b1:4b:41: f8:34:df:61:cc:ee:69:0a:29:c9:bf:cc:26:12:37:9c:52:81: e9:1c:e0:d5:00:c9:98:cd:19:66:e2:50:9b:84:92:97:cc:24: 6a:d8:64:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwODExMDUyMzM3WhcNMjUwODE4MDUyMzM3WjAYMRYwFAYD VQQDEw02ODk5N2U1OS1lY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTIvpg7TFaxooAZWzh3VE7VVE6WvJPsy14Hjqkgp8j8/XJVz5p6ebMEPTMZC lI0mGv/3oEdkMl7/zEM5GL+Zfmwm/K9Lc0ItXPUoI/WdAb/o1CHDX+qb3tkmLmuk iixvdg1vlSHwQ7ZVcmg6VobiCki9ZSJPs171qavv5YuLB8ruY2SFFkwHxSoSHAdQ 8Cd/N/CiJo0I+7NjpvCUTUcr4L01a3mvJx9oC1K6UzSwPcUggbmkqn3AjRlttKzU j4NJ+s5mYpiDavM3E18QeF1qGFuKDg5x/aV5/OLh22MCFudfEmVC4aF8GfwB9ghN +SdUd4FzVCJSw4IdBQW0a0bSfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1M5vw2 Z/Ez14vstW3GnyGZ7UOYMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3IjGwI6uMzbl5ci2FqvP3KffAxI1ZUCqhmOiJ4HAUvWWXyI+7/ah FiglcKW37xX9MEhOSH5DYcQA+YWuRNC94H/LSStdql+pyRFAfP8wYJeb/vLA0vLC +RKgu0SddhyMa2MmMrJFM/g5w0E5GGrW+2g1VJ39uZ+7R1XEauwgWxk1E2HZpSBc f0uElySO3OJ4HHTLHn0AMCWjMRLw50io8woDRBswyDJvawIkacfN62/0kiNZBZPn TUHFUdCSYmkD1xHCJZBV+cb5qSvMJF9AQszXzzCxS0H4NN9hzO5pCinJv8wmEjec UoHpHODVAMmYzRlm4lCbhJKXzCRq2GT/ -----END CERTIFICATE-----Generated at Mon Aug 11 10:05:02 2025 by rpki-client