$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: uMfUrhi4VXF97rVmj8jA2SyenaNueu11Q8l9BUkjskA= Subject key identifier: 63:AA:0A:0F:29:66:B1:9B:75:71:80:84:1E:39:6B:CB:AE:37:B1:F9 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07D8 Signing time: Fri 08 Aug 2025 21:27:15 +0000 Manifest this update: Fri 08 Aug 2025 21:27:14 +0000 Manifest next update: Fri 15 Aug 2025 21:27:14 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: ClPDV5Sz7EZ9jESVXItTn3u9sUPgms1rO8aeidqB+8A=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Aug 8 21:27:14 2025 GMT Not After : Aug 15 21:27:14 2025 GMT Subject: CN=68966bb3-6e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:69:78:77:63:28:df:20:46:b9:b1:1c:64: 51:c6:fe:9a:99:22:16:06:4a:24:25:8b:4e:6b:e9: 72:3b:bd:67:e4:d8:37:44:bd:37:5b:12:5e:dc:ab: db:c1:ed:96:f0:80:16:1d:e3:8f:38:f3:5d:58:4c: cf:fa:ee:35:3c:96:aa:97:8d:8e:97:9e:37:91:5b: 3e:b7:16:22:41:58:15:71:77:18:1e:a5:a3:47:4f: 8a:3a:fa:93:c7:61:8a:ef:88:17:4e:51:25:cb:8b: 2a:d5:7b:f3:d4:9a:ea:20:01:d7:0f:31:d7:fd:fc: df:ad:c4:63:3f:66:3d:3e:23:5d:08:50:81:03:bd: 80:76:77:ec:b1:2d:96:4e:e2:f8:f4:e0:27:03:3f: 38:8c:63:b3:00:35:b7:65:e3:63:50:e8:86:b4:bc: a8:82:6d:8a:18:d3:f4:30:dd:c0:59:94:90:09:ff: f9:fb:49:2e:7a:fc:c0:98:13:63:e0:91:5b:aa:8d: b7:b1:0e:9d:77:b4:ab:06:1c:ef:97:33:2a:6b:91: 33:49:7c:5f:75:b5:2e:c0:ab:83:c5:99:69:8f:01: 2b:ef:84:7c:ad:a7:83:32:e0:28:2b:8e:f4:39:a4: 1d:1e:fa:e3:16:10:eb:98:6d:56:80:7c:f6:c3:1d: 59:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AA:0A:0F:29:66:B1:9B:75:71:80:84:1E:39:6B:CB:AE:37:B1:F9 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:9e:01:6c:f0:e5:8d:4a:f7:f0:32:ea:8b:eb:4e:00:e8:e8: 26:63:57:72:67:ae:64:01:89:cc:80:0a:b8:71:aa:71:cc:6b: d2:e9:52:7d:9c:d6:7f:b6:17:31:1d:e6:ae:5e:c6:b6:b6:f0: e8:76:fb:92:78:cc:da:d6:4e:b0:7a:f5:52:86:92:fc:28:86: 03:4e:35:4b:b0:6c:35:79:7a:9d:e4:81:b3:06:5c:01:63:43: a4:6e:0f:f1:43:d5:a5:ec:58:8f:5b:e8:7a:89:0f:03:c2:d8: e6:9e:a6:a0:56:ba:0a:46:61:76:94:29:17:8b:64:2e:a0:81: 2e:c4:05:dc:cd:33:86:51:a7:e1:2d:6c:a1:5e:6c:3a:87:31: 2a:0a:5b:ea:a8:27:ed:ec:eb:f2:0c:78:2a:f9:bc:23:0e:15: a7:c4:de:c6:eb:18:24:4c:da:3a:54:eb:5c:39:11:69:74:bd: 9f:b3:f1:5d:89:5d:42:3e:4a:56:06:43:74:77:c5:e3:4e:cb: 63:e8:96:69:db:40:41:ea:82:ab:60:03:de:34:c9:9c:68:a0: bb:0b:c4:ad:16:2b:2a:93:89:95:bf:08:c7:9f:33:fa:ad:cf: ce:4c:e9:69:3b:a7:66:3f:20:55:d3:a8:15:78:8b:35:69:ea: ee:7f:e4:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwODA4MjEyNzE0WhcNMjUwODE1MjEyNzE0WjAYMRYwFAYD VQQDEw02ODk2NmJiMy02ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3p5peHdjKN8gRrmxHGRRxv6amSIWBkokJYtOa+lyO71n5Ng3RL03WxJe3Kvb we2W8IAWHeOPOPNdWEzP+u41PJaql42Ol543kVs+txYiQVgVcXcYHqWjR0+KOvqT x2GK74gXTlEly4sq1Xvz1JrqIAHXDzHX/fzfrcRjP2Y9PiNdCFCBA72AdnfssS2W TuL49OAnAz84jGOzADW3ZeNjUOiGtLyogm2KGNP0MN3AWZSQCf/5+0kuevzAmBNj 4JFbqo23sQ6dd7SrBhzvlzMqa5EzSXxfdbUuwKuDxZlpjwEr74R8raeDMuAoK470 OaQdHvrjFhDrmG1WgHz2wx1ZyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOqCg8p ZrGbdXGAhB45a8uuN7H5MB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRngFs8OWNSvfwMuqL604A6OgmY1dyZ65kAYnMgAq4capxzGvS6VJ9 nNZ/thcxHeauXsa2tvDodvuSeMza1k6wevVShpL8KIYDTjVLsGw1eXqd5IGzBlwB Y0Okbg/xQ9Wl7FiPW+h6iQ8DwtjmnqagVroKRmF2lCkXi2QuoIEuxAXczTOGUafh LWyhXmw6hzEqClvqqCft7OvyDHgq+bwjDhWnxN7G6xgkTNo6VOtcORFpdL2fs/Fd iV1CPkpWBkN0d8XjTstj6JZp20BB6oKrYAPeNMmcaKC7C8StFisqk4mVvwjHnzP6 rc/OTOlpO6dmPyBV06gVeIs1aeruf+Qg -----END CERTIFICATE-----Generated at Sun Aug 10 13:49:57 2025 by rpki-client