$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: E3UohZFl3BKPDrTce9XR5ljpDhRZpAcfy0jzLAbYuTI= Subject key identifier: C0:1B:30:6B:00:2C:53:B2:C3:B8:1A:9E:DB:50:5F:32:6D:06:F9:23 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 2029 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 18A8 Signing time: Tue 12 Aug 2025 17:22:37 +0000 Manifest this update: Tue 12 Aug 2025 17:22:36 +0000 Manifest next update: Tue 19 Aug 2025 17:22:36 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: oPTc6cde4PRh4ZqzBDjPfLuxh++G4+n3jyJbbPb4SQE=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8233 (0x2029) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Aug 12 17:22:36 2025 GMT Not After : Aug 19 17:22:36 2025 GMT Subject: CN=689b785c-abc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:30:7b:29:7b:97:76:4b:79:de:1b:cb:c4:85: ea:35:73:9e:a9:89:2f:10:3b:b8:f8:56:77:23:98: 74:e1:71:29:e9:9e:c2:c6:57:bd:c9:05:98:2f:71: 06:6d:96:16:97:39:de:f6:b2:39:57:d5:ab:12:14: e1:1b:db:3b:08:33:75:83:18:ec:5d:97:32:41:5c: d0:18:1a:6b:ea:a8:8a:76:83:35:94:c1:2b:cb:99: 4e:90:5c:14:f5:ae:98:5f:2e:fc:7b:24:f8:be:26: 3e:6b:b3:8a:14:bc:10:73:f1:59:e6:7e:5c:d0:37: 04:f0:7e:6d:a0:c2:fb:ba:e3:d6:2f:85:45:a4:b0: 92:f7:27:fa:66:e9:13:dd:0f:5f:43:63:69:7d:2a: e4:14:03:1b:44:32:b3:a5:6d:15:b0:3a:96:0a:c6: f3:01:ab:87:89:68:5a:ad:cb:ef:4b:07:4a:4b:38: ef:74:a9:8c:27:7e:bf:36:e3:3e:ad:6b:08:8c:c7: a9:b6:cb:de:67:3a:2c:36:be:70:f2:14:15:75:9f: d2:3f:dd:22:77:39:f0:73:7a:64:d8:b5:62:79:6c: 8e:23:83:d9:95:05:1c:5f:92:ad:33:e1:ad:e8:17: 56:4e:ce:4a:e7:71:fc:42:d3:a6:88:51:13:80:94: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:30:6B:00:2C:53:B2:C3:B8:1A:9E:DB:50:5F:32:6D:06:F9:23 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:67:7a:af:42:52:10:93:db:0c:ac:16:3b:cd:30:07:da: c0:48:fe:97:67:5e:db:86:fe:86:6b:a7:6a:00:f7:d0:91:ed: c4:d2:a5:a8:87:a7:0d:f0:44:bf:11:85:2a:99:3d:df:fb:90: 83:ad:83:34:1c:49:dc:a1:79:4a:79:93:5e:64:28:78:da:c2: f4:11:72:78:75:cb:6a:20:41:63:72:80:d2:e5:78:0e:e2:91: 20:58:a1:ff:7a:6c:95:4a:1d:23:b3:a1:74:84:8b:d8:0b:2f: ea:e6:c2:1e:b1:9f:7e:5c:d9:eb:2e:f3:60:e0:2f:76:c1:7e: ea:a8:b2:7f:cb:f2:83:5b:13:c4:ec:40:99:26:69:5f:90:6a: 91:2b:f5:57:40:03:94:1b:87:d0:0b:9b:17:4f:0a:0e:16:ba: 4c:e2:76:0a:f1:45:e1:99:58:98:ab:fd:a9:69:fa:14:b2:a7: c7:d1:7f:da:91:0d:41:13:e3:cf:07:49:9d:bb:d7:59:9e:9d: 6b:04:33:b7:f5:eb:91:46:68:ae:a6:34:2e:93:66:69:61:12: 0b:56:97:c3:c7:eb:47:3f:b0:f7:c7:47:cc:bb:93:24:21:90: f3:ef:01:ec:fc:76:a8:9d:35:c0:42:ff:22:eb:bc:cb:6d:e8: fb:90:1f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICICkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwODEyMTcyMjM2WhcNMjUwODE5MTcyMjM2WjAYMRYwFAYD VQQDEw02ODliNzg1Yy1hYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DB7KXuXdkt53hvLxIXqNXOeqYkvEDu4+FZ3I5h04XEp6Z7Cxle9yQWYL3EG bZYWlzne9rI5V9WrEhThG9s7CDN1gxjsXZcyQVzQGBpr6qiKdoM1lMEry5lOkFwU 9a6YXy78eyT4viY+a7OKFLwQc/FZ5n5c0DcE8H5toML7uuPWL4VFpLCS9yf6ZukT 3Q9fQ2NpfSrkFAMbRDKzpW0VsDqWCsbzAauHiWharcvvSwdKSzjvdKmMJ36/NuM+ rWsIjMeptsveZzosNr5w8hQVdZ/SP90idznwc3pk2LVieWyOI4PZlQUcX5KtM+Gt 6BdWTs5K53H8QtOmiFETgJTG0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAbMGsA LFOyw7ganttQXzJtBvkjMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkrWd6r0JSEJPbDKwWO80wB9rASP6XZ17bhv6Ga6dqAPfQke3E0qWo h6cN8ES/EYUqmT3f+5CDrYM0HEncoXlKeZNeZCh42sL0EXJ4dctqIEFjcoDS5XgO 4pEgWKH/emyVSh0js6F0hIvYCy/q5sIesZ9+XNnrLvNg4C92wX7qqLJ/y/KDWxPE 7ECZJmlfkGqRK/VXQAOUG4fQC5sXTwoOFrpM4nYK8UXhmViYq/2pafoUsqfH0X/a kQ1BE+PPB0mdu9dZnp1rBDO39euRRmiupjQuk2ZpYRILVpfDx+tHP7D3x0fMu5Mk IZDz7wHs/HaonTXAQv8i67zLbej7kB9T -----END CERTIFICATE-----Generated at Wed Aug 13 05:36:01 2025 by rpki-client