$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: jMbMozXcGVSBtht3XiOGHz7sb3iDaHEXV6qX9W5wWb4= Subject key identifier: 0D:12:29:59:1A:3D:F0:C5:AA:40:B5:EC:FB:64:61:19:D9:52:FB:FB Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 34AF Signing time: Fri 08 Aug 2025 14:48:49 +0000 Manifest this update: Fri 08 Aug 2025 14:48:48 +0000 Manifest next update: Fri 15 Aug 2025 14:48:48 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: 7wiNEZOuUEEOKwCnsUgDZagunWwM4qsTbCp6doChR98=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Aug 8 14:48:48 2025 GMT Not After : Aug 15 14:48:48 2025 GMT Subject: CN=68960e50-ef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:0b:cd:2c:d9:99:54:59:cb:86:9b:ef:05: 47:11:ac:59:62:86:df:19:5d:2d:72:9c:e2:ca:09: c2:86:9a:27:90:3c:1d:49:cf:5a:e3:2a:f4:21:36: 11:a3:a5:ac:36:95:3e:44:1d:08:5c:ed:11:e1:30: 04:49:19:a1:e0:cc:ce:88:8e:4a:47:5c:94:ab:5c: c2:dc:2a:dd:99:d2:8d:e7:ba:53:81:c1:11:b3:f3: 62:7e:9c:61:b2:43:b8:f3:21:15:e1:8f:bb:52:b9: fc:94:62:61:09:17:66:1d:cb:2e:c8:e5:50:b6:29: c4:57:c2:af:2b:a9:32:5c:37:6e:1e:dc:9b:bd:08: 8a:d7:5f:0c:35:77:a4:f7:7b:9f:04:82:48:ff:60: d9:e1:52:d9:0a:96:49:49:e8:45:51:84:90:54:5f: 6f:f8:1d:05:55:97:5c:24:43:29:2b:e0:38:c6:51: 3b:6b:d2:a8:cf:f9:89:47:71:ee:1a:57:9d:69:25: 16:d0:46:8b:0d:14:ac:b1:9b:6c:07:b2:9f:90:0d: e6:26:9b:33:35:3a:5b:03:8c:15:9d:43:2e:d5:34: 37:29:95:4a:16:53:57:71:6c:86:4b:d2:9d:35:de: cf:f0:34:28:d5:7d:6c:0f:1b:f5:f2:8e:c7:5c:09: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:12:29:59:1A:3D:F0:C5:AA:40:B5:EC:FB:64:61:19:D9:52:FB:FB X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d9:e5:5a:09:d8:08:2c:46:72:2b:76:47:98:59:7d:2e:d6: 5a:24:af:53:40:63:cf:04:7a:b0:1c:40:f0:d3:ba:7a:79:59: 2d:81:d5:72:c1:84:46:d7:70:f7:1f:0f:c9:56:12:52:75:c1: 15:5a:17:c0:a3:bf:d1:b8:e4:f4:73:5d:d2:a0:f8:ec:e9:44: a1:a7:49:69:75:33:95:63:09:71:fc:e6:e4:9a:7b:8c:2b:49: ad:72:c2:0b:62:c4:d1:75:78:6e:27:d0:17:93:49:18:64:ce: cf:b6:68:4b:42:27:bc:cd:15:0d:fc:2f:dd:66:c8:1d:88:c0: 21:1b:7b:15:55:83:67:b6:9a:6e:5a:33:53:de:f2:0e:c5:3b: 79:86:3a:07:0e:51:f2:f4:7b:df:58:20:9f:b9:5f:98:8c:c5: 23:6a:7f:bf:1e:5c:1d:f9:c4:c2:cb:f2:71:74:25:0f:6e:e5: 66:5c:44:6b:d0:78:c9:30:ba:43:9f:73:91:5d:7a:35:83:cd: 1b:d8:46:0a:06:c6:d7:29:2c:c4:97:8a:d7:7c:7f:09:fb:d8: 34:b8:50:4a:a8:e7:c1:06:78:43:4e:40:36:4d:19:73:08:dd: 0e:d6:f7:35:ca:28:4e:4e:0f:a2:44:2e:96:91:33:8b:2a:32: f9:1e:b3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwODA4MTQ0ODQ4WhcNMjUwODE1MTQ0ODQ4WjAYMRYwFAYD VQQDEw02ODk2MGU1MC1lZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OULzSzZmVRZy4ab7wVHEaxZYobfGV0tcpziygnChponkDwdSc9a4yr0ITYR o6WsNpU+RB0IXO0R4TAESRmh4MzOiI5KR1yUq1zC3CrdmdKN57pTgcERs/Nifpxh skO48yEV4Y+7Urn8lGJhCRdmHcsuyOVQtinEV8KvK6kyXDduHtybvQiK118MNXek 93ufBIJI/2DZ4VLZCpZJSehFUYSQVF9v+B0FVZdcJEMpK+A4xlE7a9Koz/mJR3Hu GledaSUW0EaLDRSssZtsB7KfkA3mJpszNTpbA4wVnUMu1TQ3KZVKFlNXcWyGS9Kd Nd7P8DQo1X1sDxv18o7HXAkYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0SKVka PfDFqkC17PtkYRnZUvv7MB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU2eVaCdgILEZyK3ZHmFl9LtZaJK9TQGPPBHqwHEDw07p6eVktgdVy wYRG13D3Hw/JVhJSdcEVWhfAo7/RuOT0c13SoPjs6UShp0lpdTOVYwlx/ObkmnuM K0mtcsILYsTRdXhuJ9AXk0kYZM7PtmhLQie8zRUN/C/dZsgdiMAhG3sVVYNntppu WjNT3vIOxTt5hjoHDlHy9HvfWCCfuV+YjMUjan+/Hlwd+cTCy/JxdCUPbuVmXERr 0HjJMLpDn3ORXXo1g80b2EYKBsbXKSzEl4rXfH8J+9g0uFBKqOfBBnhDTkA2TRlz CN0O1vc1yihOTg+iRC6WkTOLKjL5HrOZ -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:48 2025 by rpki-client