$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: mw288sbCOHNWh52D+zftljPqZR57nA2ErWUw/noPKlE= Subject key identifier: 4D:68:96:AD:1A:75:7F:90:67:71:06:26:53:62:96:CA:93:3F:74:C1 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 0284 Signing time: Thu 07 Aug 2025 02:16:48 +0000 Manifest this update: Thu 07 Aug 2025 02:16:48 +0000 Manifest next update: Thu 14 Aug 2025 02:16:48 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: MU+gTpfoH0ERSRzYzT1SdO6bifs8r97oyX+2mfN8JDY=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Aug 7 02:16:48 2025 GMT Not After : Aug 14 02:16:48 2025 GMT Subject: CN=68940c90-3fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:77:ff:69:13:f2:1e:a4:a2:1f:68:c4:35:fc: 05:8d:88:55:2d:64:da:10:d6:4a:90:51:ec:c7:86: af:2f:5b:eb:a5:5f:ac:b6:97:64:24:82:4c:11:17: 04:ed:91:7b:bc:c1:d7:df:31:16:95:23:c5:a1:cf: 44:17:6a:29:09:ea:46:88:4c:45:e9:cd:df:d8:92: 05:43:67:02:e0:cf:f9:e3:de:e2:a9:81:33:ea:e3: a5:dd:f1:68:b8:73:23:60:b2:3b:0d:d3:11:e8:c8: 0f:ca:3d:ed:57:1e:90:1d:b5:99:ac:e7:54:2d:8b: ab:15:71:f6:b1:99:32:63:a4:41:48:b4:e9:7c:11: 84:aa:a8:79:df:af:aa:6c:c9:da:64:4e:e7:3d:f8: ad:54:94:28:22:73:ef:0f:9d:18:a5:14:4d:09:ee: 0a:eb:3c:51:40:d8:1a:05:81:ff:66:82:dc:24:1a: d5:34:50:0f:b1:69:b8:44:89:0a:d9:98:f9:0e:4a: 1e:82:7d:85:d7:3d:44:1f:0e:fd:00:dc:2b:a8:60: 41:90:aa:34:dc:9f:70:28:94:ff:14:5c:92:fa:2e: 98:c7:03:ca:d5:db:61:48:33:b8:00:02:8c:8a:0e: 67:c2:e0:fd:75:16:19:29:d5:9a:cb:8a:f1:01:eb: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:96:AD:1A:75:7F:90:67:71:06:26:53:62:96:CA:93:3F:74:C1 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:d2:c5:3b:28:3f:fa:6e:21:f5:38:e3:b1:05:ef:c0:b4: 4f:1c:55:d6:00:f1:85:f7:32:c3:74:7e:c0:ad:cf:3a:32:9c: c4:d3:4e:65:e0:ab:ef:63:60:a0:cc:02:f8:dd:f5:99:d3:6a: 8d:6c:88:b9:4b:2f:5c:ce:a8:24:a4:7d:70:83:40:25:4f:00: db:03:45:6d:95:2b:1e:fe:1b:6d:af:45:2f:b6:f3:f7:88:ab: cb:57:f2:15:5c:ba:80:cc:c9:44:29:12:b5:3f:bf:c5:91:73: 11:8c:c4:2b:9a:36:76:77:01:01:ea:5f:94:a5:37:5a:dc:0e: 6d:37:c7:89:7d:1e:66:c7:38:21:5e:f3:5e:24:d6:fb:71:85: 52:01:43:f0:ea:b7:93:e3:2a:5c:b8:de:53:c1:be:88:33:61: 35:81:b0:b0:24:e2:70:5c:52:6b:ba:09:07:fc:98:63:67:30: e4:14:c3:d1:87:b5:38:d2:cb:96:06:4b:25:52:66:aa:c9:85: a4:1c:8d:6d:f0:0a:63:d0:14:65:7a:25:16:61:9d:c4:de:49: ac:19:38:6f:29:de:ba:e2:bd:a2:b7:15:55:46:68:88:79:15: 78:65:34:99:f5:2f:f2:9d:1e:cf:50:86:6f:25:3b:99:11:53: 12:23:35:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwODA3MDIxNjQ4WhcNMjUwODE0MDIxNjQ4WjAYMRYwFAYD VQQDEw02ODk0MGM5MC0zZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93f/aRPyHqSiH2jENfwFjYhVLWTaENZKkFHsx4avL1vrpV+stpdkJIJMERcE 7ZF7vMHX3zEWlSPFoc9EF2opCepGiExF6c3f2JIFQ2cC4M/5497iqYEz6uOl3fFo uHMjYLI7DdMR6MgPyj3tVx6QHbWZrOdULYurFXH2sZkyY6RBSLTpfBGEqqh536+q bMnaZE7nPfitVJQoInPvD50YpRRNCe4K6zxRQNgaBYH/ZoLcJBrVNFAPsWm4RIkK 2Zj5Dkoegn2F1z1EHw79ANwrqGBBkKo03J9wKJT/FFyS+i6YxwPK1dthSDO4AAKM ig5nwuD9dRYZKdWay4rxAet6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1olq0a dX+QZ3EGJlNilsqTP3TBMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3oNLFOyg/+m4h9TjjsQXvwLRPHFXWAPGF9zLDdH7Arc86MpzE005l 4KvvY2CgzAL43fWZ02qNbIi5Sy9czqgkpH1wg0AlTwDbA0VtlSse/httr0UvtvP3 iKvLV/IVXLqAzMlEKRK1P7/FkXMRjMQrmjZ2dwEB6l+UpTda3A5tN8eJfR5mxzgh XvNeJNb7cYVSAUPw6reT4ypcuN5Twb6IM2E1gbCwJOJwXFJrugkH/JhjZzDkFMPR h7U40suWBkslUmaqyYWkHI1t8Apj0BRleiUWYZ3E3kmsGThvKd664r2itxVVRmiI eRV4ZTSZ9S/ynR7PUIZvJTuZEVMSIzUm -----END CERTIFICATE-----Generated at Fri Aug 8 00:49:36 2025 by rpki-client