$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: rD9aqwPArzx5i01kgK28lIw0egKvB3LBkLk4NHJlAW4= Subject key identifier: D0:4E:48:94:7A:EE:76:C9:35:81:F8:45:18:84:A6:73:9B:AE:FB:6B Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0BC4 Signing time: Wed 06 Aug 2025 19:11:39 +0000 Manifest this update: Wed 06 Aug 2025 19:11:38 +0000 Manifest next update: Wed 13 Aug 2025 19:11:38 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: EpFpMwkv8L8L84caAcsHgu0ukzHqPWwgb7c/qbXQQaM=) 2: 7AC6992E655411F088401528C4F9AE02.roa (hash: uIcNx9LJmFIiFy1R//MYnp48SjiCyMS3BH2WDp6mT4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Aug 6 19:11:38 2025 GMT Not After : Aug 13 19:11:38 2025 GMT Subject: CN=6893a8ea-d3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:30:d9:12:29:54:5f:37:fe:72:c2:92:df: f1:fb:6c:4f:c7:a2:6d:44:f7:db:4f:c0:e7:e8:37: e3:55:7d:bd:f6:d1:42:77:dc:8d:d0:15:70:c2:2b: 3d:35:7d:84:ae:07:fd:74:d5:27:70:3c:02:80:c6: 87:1f:e8:8b:21:bd:9f:bf:33:9f:f5:e1:3c:c7:56: 94:30:13:50:d1:27:45:49:91:12:8b:d5:d2:0a:eb: 8e:8f:db:e3:af:f8:28:1a:ba:d4:cf:36:61:c3:03: aa:2e:ee:4b:f6:f9:a7:92:90:d3:2f:a8:a3:30:cc: 12:85:d2:35:31:7a:80:8d:0b:59:fa:2d:2a:d1:b7: 42:db:d8:c3:06:fa:cf:d0:c9:f8:e7:68:39:80:12: 68:c8:60:51:17:aa:24:6e:73:f6:da:a8:3f:6e:2b: f8:5c:75:21:14:ae:52:00:20:ff:0b:60:b1:28:df: 0c:58:23:0d:34:4d:e6:9a:31:5d:85:65:7e:a8:e3: 6f:00:1c:6b:38:68:ba:dc:14:4a:72:3e:ae:41:1f: 33:2b:2b:df:0a:30:0f:c3:55:1a:7f:c8:94:18:f2: 0a:ec:45:7b:2f:0b:12:91:ba:3b:a4:28:61:6e:32: 8f:8c:49:98:12:52:91:d8:45:ab:61:e3:ea:ba:30: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:48:94:7A:EE:76:C9:35:81:F8:45:18:84:A6:73:9B:AE:FB:6B X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d3:da:2c:65:01:48:9f:c3:fa:72:05:7b:60:ef:b7:a5:a5: fc:a6:4c:72:96:04:22:ef:38:e6:1b:d4:d9:36:e4:44:8a:29: 86:4d:4a:33:ec:9b:91:25:18:2c:a9:01:11:97:15:a5:ee:6e: 32:19:66:6b:a7:25:21:b3:29:ac:45:85:57:81:b2:b6:cb:1e: f0:de:47:15:48:af:f0:2e:cd:11:d4:35:22:7c:ec:2e:21:8d: a7:bd:1d:8a:8b:23:d7:ce:b5:e5:1f:9f:f9:6f:9a:ec:bd:07: 4a:9a:94:7a:75:5f:04:71:18:7c:ca:01:a2:3a:71:91:d4:4e: 36:36:ac:06:a5:51:5a:bc:b2:fc:f7:68:3f:df:10:fd:70:cb: 90:e6:f0:f4:a3:86:99:ad:9a:6c:16:e0:dd:03:6e:e2:3c:e5: e3:3d:ea:d8:4b:5f:c1:f2:8f:51:f5:61:f3:82:8b:81:89:27: a3:a3:22:a4:89:c7:c9:c6:69:a9:90:85:40:d7:36:fa:66:ac: 3f:6d:6f:96:50:56:bc:f0:d7:c3:f3:5f:dd:4d:0c:fd:ae:99: e7:fd:22:3d:88:00:eb:40:83:79:f4:08:a5:c6:32:a6:e9:6b: 0b:01:dc:20:03:6d:31:ef:1e:a9:75:21:73:fe:0b:72:29:19: 95:4b:6b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUwODA2MTkxMTM4WhcNMjUwODEzMTkxMTM4WjAYMRYwFAYD VQQDEw02ODkzYThlYS1kM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9Iw2RIpVF83/nLCkt/x+2xPx6JtRPfbT8Dn6DfjVX299tFCd9yN0BVwwis9 NX2Ergf9dNUncDwCgMaHH+iLIb2fvzOf9eE8x1aUMBNQ0SdFSZESi9XSCuuOj9vj r/goGrrUzzZhwwOqLu5L9vmnkpDTL6ijMMwShdI1MXqAjQtZ+i0q0bdC29jDBvrP 0Mn452g5gBJoyGBRF6okbnP22qg/biv4XHUhFK5SACD/C2CxKN8MWCMNNE3mmjFd hWV+qONvABxrOGi63BRKcj6uQR8zKyvfCjAPw1Uaf8iUGPIK7EV7LwsSkbo7pChh bjKPjEmYElKR2EWrYePqujDz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBOSJR6 7nbJNYH4RRiEpnObrvtrMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ09osZQFIn8P6cgV7YO+3paX8pkxylgQi7zjmG9TZNuREiimGTUoz 7JuRJRgsqQERlxWl7m4yGWZrpyUhsymsRYVXgbK2yx7w3kcVSK/wLs0R1DUifOwu IY2nvR2KiyPXzrXlH5/5b5rsvQdKmpR6dV8EcRh8ygGiOnGR1E42NqwGpVFavLL8 92g/3xD9cMuQ5vD0o4aZrZpsFuDdA27iPOXjPerYS1/B8o9R9WHzgouBiSejoyKk icfJxmmpkIVA1zb6Zqw/bW+WUFa88NfD81/dTQz9rpnn/SI9iADrQIN59AilxjKm 6WsLAdwgA20x7x6pdSFz/gtyKRmVS2va -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:45 2025 by rpki-client