$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: M6ExFLmWbXm9WBycLNa+9GLPoMh0ANZ4Zo/8qttJ0Jw= Subject key identifier: 59:DA:F2:51:B0:B1:C8:39:65:DF:FD:8D:19:D6:CF:22:F4:C4:42:B0 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 0112 Signing time: Sat 09 Aug 2025 05:17:36 +0000 Manifest this update: Sat 09 Aug 2025 05:17:36 +0000 Manifest next update: Sat 16 Aug 2025 05:17:36 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: UCfHLLFYAA4mgi5qcJqYcBjdYXv2FXp6B5lKY5S4a7U=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Aug 9 05:17:36 2025 GMT Not After : Aug 16 05:17:36 2025 GMT Subject: CN=6896d9f0-30b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:64:e7:82:00:4d:6a:36:e8:14:10:9e:94: c5:4a:5f:ae:23:1e:09:94:6d:d9:53:85:42:fa:7f: 42:54:ef:90:9c:a4:11:7d:20:15:d1:e1:db:10:af: b5:b4:51:1a:c6:c7:e1:ad:a2:04:8e:cb:18:43:70: 1c:c9:93:6d:bb:b7:f9:6b:fb:62:9d:6b:d2:77:92: b8:ba:9d:18:dd:3a:54:57:eb:41:83:40:42:98:07: 6d:27:b8:5d:c0:bd:dd:8d:76:65:f1:12:c2:ee:bd: ac:c0:e6:bf:cf:51:8b:80:ba:63:fa:6d:fa:98:42: 79:30:9d:f8:d4:8a:77:35:6d:d2:ba:f6:3c:c5:47: 23:3f:40:f3:09:d4:28:f7:cf:1e:76:b1:ec:62:ab: e3:15:70:c7:e2:17:61:06:8b:14:21:34:89:dc:08: d0:38:2e:ae:c3:7c:b2:2b:2a:5e:f8:61:ad:ae:c8: bf:77:e5:d8:c0:48:6d:87:9e:64:19:0c:d9:01:0a: ed:28:07:e3:dc:7a:c7:46:9d:cc:35:bf:39:19:4b: 55:c5:d8:10:a2:f2:c7:d5:a4:77:66:ee:4c:bf:4d: 31:76:58:1d:13:69:4f:63:80:8b:2a:1b:49:61:20: 93:9f:68:c4:19:e3:f9:63:7b:3d:12:29:0a:5b:20: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:F2:51:B0:B1:C8:39:65:DF:FD:8D:19:D6:CF:22:F4:C4:42:B0 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:96:d7:ee:25:91:58:1b:76:3b:8a:2f:2d:bb:cf:2a:fd: 10:55:03:43:a9:f3:79:96:86:27:db:fd:a6:06:56:2d:f5:a4: 92:1b:b7:bc:95:65:18:ce:3f:a9:47:1d:24:c8:53:8c:81:12: d2:f0:73:ad:29:20:32:9a:22:c7:c3:89:67:68:87:21:ea:1e: 0e:62:18:0b:19:8d:36:80:2e:d5:cb:88:16:fe:9c:e8:ec:f4: c0:e9:e5:73:0a:6e:12:e9:7f:c0:9f:b2:6f:6d:46:d1:27:0c: 63:e6:8b:06:bc:0e:c5:b1:f3:8c:76:03:9b:a6:57:52:89:e8: f3:1a:7f:c8:88:12:d9:5f:9a:e6:05:f1:7f:3d:b9:5f:0b:da: a5:a3:1a:9b:81:c0:b0:99:2d:7f:c5:ab:b1:e6:46:56:9e:57: 11:0f:38:8e:a9:1b:62:4d:0e:d8:18:29:b7:ba:5a:75:a3:94: 8f:d0:06:23:30:84:91:63:af:28:da:92:5b:0a:ec:7d:5d:ba: 26:44:c4:12:c5:5b:b0:6a:e8:02:0e:f1:7e:9b:4a:36:9e:28: 98:5f:f5:75:d2:c2:9a:d0:80:a7:e4:72:a2:04:cb:3a:20:83: b7:7e:5f:9b:90:87:a3:0e:dd:30:81:2c:99:45:ae:f6:f1:79: d5:95:f4:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwODA5MDUxNzM2WhcNMjUwODE2MDUxNzM2WjAYMRYwFAYD VQQDEw02ODk2ZDlmMC0zMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoZk54IATWo26BQQnpTFSl+uIx4JlG3ZU4VC+n9CVO+QnKQRfSAV0eHbEK+1 tFEaxsfhraIEjssYQ3AcyZNtu7f5a/tinWvSd5K4up0Y3TpUV+tBg0BCmAdtJ7hd wL3djXZl8RLC7r2swOa/z1GLgLpj+m36mEJ5MJ341Ip3NW3SuvY8xUcjP0DzCdQo 988edrHsYqvjFXDH4hdhBosUITSJ3AjQOC6uw3yyKype+GGtrsi/d+XYwEhth55k GQzZAQrtKAfj3HrHRp3MNb85GUtVxdgQovLH1aR3Zu5Mv00xdlgdE2lPY4CLKhtJ YSCTn2jEGeP5Y3s9EikKWyB9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFna8lGw scg5Zd/9jRnWzyL0xEKwMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB715bX7iWRWBt2O4ovLbvPKv0QVQNDqfN5loYn2/2mBlYt9aSSG7e8 lWUYzj+pRx0kyFOMgRLS8HOtKSAymiLHw4lnaIch6h4OYhgLGY02gC7Vy4gW/pzo 7PTA6eVzCm4S6X/An7JvbUbRJwxj5osGvA7FsfOMdgObpldSiejzGn/IiBLZX5rm BfF/PblfC9qloxqbgcCwmS1/xaux5kZWnlcRDziOqRtiTQ7YGCm3ulp1o5SP0AYj MISRY68o2pJbCux9XbomRMQSxVuwaugCDvF+m0o2niiYX/V10sKa0ICn5HKiBMs6 IIO3fl+bkIejDt0wgSyZRa728XnVlfT0 -----END CERTIFICATE-----Generated at Sat Aug 9 10:52:37 2025 by rpki-client