$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: EhQ8myuw5GAvUuIo0Rc62XxJ4wZJ0LFP7KzcKXBW/fc= Subject key identifier: 3C:74:A1:44:17:78:FA:42:3A:7F:45:3A:56:3C:C8:69:7B:1F:23:02 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01E8 Signing time: Sat 09 Aug 2025 02:59:14 +0000 Manifest this update: Sat 09 Aug 2025 02:59:13 +0000 Manifest next update: Sat 16 Aug 2025 02:59:13 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: w6q+TmyzsZqmTch5+NgOg2C+aIk6AfZ6HHs1yO30t0o=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Aug 9 02:59:13 2025 GMT Not After : Aug 16 02:59:13 2025 GMT Subject: CN=6896b981-e476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:bb:bc:28:23:d3:cb:d5:4c:51:b7:78:81: 6c:08:51:5c:95:65:8d:5c:7c:c3:bc:62:e7:3c:36: e8:17:a3:0c:46:f3:88:13:cd:04:c9:12:67:1b:d0: cb:f5:77:a6:1d:ee:43:e2:31:ec:10:62:4a:d9:8d: 99:af:01:5d:b1:ed:61:87:75:9e:8e:e2:d0:85:28: 2c:1f:15:a8:94:df:26:e9:b5:17:11:74:e0:6b:34: 68:0d:99:13:5f:b4:24:68:b8:e5:ab:b9:db:b6:23: 21:72:7d:32:bc:79:7e:b1:5a:7d:fa:0c:3b:3f:d0: 30:bb:78:ba:c6:96:de:ad:2e:93:4b:c4:f4:c8:0c: 49:a8:14:ab:d3:58:79:00:5d:c5:15:02:17:2c:5f: 05:75:a5:3d:3a:a1:82:ba:58:a0:49:92:35:f2:d1: 1d:c4:9b:cd:90:bc:bc:03:ef:f8:ca:68:91:75:cc: ba:5c:f9:09:ae:c7:1f:7b:cd:21:55:e0:17:30:24: c7:47:e3:b5:88:22:7c:d4:46:67:9b:06:fc:d4:a3: 68:d9:e9:64:09:21:4d:a2:27:85:2f:c1:00:03:a7: 4b:8b:1a:e9:af:58:c9:63:e7:9c:e5:be:8b:5c:fe: 7b:bc:9a:50:6c:c5:79:9d:51:a3:e7:93:7b:e3:3c: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:74:A1:44:17:78:FA:42:3A:7F:45:3A:56:3C:C8:69:7B:1F:23:02 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5d:af:cd:44:0a:f5:74:81:c5:77:01:c2:fc:eb:ae:f6:0b: 51:59:00:5a:b8:50:da:68:05:b6:af:42:85:e7:59:51:39:60: d6:99:84:4a:04:90:c0:5a:89:25:aa:c0:97:b6:49:02:b7:88: bf:0b:5c:91:4e:0f:d6:67:92:3f:19:2e:31:83:5a:b0:d3:0a: 51:b2:5b:ea:d3:e5:e5:7f:64:55:ca:f9:8e:b3:67:15:0a:bf: 56:e0:b7:d9:ac:7c:ab:ec:c6:14:c6:2b:9d:5c:5b:ad:78:8d: f9:b9:9d:99:18:ba:1d:7d:8c:bb:73:4e:af:cb:0b:b1:3a:ae: 47:21:80:b7:10:0f:17:32:ed:ab:10:89:18:aa:87:87:0a:7a: c7:60:5c:56:66:85:15:2d:e2:8b:a6:6e:9b:b2:7e:15:72:1a: 6b:df:52:fa:f7:9d:ec:9e:fb:ed:e7:a5:45:4a:52:bc:a5:75: 72:12:45:35:27:06:8f:d3:33:e8:9a:aa:39:73:af:df:45:e9: 96:53:7e:16:30:37:6c:52:57:ad:10:da:bc:92:4c:52:ab:0b: 79:e8:2c:85:08:2c:fd:83:42:6d:f3:de:9c:57:90:7a:38:f2: 5c:4c:f1:10:d5:31:b5:21:1a:a6:b4:2a:90:99:81:8f:09:26: ea:69:af:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwODA5MDI1OTEzWhcNMjUwODE2MDI1OTEzWjAYMRYwFAYD VQQDEw02ODk2Yjk4MS1lNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Kq7vCgj08vVTFG3eIFsCFFclWWNXHzDvGLnPDboF6MMRvOIE80EyRJnG9DL 9XemHe5D4jHsEGJK2Y2ZrwFdse1hh3WejuLQhSgsHxWolN8m6bUXEXTgazRoDZkT X7QkaLjlq7nbtiMhcn0yvHl+sVp9+gw7P9Awu3i6xpberS6TS8T0yAxJqBSr01h5 AF3FFQIXLF8FdaU9OqGCuligSZI18tEdxJvNkLy8A+/4ymiRdcy6XPkJrscfe80h VeAXMCTHR+O1iCJ81EZnmwb81KNo2elkCSFNoieFL8EAA6dLixrpr1jJY+ec5b6L XP57vJpQbMV5nVGj55N74zyAvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx0oUQX ePpCOn9FOlY8yGl7HyMCMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJXa/NRAr1dIHFdwHC/Ouu9gtRWQBauFDaaAW2r0KF51lROWDWmYRK BJDAWoklqsCXtkkCt4i/C1yRTg/WZ5I/GS4xg1qw0wpRslvq0+Xlf2RVyvmOs2cV Cr9W4LfZrHyr7MYUxiudXFuteI35uZ2ZGLodfYy7c06vywuxOq5HIYC3EA8XMu2r EIkYqoeHCnrHYFxWZoUVLeKLpm6bsn4Vchpr31L6953snvvt56VFSlK8pXVyEkU1 JwaP0zPomqo5c6/fRemWU34WMDdsUletENq8kkxSqwt56CyFCCz9g0Jt896cV5B6 OPJcTPEQ1TG1IRqmtCqQmYGPCSbqaa+F -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:23 2025 by rpki-client