$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: iKu/fzlWCz1HEHkHbb4sBubcrmADItY2yMoAxG5vW5k= Subject key identifier: 5D:60:77:9B:CD:7E:DB:C7:CF:8C:3C:ED:42:3F:7E:58:92:9F:0E:46 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CDB Signing time: Fri 08 Aug 2025 18:20:57 +0000 Manifest this update: Fri 08 Aug 2025 18:20:57 +0000 Manifest next update: Fri 15 Aug 2025 18:20:57 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: YXRlXQFMMf7XDCupmU63Zfoiu6H+5+312ILoxU0DQhQ=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: pjQH54VRYOq5PMku0jKMJ5PyMS22lF1mGoeoJ8lvLEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Aug 8 18:20:57 2025 GMT Not After : Aug 15 18:20:57 2025 GMT Subject: CN=68964009-88ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:16:bd:69:ac:10:fe:98:e2:d7:15:2c:a9: 02:db:e8:ef:93:25:0d:b4:75:f9:0a:18:98:d4:1d: d7:1f:ed:1c:2f:f2:c2:ef:1b:ca:bc:ba:1e:94:e5: 7a:2a:63:36:6d:ab:ad:7f:6b:03:f9:bb:0b:de:35: 77:5a:6b:db:fc:0b:7d:59:ad:a8:a5:ba:63:29:38: fc:83:3c:2d:ba:d7:07:83:18:94:d0:04:6b:2d:c0: aa:cd:25:c9:5a:93:90:d0:aa:b1:84:c8:d4:94:d3: ec:92:8d:a6:69:89:20:b0:9d:88:9c:66:e9:ca:6c: 69:3b:1b:9e:e1:2f:e6:ee:f1:72:90:53:55:e7:57: 1c:4c:76:9a:45:45:ad:c9:4b:f5:ae:a2:a4:24:3a: c7:ef:27:e1:5c:29:25:ec:71:e4:82:49:34:81:f8: 6b:6b:22:0b:9f:30:a8:d1:21:52:9d:5c:a1:d8:44: 2b:46:63:6c:01:5a:99:dc:f5:c9:5c:84:ce:14:a3: db:83:fa:74:a5:80:54:5b:d5:c9:87:31:ec:02:dc: 67:db:e2:87:e1:09:04:c3:fb:71:dd:0d:03:f7:8a: 28:46:f8:9e:41:24:33:fc:7b:1c:de:1a:75:71:a6: 38:2d:46:ee:5d:66:5a:93:92:5e:ef:cb:af:51:87: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:77:9B:CD:7E:DB:C7:CF:8C:3C:ED:42:3F:7E:58:92:9F:0E:46 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:27:d5:00:50:47:63:3e:a3:63:75:91:40:a2:29:81:21:f2: 49:02:12:21:fe:26:45:66:8c:fa:bd:6a:6f:6c:d1:d5:5d:4a: d3:e2:bd:ae:9a:3e:9c:b6:a3:86:47:6d:3b:ed:3f:68:dd:f1: ff:69:ce:0e:15:5c:d0:ac:69:d5:a1:15:58:0a:2e:05:e0:f9: 56:2c:b2:b9:90:90:12:6d:f0:b5:30:47:e6:78:39:71:55:4b: 17:44:5b:4b:68:48:38:d6:83:7a:aa:70:72:c1:09:57:bc:c1: 3d:5b:ee:dd:b3:b2:d5:0b:38:da:c5:10:70:f2:b1:71:b3:9c: 6b:b7:18:bb:15:6d:b7:c6:83:20:8e:14:18:9f:90:dc:b5:01: 93:86:21:95:5e:b4:22:0f:a1:f7:1b:70:ec:14:a6:85:54:9a: db:69:77:2f:0d:0d:40:16:f4:6c:65:2e:8e:49:91:a5:08:df: 4e:ed:2d:47:6b:0b:19:12:13:49:fa:79:83:7b:9d:7a:c0:ff: 36:2b:b6:ea:c4:f3:2e:54:46:44:ec:93:50:84:5d:0d:b7:fa: 99:f6:6c:1a:7a:6a:40:a9:69:b8:0f:6b:1f:aa:63:22:20:03: 93:3c:96:1a:38:4d:46:e8:df:94:2c:d8:80:6b:98:1c:32:6f: 21:65:34:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwODA4MTgyMDU3WhcNMjUwODE1MTgyMDU3WjAYMRYwFAYD VQQDEw02ODk2NDAwOS04OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnb0WvWmsEP6Y4tcVLKkC2+jvkyUNtHX5ChiY1B3XH+0cL/LC7xvKvLoelOV6 KmM2bautf2sD+bsL3jV3Wmvb/At9Wa2opbpjKTj8gzwtutcHgxiU0ARrLcCqzSXJ WpOQ0KqxhMjUlNPsko2maYkgsJ2InGbpymxpOxue4S/m7vFykFNV51ccTHaaRUWt yUv1rqKkJDrH7yfhXCkl7HHkgkk0gfhrayILnzCo0SFSnVyh2EQrRmNsAVqZ3PXJ XITOFKPbg/p0pYBUW9XJhzHsAtxn2+KH4QkEw/tx3Q0D94ooRvieQSQz/Hsc3hp1 caY4LUbuXWZak5Je78uvUYc9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1gd5vN ftvHz4w87UI/fliSnw5GMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4J9UAUEdjPqNjdZFAoimBIfJJAhIh/iZFZoz6vWpvbNHVXUrT4r2u mj6ctqOGR2077T9o3fH/ac4OFVzQrGnVoRVYCi4F4PlWLLK5kJASbfC1MEfmeDlx VUsXRFtLaEg41oN6qnBywQlXvME9W+7ds7LVCzjaxRBw8rFxs5xrtxi7FW23xoMg jhQYn5DctQGThiGVXrQiD6H3G3DsFKaFVJrbaXcvDQ1AFvRsZS6OSZGlCN9O7S1H awsZEhNJ+nmDe516wP82K7bqxPMuVEZE7JNQhF0Nt/qZ9mwaempAqWm4D2sfqmMi IAOTPJYaOE1G6N+ULNiAa5gcMm8hZTQ2 -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:10 2025 by rpki-client