$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: cfTVSSklkn4Ac2T3DRH9W8DQuFkrgcuh20ppg00Np3s= Subject key identifier: 8A:11:8E:1C:7A:B5:48:14:2A:72:D9:2B:92:A0:5F:6F:28:14:EE:A6 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1D42 Signing time: Fri 08 Aug 2025 16:17:10 +0000 Manifest this update: Fri 08 Aug 2025 16:17:10 +0000 Manifest next update: Fri 15 Aug 2025 16:17:10 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: i3A43vmZuSwmMF9EE3ALYaFabcSlt692uTRU3wlAp7E=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: k8TIUAQe/uhiGTZr6cgQAthXD90vdh6WA7DCNugyFL0=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: KJtFM/La7mL3fu5dlcMqDcraRcAtERap2FuVwdqAgkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7505 (0x1d51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Aug 8 16:17:10 2025 GMT Not After : Aug 15 16:17:10 2025 GMT Subject: CN=68962306-e817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:86:ad:4c:71:4b:bd:ce:f0:97:8f:d0:18: 8d:ae:1c:73:4f:08:21:c6:9a:91:72:ec:06:6f:f5: 58:e5:30:7f:ca:2d:e7:2b:6b:7f:37:a4:87:a8:5e: e2:c3:42:34:78:85:89:3e:fd:7e:fb:1a:8b:77:4e: 14:30:74:55:97:59:6e:e7:a5:a2:08:6f:66:0c:1b: d8:e1:11:90:14:3e:ec:d0:21:ce:a9:2f:c3:7c:db: 1f:ef:77:e4:db:c6:54:56:e3:57:e2:08:88:dc:4e: 89:0a:7e:60:51:06:b5:d9:21:0b:52:7d:8e:ae:b0: ca:5f:c4:f6:9e:d8:b0:79:f6:4a:2c:10:5b:82:15: d8:ab:f2:bd:4e:6f:a9:60:8c:47:42:6b:22:11:44: 40:21:41:25:f9:7a:1a:4a:74:94:24:be:a1:77:9b: 62:e5:a9:b6:21:2a:53:56:d8:f9:9a:6b:81:bb:4d: 0c:05:76:e7:bf:43:dd:57:f9:15:06:8a:36:88:b7: f0:b9:1a:03:b4:86:98:d8:60:99:14:0d:03:2b:f5: 8b:69:28:ec:3b:3c:8d:58:cd:2b:58:30:e2:b5:dc: e4:17:09:de:24:b4:13:af:33:3d:16:56:bd:bd:24: 6f:82:32:30:ea:6f:66:48:de:1c:6a:cd:82:d6:3d: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:8E:1C:7A:B5:48:14:2A:72:D9:2B:92:A0:5F:6F:28:14:EE:A6 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:68:f9:42:17:6d:12:98:4a:59:07:72:83:0a:48:94:4c:51: 2f:b9:3b:ea:bd:57:58:7c:85:d8:c0:89:12:55:2a:d4:1a:43: a7:03:e9:92:e9:bd:16:58:6b:85:83:01:32:fe:54:dd:96:74: d5:5b:b0:b3:95:b0:1e:63:9f:c5:86:0d:49:02:c7:bb:2c:c1: 55:eb:4c:6b:94:97:2b:53:e1:a7:0c:fa:57:9c:aa:99:0c:3f: 48:37:82:0c:d1:12:c0:21:2b:de:03:04:69:f2:74:c4:85:60: 74:f9:c3:6c:06:31:75:b9:17:66:5f:10:4c:4f:ae:34:f5:4c: 84:d6:77:d1:94:79:a7:96:af:ab:25:50:98:89:b5:73:e1:cb: 71:3d:34:54:7c:ce:11:a6:d7:6b:55:fa:a1:95:0a:f6:2e:91: b3:78:fc:c6:e1:4d:6e:6f:6a:ce:00:1e:31:4f:83:07:91:31: 0d:b9:50:63:bc:bd:13:ad:90:4f:7c:24:38:f4:d7:4c:55:e3: 6f:9e:4b:c1:c2:04:08:8f:f8:b2:d0:8c:64:25:35:ed:51:19: 77:68:dc:36:e6:38:02:5c:3a:24:08:ea:ac:5b:b7:a5:16:2c: 8a:0a:6e:d8:5a:45:b8:44:f2:dc:86:c7:55:f0:36:25:77:f6: 80:0e:f2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjUwODA4MTYxNzEwWhcNMjUwODE1MTYxNzEwWjAYMRYwFAYD VQQDEw02ODk2MjMwNi1lODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt2GrUxxS73O8JeP0BiNrhxzTwghxpqRcuwGb/VY5TB/yi3nK2t/N6SHqF7i w0I0eIWJPv1++xqLd04UMHRVl1lu56WiCG9mDBvY4RGQFD7s0CHOqS/DfNsf73fk 28ZUVuNX4giI3E6JCn5gUQa12SELUn2OrrDKX8T2ntiwefZKLBBbghXYq/K9Tm+p YIxHQmsiEURAIUEl+XoaSnSUJL6hd5ti5am2ISpTVtj5mmuBu00MBXbnv0PdV/kV Boo2iLfwuRoDtIaY2GCZFA0DK/WLaSjsOzyNWM0rWDDitdzkFwneJLQTrzM9Fla9 vSRvgjIw6m9mSN4cas2C1j3KqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoRjhx6 tUgUKnLZK5KgX28oFO6mMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOaPlCF20SmEpZB3KDCkiUTFEvuTvqvVdYfIXYwIkSVSrUGkOnA+mS 6b0WWGuFgwEy/lTdlnTVW7CzlbAeY5/Fhg1JAse7LMFV60xrlJcrU+GnDPpXnKqZ DD9IN4IM0RLAISveAwRp8nTEhWB0+cNsBjF1uRdmXxBMT6409UyE1nfRlHmnlq+r JVCYibVz4ctxPTRUfM4RptdrVfqhlQr2LpGzePzG4U1ub2rOAB4xT4MHkTENuVBj vL0TrZBPfCQ49NdMVeNvnkvBwgQIj/iy0IxkJTXtURl3aNw25jgCXDokCOqsW7el FiyKCm7YWkW4RPLchsdV8DYld/aADvKG -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:41 2025 by rpki-client