$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json) Hash identifier: kZ48qQXwtdxtsxu7dNHBCIVC/on+Wn37cgywX6up1Yk= Subject key identifier: FB:A2:FD:FC:54:5E:2E:FC:5F:E6:84:2B:D0:B7:5C:B5:D9:C4:22:47 Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Certificate serial: 0931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft Manifest number: 092B Signing time: Thu 12 Jun 2025 20:02:27 +0000 Manifest this update: Thu 12 Jun 2025 20:02:27 +0000 Manifest next update: Thu 19 Jun 2025 20:02:27 +0000 Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: vvuKliCSSdfU2D0n69fF/nkXUeIC+dQk1AWDEVsG5mI=) 2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: 8rvezRlfEmng/UgYNLuDBBrL/AQ4sVZHRDguwah88WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Validity Not Before: Jun 12 20:02:27 2025 GMT Not After : Jun 19 20:02:27 2025 GMT Subject: CN=684b3253-9e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:39:ed:41:32:66:87:e3:b3:b4:b5:cf:e3:c0: aa:bc:ef:ad:64:f7:35:37:e7:39:ba:4c:4c:38:3b: 15:fa:ee:fc:fb:3b:88:2b:27:5d:ad:ed:06:c8:44: 2a:91:36:33:b1:e0:30:61:7f:e6:69:b4:1e:70:b6: 48:00:cb:80:79:03:1e:60:01:b3:09:bc:b0:8d:43: 95:d0:35:bd:c2:ed:0f:fd:fb:bc:42:57:45:0b:c7: a7:ac:c4:ef:88:bb:59:79:16:98:a9:c4:1e:e2:a1: 46:93:68:2f:c2:ec:9f:c6:59:4f:1d:8e:85:19:d2: cc:76:69:fb:a1:56:da:be:b3:a3:5e:a5:1e:85:ac: 0d:ee:ca:b5:23:b9:a0:4e:ee:a8:32:5d:3e:bb:8e: ba:cc:ff:9d:29:bf:72:13:61:c4:99:72:cd:fa:28: 20:5a:26:6f:9d:f9:b7:b1:04:e5:5b:e0:70:fe:e4: e4:e1:dd:4b:ce:9a:65:3b:5b:8c:ec:8b:ed:2f:bc: dc:47:bd:39:dd:cd:e7:7e:27:1b:b6:d8:dd:02:28: b4:49:42:60:b4:2d:f3:f0:03:82:3f:ee:04:fd:d0: 08:12:e2:df:5a:ee:9a:7d:93:f3:b0:c0:ce:06:e9: 80:7d:fb:22:8c:bc:81:de:7c:1c:93:bd:34:f3:c2: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:FD:FC:54:5E:2E:FC:5F:E6:84:2B:D0:B7:5C:B5:D9:C4:22:47 X509v3 Authority Key Identifier: keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:cc:06:2d:dc:91:3a:cc:7d:8f:82:f9:93:5a:4c:fd:18: da:18:f2:db:fe:a8:03:fa:29:26:da:17:a5:2b:2d:46:36:55: 8a:54:3d:72:f8:4d:f0:5e:1a:53:17:7a:a0:a9:2e:10:7f:ec: 8d:6f:65:c5:06:3f:5e:74:0e:4b:62:65:c7:49:b6:d1:3c:6a: 00:68:ea:0d:62:46:85:d0:fe:f9:eb:84:4e:43:01:93:b6:2a: c5:61:30:5c:0d:36:0a:88:f8:b5:e1:84:c4:8a:c8:00:f3:ea: cd:13:e6:ea:37:20:75:fa:80:d5:83:95:8f:d4:42:bd:67:10: 20:24:71:96:9f:a8:f9:43:c4:36:38:24:a0:dd:a8:21:f2:0d: c2:5b:27:d9:b0:29:cc:d0:94:62:eb:c0:b2:19:43:a7:4b:0b: d4:8a:fb:76:e8:9c:af:18:22:25:10:44:fb:c0:09:3e:68:07: 38:06:28:7b:f2:3d:c2:e5:e0:a9:14:90:0a:73:04:36:a2:c6: 3a:2b:e0:c7:95:e2:74:eb:c7:24:8b:28:78:97:58:f9:36:09: 3c:75:6f:52:b2:bc:62:de:14:53:bf:1d:a4:76:c1:0b:94:b8: f4:0e:92:19:d2:52:50:42:95:47:1e:12:7c:37:13:ba:3c:ee: fd:fe:14:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy OEFFNEZEM0YwHhcNMjUwNjEyMjAwMjI3WhcNMjUwNjE5MjAwMjI3WjAYMRYwFAYD VQQDEw02ODRiMzI1My05ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TntQTJmh+OztLXP48CqvO+tZPc1N+c5ukxMODsV+u78+zuIKyddre0GyEQq kTYzseAwYX/mabQecLZIAMuAeQMeYAGzCbywjUOV0DW9wu0P/fu8QldFC8enrMTv iLtZeRaYqcQe4qFGk2gvwuyfxllPHY6FGdLMdmn7oVbavrOjXqUehawN7sq1I7mg Tu6oMl0+u466zP+dKb9yE2HEmXLN+iggWiZvnfm3sQTlW+Bw/uTk4d1LzpplO1uM 7IvtL7zcR7053c3nficbttjdAii0SUJgtC3z8AOCP+4E/dAIEuLfWu6afZPzsMDO BumAffsijLyB3nwck70088LIsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPui/fxU Xi78X+aEK9C3XLXZxCJHMB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS NVFhenM1bkNDaUlvcmtfVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGj8wGLdyROsx9j4L5k1pM/RjaGPLb/qgD+ikm2helKy1GNlWKVD1y +E3wXhpTF3qgqS4Qf+yNb2XFBj9edA5LYmXHSbbRPGoAaOoNYkaF0P7564ROQwGT tirFYTBcDTYKiPi14YTEisgA8+rNE+bqNyB1+oDVg5WP1EK9ZxAgJHGWn6j5Q8Q2 OCSg3agh8g3CWyfZsCnM0JRi68CyGUOnSwvUivt26JyvGCIlEET7wAk+aAc4Bih7 8j3C5eCpFJAKcwQ2osY6K+DHleJ068ckiyh4l1j5Ngk8dW9Ssrxi3hRTvx2kdsEL lLj0DpIZ0lJQQpVHHhJ8NxO6PO79/hTO -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:00 2025 by rpki-client