$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json) Hash identifier: JA6T3aCnD/NVNEpz4PF7r3TEurS/jyxbatxGw1mxw6E= Subject key identifier: 6F:71:CC:2E:18:74:67:32:24:F4:0B:FD:FE:15:6E:1A:DD:D7:FD:59 Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft Manifest number: 0948 Signing time: Fri 08 Aug 2025 20:31:57 +0000 Manifest this update: Fri 08 Aug 2025 20:31:56 +0000 Manifest next update: Fri 15 Aug 2025 20:31:56 +0000 Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: XTC7dvn9W94tetfAGn7wZ3HIib9VCm7JpLIvTqhU2Co=) 2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: 8rvezRlfEmng/UgYNLuDBBrL/AQ4sVZHRDguwah88WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Validity Not Before: Aug 8 20:31:56 2025 GMT Not After : Aug 15 20:31:56 2025 GMT Subject: CN=68965ebc-6c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:89:94:c1:4b:33:ac:d1:1f:fe:ff:c4:69: 12:1e:97:2d:f6:f9:5c:5a:43:0b:60:8d:ad:81:d9: 1f:7a:be:ab:13:63:12:ec:1d:06:69:f6:71:d7:08: d9:ed:28:f8:3b:78:1d:91:dd:56:c1:08:30:37:36: d7:be:16:e5:48:4f:1b:43:01:a1:39:a6:da:35:b0: ae:37:54:df:d9:67:f3:c2:0b:f8:a0:9e:fd:10:a5: a1:92:93:84:92:3b:81:c0:70:21:78:3c:db:11:a7: 60:89:2a:a6:a7:d0:18:3d:24:ee:84:66:19:c5:99: ec:2d:14:03:d5:4a:f1:e5:32:f8:00:ab:e8:af:a2: 04:f8:a3:4e:ef:12:b3:e6:df:2c:54:71:1d:32:24: 31:07:3d:77:1c:9a:7f:66:fd:3e:5f:a9:17:c0:bb: 98:c2:24:09:22:52:c5:0e:b3:d8:bd:98:19:ca:f2: c7:f6:ef:6d:1c:69:12:17:87:5c:a0:ed:6d:f4:6a: 1c:8c:9e:b8:63:6c:93:9b:d3:cf:4e:19:4b:6c:c7: e7:a1:af:89:4d:2a:02:32:41:34:ab:d2:d9:e6:19: 0c:31:ce:62:ec:4f:e9:ae:b4:92:b9:bb:77:df:41: cf:c3:92:4c:72:68:2f:f7:2f:90:3f:37:53:0b:06: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:71:CC:2E:18:74:67:32:24:F4:0B:FD:FE:15:6E:1A:DD:D7:FD:59 X509v3 Authority Key Identifier: keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f7:9a:e6:5c:a8:00:e0:7c:d5:97:2e:01:05:46:7f:2e:c9: e9:76:c0:1c:ab:b3:20:b2:63:df:23:cb:a8:d7:97:5a:39:ad: 21:fc:77:39:18:04:94:14:e5:76:55:89:cb:57:af:72:a7:04: 20:1b:43:75:58:39:5d:82:62:2d:7c:73:dd:dd:0e:55:fb:e5: a9:a5:f5:a9:89:8d:4b:6a:c3:85:43:fe:64:36:05:75:86:61: 5e:e5:44:31:39:28:78:e0:6c:83:36:fa:b8:48:cb:10:14:0b: cb:9f:46:a6:ca:70:a5:62:de:98:85:07:a0:a6:47:72:f3:a6: f8:d3:c3:3a:39:4a:e7:41:8b:fd:95:55:18:1e:18:f3:5e:44: 92:2f:ff:14:db:87:33:9e:33:1e:b4:d2:50:25:5a:af:b3:77: 6b:d7:98:38:e2:72:cc:b6:1c:3a:f2:32:7f:31:4d:1f:64:9c: fb:bc:70:71:28:b0:6c:26:eb:84:48:b2:b6:13:06:88:9c:69: 5e:a9:eb:de:d9:74:9d:e5:d4:43:49:5a:5f:a5:fe:a0:f1:0a: dc:df:8a:d1:bd:f8:54:cf:98:2e:b9:a7:66:d9:c2:c9:0e:b1: f7:ea:34:2c:ed:37:32:4e:14:a2:39:23:08:bf:b3:a3:98:8d: 22:ac:d3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy OEFFNEZEM0YwHhcNMjUwODA4MjAzMTU2WhcNMjUwODE1MjAzMTU2WjAYMRYwFAYD VQQDEw02ODk2NWViYy02YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhKJlMFLM6zRH/7/xGkSHpct9vlcWkMLYI2tgdkfer6rE2MS7B0GafZx1wjZ 7Sj4O3gdkd1WwQgwNzbXvhblSE8bQwGhOabaNbCuN1Tf2Wfzwgv4oJ79EKWhkpOE kjuBwHAheDzbEadgiSqmp9AYPSTuhGYZxZnsLRQD1Urx5TL4AKvor6IE+KNO7xKz 5t8sVHEdMiQxBz13HJp/Zv0+X6kXwLuYwiQJIlLFDrPYvZgZyvLH9u9tHGkSF4dc oO1t9GocjJ64Y2yTm9PPThlLbMfnoa+JTSoCMkE0q9LZ5hkMMc5i7E/prrSSubt3 30HPw5JMcmgv9y+QPzdTCwb3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9xzC4Y dGcyJPQL/f4Vbhrd1/1ZMB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS NVFhenM1bkNDaUlvcmtfVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd95rmXKgA4HzVly4BBUZ/LsnpdsAcq7MgsmPfI8uo15daOa0h/Hc5 GASUFOV2VYnLV69ypwQgG0N1WDldgmItfHPd3Q5V++WppfWpiY1LasOFQ/5kNgV1 hmFe5UQxOSh44GyDNvq4SMsQFAvLn0amynClYt6YhQegpkdy86b408M6OUrnQYv9 lVUYHhjzXkSSL/8U24cznjMetNJQJVqvs3dr15g44nLMthw68jJ/MU0fZJz7vHBx KLBsJuuESLK2EwaInGleqeve2XSd5dRDSVpfpf6g8Qrc34rRvfhUz5guuadm2cLJ DrH36jQs7TcyThSiOSMIv7OjmI0irNMy -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:19 2025 by rpki-client