$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: szPxvnbcXLmFa+l++KdzSm7pnHsputaVA1gA6Fx31Qc= Subject key identifier: 31:36:01:4B:1C:97:DF:14:F8:35:BB:BB:BB:3C:31:83:2B:02:53:9A Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 033B Signing time: Tue 05 Aug 2025 01:38:57 +0000 Manifest this update: Tue 05 Aug 2025 01:38:57 +0000 Manifest next update: Tue 12 Aug 2025 01:38:57 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: u9AsRiS0oOFtVa81B/Wko+x8OruMS8Fgf3IefXxx/0Q=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: U/JXwEqtoHC/7jQ68sFwAQsy+SIpyQHakkosmR6Gtvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Aug 5 01:38:57 2025 GMT Not After : Aug 12 01:38:57 2025 GMT Subject: CN=689160b1-e8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:3b:3e:46:5e:5e:11:d6:8d:38:8a:3e:04: 0d:a4:5a:2a:6b:5e:6c:d3:a7:f7:b9:4b:5c:02:1f: e7:8e:7c:81:7d:63:80:43:03:73:b8:fe:61:7f:6a: e4:91:7b:a1:c6:c2:08:af:e6:f0:b8:d0:9d:39:84: 84:cd:b9:fa:cd:db:6b:41:0e:f7:4c:49:fa:8d:d7: 00:bb:c5:c3:fb:52:a2:28:72:c0:fc:bd:40:b7:78: 13:17:d4:ef:ec:0c:27:d5:69:b9:9c:a5:d3:fb:46: a8:70:99:4c:6e:00:b6:c4:54:30:26:a6:63:25:77: 66:04:de:1a:9a:85:d9:c6:fd:61:b1:ff:bd:5a:b6: 65:c0:dd:ce:42:8c:79:9d:47:c7:7c:8c:8b:aa:05: 8c:f6:e7:53:c8:20:06:d5:cc:89:6c:3d:23:29:7b: 31:16:2d:f9:df:00:e8:9c:89:0b:6d:cd:52:48:33: 62:ab:fa:88:5e:fe:fb:95:31:43:29:26:f5:3b:91: 72:b5:cc:55:5d:3a:b0:79:f5:90:9e:6f:b5:9e:14: 73:bb:14:fd:54:90:44:85:0b:1b:0d:73:d9:14:0a: 3a:f6:b1:84:37:aa:b2:6c:97:46:7c:d6:b3:c8:44: 03:d5:44:cb:a3:d8:58:1b:77:42:65:0b:d2:80:a2: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:36:01:4B:1C:97:DF:14:F8:35:BB:BB:BB:3C:31:83:2B:02:53:9A X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e0:b3:aa:ed:83:f2:61:0d:9f:55:64:fc:9d:30:b5:7c:ed: 60:50:b6:e2:8e:42:3c:c5:a1:a4:d7:4e:e1:b1:7d:73:99:23: 40:16:27:19:fb:b2:f9:25:00:f0:e2:ea:bb:d8:de:3c:5a:d1: 56:5d:bd:ee:1e:a7:7a:46:c9:a2:88:7e:60:e1:a5:f3:46:99: 60:40:f3:fb:7e:7f:b4:09:b2:95:09:a4:73:0e:a9:96:4a:35: 6c:de:08:fd:8a:31:3e:06:22:12:39:58:ea:7d:74:28:07:a7: 25:1f:d1:d1:e9:c2:33:14:76:04:71:f8:b3:bc:b5:b8:72:15: 9a:67:db:ee:da:1b:0a:8d:b8:ad:71:3e:e0:66:9d:9e:c0:6a: 02:9e:88:ed:d1:77:5b:91:b5:11:cb:f6:36:a0:a3:62:94:a3: 59:ec:34:ff:76:09:cf:51:8a:0c:d2:19:32:cb:a1:f0:b3:7d: 14:89:52:44:b3:22:3f:03:6a:61:2f:5d:1a:73:db:c4:e5:16: a2:73:f4:7f:6c:d7:f0:02:4a:9d:fc:c6:e2:59:62:ae:ff:28: 4d:ff:d9:c9:27:2c:63:a2:f1:a4:47:09:4a:36:e6:b7:80:ec: b3:d6:d2:f6:33:4b:d6:05:6d:1d:bd:44:8f:f0:c6:bb:40:fc: 73:da:06:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjUwODA1MDEzODU3WhcNMjUwODEyMDEzODU3WjAYMRYwFAYD VQQDEw02ODkxNjBiMS1lOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRY7PkZeXhHWjTiKPgQNpFoqa15s06f3uUtcAh/njnyBfWOAQwNzuP5hf2rk kXuhxsIIr+bwuNCdOYSEzbn6zdtrQQ73TEn6jdcAu8XD+1KiKHLA/L1At3gTF9Tv 7Awn1Wm5nKXT+0aocJlMbgC2xFQwJqZjJXdmBN4amoXZxv1hsf+9WrZlwN3OQox5 nUfHfIyLqgWM9udTyCAG1cyJbD0jKXsxFi353wDonIkLbc1SSDNiq/qIXv77lTFD KSb1O5FytcxVXTqwefWQnm+1nhRzuxT9VJBEhQsbDXPZFAo69rGEN6qybJdGfNaz yEQD1UTLo9hYG3dCZQvSgKJpBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE2AUsc l98U+DW7u7s8MYMrAlOaMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa4LOq7YPyYQ2fVWT8nTC1fO1gULbijkI8xaGk107hsX1zmSNAFicZ +7L5JQDw4uq72N48WtFWXb3uHqd6RsmiiH5g4aXzRplgQPP7fn+0CbKVCaRzDqmW SjVs3gj9ijE+BiISOVjqfXQoB6clH9HR6cIzFHYEcfizvLW4chWaZ9vu2hsKjbit cT7gZp2ewGoCnojt0XdbkbURy/Y2oKNilKNZ7DT/dgnPUYoM0hkyy6Hws30UiVJE syI/A2phL10ac9vE5Raic/R/bNfwAkqd/MbiWWKu/yhN/9nJJyxjovGkRwlKNua3 gOyz1tL2M0vWBW0dvUSP8Ma7QPxz2gaE -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:08 2025 by rpki-client