$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json) Hash identifier: 9kK7CwvXkO24ieeWwrHud2ccP6v8/KyaUtpG5rIDftw= Subject key identifier: CA:AE:B0:38:50:B1:7B:6F:FC:DC:5D:54:4D:96:4A:00:4F:FF:78:E1 Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft Manifest number: DF Signing time: Sun 29 Jun 2025 04:32:33 +0000 Manifest this update: Sun 29 Jun 2025 04:32:32 +0000 Manifest next update: Sun 06 Jul 2025 04:32:32 +0000 Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: wjnijwUHtOLQhrwCka/OGKEY/Fz7SJ7f1AdxXq/wZYU=) 2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: SVtEtagldlvERL46wSvdbr/iqqig+8tKes1xS1nFqcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145 Validity Not Before: Jun 29 04:32:32 2025 GMT Not After : Jul 6 04:32:32 2025 GMT Subject: CN=6860c1e0-f4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:71:14:52:5a:21:bd:6d:ec:62:08:08:1c: 2c:87:e7:53:98:26:6b:bd:ea:46:69:3c:d7:38:c2: b2:2e:87:bf:81:76:f6:28:ca:f1:ce:90:ef:b3:f8: d1:ea:58:34:0a:49:46:39:28:64:d8:a0:5d:20:f9: 2a:72:d4:97:3e:e3:6b:3a:9f:f5:5b:08:16:5e:7b: 73:8b:27:fc:64:88:79:2e:5e:8a:44:29:86:e0:16: 2a:1f:b7:29:2a:c6:d3:13:6e:69:a6:2a:9d:47:1b: b3:96:ad:e5:1e:03:df:51:fe:d6:40:a5:b2:5f:2f: 17:c8:b3:e8:98:3a:ca:f1:1b:13:d3:28:45:2d:8d: b2:92:d0:34:6c:31:38:13:ca:be:a3:aa:8e:bc:da: 06:fb:84:ae:b3:f7:77:f9:d0:cf:e5:63:07:49:23: 68:11:88:c3:42:7f:94:82:55:38:6c:23:bc:9e:f6: f0:c1:c5:e1:f9:66:1b:21:20:ff:d1:97:3c:44:c7: 1a:a7:7e:d6:73:0f:b3:58:e8:9e:58:1e:2c:9c:3d: be:02:22:c6:ad:a7:b4:ae:73:08:d6:fa:9d:db:06: bd:dc:f9:e4:9f:33:ee:9c:1a:3e:51:2d:3b:23:43: c1:62:d2:3d:31:85:e1:42:74:25:27:c8:53:36:ef: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:B0:38:50:B1:7B:6F:FC:DC:5D:54:4D:96:4A:00:4F:FF:78:E1 X509v3 Authority Key Identifier: keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3a:c9:ef:be:a4:33:56:a1:6e:e4:41:35:29:9f:90:a9:54: a2:8a:e5:27:2a:78:b9:54:a2:4a:32:9f:77:09:26:d5:9f:8a: 51:71:c1:c4:88:4c:cf:da:82:54:a4:63:65:ff:16:7c:00:29: e0:55:cf:36:7b:e5:59:7f:ed:04:3a:9a:80:d1:cf:1c:7d:f2: 3c:93:fa:0b:f2:34:16:39:3c:b1:01:cf:58:c0:c4:0e:c2:0a: 6b:fa:7d:50:e0:a6:e5:73:44:8b:fc:c0:20:eb:ba:3d:43:c5: 17:75:46:6b:9c:21:c3:de:a4:e0:66:fc:20:e2:d7:04:6e:14: 2d:56:b5:dd:42:f1:8f:bb:4e:a1:ee:f5:84:fe:5d:5a:8b:c7: 6c:57:01:7e:80:00:0c:06:b7:1c:58:95:57:71:11:59:fc:71: a2:d6:84:c4:b6:bb:5a:2c:79:6e:7b:94:f2:ef:70:c0:12:3f: 2f:c2:d6:29:e9:d9:34:55:a8:2a:46:3f:ab:d0:fe:40:70:3a: 97:9f:4f:85:bf:f2:c1:5c:20:85:4b:2b:55:49:b3:7c:b1:76: b6:cf:1b:db:99:18:18:96:ae:e7:a9:ca:77:b8:83:22:4b:86: 11:d6:4d:57:bf:da:ca:f0:af:7c:c8:7c:7b:92:11:2c:08:da: bf:70:e5:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2MjMxMTAvBgNVBAUTKDc2OTUzNjgzNDAyMDkzNDk1MjI5N0VCREI3ODE4OTM1 N0IxM0ExNDUwHhcNMjUwNjI5MDQzMjMyWhcNMjUwNzA2MDQzMjMyWjAYMRYwFAYD VQQDEw02ODYwYzFlMC1mNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkxxFFJaIb1t7GIICBwsh+dTmCZrvepGaTzXOMKyLoe/gXb2KMrxzpDvs/jR 6lg0CklGOShk2KBdIPkqctSXPuNrOp/1WwgWXntziyf8ZIh5Ll6KRCmG4BYqH7cp KsbTE25ppiqdRxuzlq3lHgPfUf7WQKWyXy8XyLPomDrK8RsT0yhFLY2yktA0bDE4 E8q+o6qOvNoG+4Sus/d3+dDP5WMHSSNoEYjDQn+UglU4bCO8nvbwwcXh+WYbISD/ 0Zc8RMcap37Wcw+zWOieWB4snD2+AiLGrae0rnMI1vqd2wa93PnknzPunBo+US07 I0PBYtI9MYXhQnQlJ8hTNu8ArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqusDhQ sXtv/NxdVE2WSgBP/3jhMB8GA1UdIwQYMBaAFHaVNoNAIJNJUil+vbeBiTV7E6FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTYyMy81MEFEMDcxOEZE NDUxMUVFQUIzQUQ3MUJDNEY5QUUwMi9kcFUyZzBBZ2swbFNLWDY5dDRHSk5Yc1Rv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwVTJnMEFnazBsU0tYNjl0NEdKTlhzVG9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTYyMy81MEFEMDcxOEZENDUxMUVFQUIzQUQ3MUJDNEY5QUUwMi9kcFUyZzBBZ2sw bFNLWDY5dDRHSk5Yc1RvVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSOsnvvqQzVqFu5EE1KZ+QqVSiiuUnKni5VKJKMp93CSbVn4pRccHE iEzP2oJUpGNl/xZ8ACngVc82e+VZf+0EOpqA0c8cffI8k/oL8jQWOTyxAc9YwMQO wgpr+n1Q4Kblc0SL/MAg67o9Q8UXdUZrnCHD3qTgZvwg4tcEbhQtVrXdQvGPu06h 7vWE/l1ai8dsVwF+gAAMBrccWJVXcRFZ/HGi1oTEtrtaLHlue5Ty73DAEj8vwtYp 6dk0VagqRj+r0P5AcDqXn0+Fv/LBXCCFSytVSbN8sXa2zxvbmRgYlq7nqcp3uIMi S4YR1k1Xv9rK8K98yHx7khEsCNq/cOWC -----END CERTIFICATE-----Generated at Sun Jun 29 16:39:03 2025 by rpki-client