$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json) Hash identifier: 5uvOTuqTLxbXaTTcS9JCxY3+s+dWKDR5FW65IcYIsd8= Subject key identifier: DD:2E:60:19:A6:73:D9:AF:6E:93:3D:60:CE:9C:72:12:D1:C0:6A:3A Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft Manifest number: 05AA Signing time: Fri 22 Aug 2025 23:23:24 +0000 Manifest this update: Fri 22 Aug 2025 23:23:23 +0000 Manifest next update: Fri 29 Aug 2025 23:23:23 +0000 Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: 8BSXjDj9dZ4hYiIJEnO3v4RIwjE14zbbTTxeT5dISkM=) 2: 54E9D878F08311EB8268373EC4F9AE02.roa (hash: 2dKBXSVS1H9+PztFUFeH1IJNMCL93pag3JLnjY536SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Validity Not Before: Aug 22 23:23:23 2025 GMT Not After : Aug 29 23:23:23 2025 GMT Subject: CN=68a8fbeb-7a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:ea:27:ae:49:af:7b:86:85:9d:1b:4d:6d: 92:ee:23:49:2a:00:06:ec:99:a9:70:4d:a5:b6:de: 2d:00:47:bd:69:69:49:ed:e9:f5:94:5a:ac:ab:b2: a6:a3:99:93:12:15:d3:ae:50:fb:f6:a8:ae:a1:5a: c9:a2:67:9d:a5:f5:06:1b:ab:7f:85:8d:2d:37:b9: ea:b0:7f:47:0f:28:6c:1c:b6:c4:d4:14:05:53:83: 33:da:00:08:43:f8:86:b7:78:8a:51:0a:a9:9d:09: 76:65:d6:eb:b5:75:6a:4a:b3:47:c6:ee:b4:2f:d1: bb:18:ea:9d:9e:74:3f:7a:6d:33:3b:40:6e:10:eb: 2c:13:5f:3d:fe:d5:cf:4e:ad:2a:f5:97:37:5b:e2: 0a:bd:97:9e:31:ba:d1:4a:00:ce:64:f9:35:ca:d1: 5b:b6:2a:6b:9a:75:27:51:80:da:3a:71:b0:c0:86: 9b:51:df:e9:f3:f9:f5:c0:b4:17:55:ee:e4:a8:d7: a0:86:e1:73:54:a3:fe:04:f3:1b:e5:e0:73:97:64: 6a:83:43:c0:41:a5:22:a4:7e:f7:b5:de:1a:16:7b: b0:6b:5f:86:5d:b5:aa:8c:20:76:0a:cc:17:2e:fd: 05:a9:d6:0d:b8:f6:0f:6b:7c:f3:ed:b6:86:71:71: 2c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:60:19:A6:73:D9:AF:6E:93:3D:60:CE:9C:72:12:D1:C0:6A:3A X509v3 Authority Key Identifier: keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:b9:b9:4d:30:18:cd:97:b2:e6:d6:e7:99:0f:e1:a4:2e: 14:18:c6:5a:e5:56:20:13:1b:63:93:03:cd:f7:19:c9:d5:43: 93:48:66:00:59:20:9f:32:78:89:57:41:5f:01:f3:fe:85:f8: 4e:7d:0b:7e:b6:80:67:1f:86:6b:7e:c1:e1:4a:f8:63:d6:22: d1:39:eb:86:bc:39:0b:62:41:88:b0:38:96:4f:6c:9b:21:cb: 32:86:35:68:b7:b8:24:63:2e:c8:b9:b5:06:16:4c:79:b2:56: 13:73:ca:27:3b:57:e3:be:6c:1a:45:fc:23:15:ac:32:38:c5: 1c:3a:c9:74:7c:c8:0d:8e:25:f6:e1:d8:61:3b:dd:6d:e2:a0: a6:63:5b:d0:a6:c1:56:b6:6a:0a:04:12:b3:0d:1e:1c:9e:f5: 6d:85:d3:5a:67:50:a2:b3:cb:55:04:b3:ce:46:74:2b:0d:21: ab:95:25:38:81:ad:d3:2f:93:a7:19:c6:65:ed:61:91:ee:31: 2d:14:7d:b4:bb:33:bd:36:40:35:57:21:fa:72:4f:54:f7:b4: 4f:49:e3:0e:09:cd:38:71:f6:7c:cf:29:86:b5:92:c8:af:47: c8:70:db:06:6b:59:c8:58:53:0d:bb:9b:23:c2:2f:18:69:ed: 7a:03:ba:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQxOEQxMTAvBgNVBAUTKDBFMDNEM0MyRThGMkM1MzU4MkJFRDFDMjE0QzFGRDNB QUVBNUFFNUEwHhcNMjUwODIyMjMyMzIzWhcNMjUwODI5MjMyMzIzWjAYMRYwFAYD VQQDEw02OGE4ZmJlYi03YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fDqJ65Jr3uGhZ0bTW2S7iNJKgAG7JmpcE2ltt4tAEe9aWlJ7en1lFqsq7Km o5mTEhXTrlD79qiuoVrJomedpfUGG6t/hY0tN7nqsH9HDyhsHLbE1BQFU4Mz2gAI Q/iGt3iKUQqpnQl2ZdbrtXVqSrNHxu60L9G7GOqdnnQ/em0zO0BuEOssE189/tXP Tq0q9Zc3W+IKvZeeMbrRSgDOZPk1ytFbtiprmnUnUYDaOnGwwIabUd/p8/n1wLQX Ve7kqNeghuFzVKP+BPMb5eBzl2Rqg0PAQaUipH73td4aFnuwa1+GXbWqjCB2CswX Lv0FqdYNuPYPa3zz7baGcXEsFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0uYBmm c9mvbpM9YM6cchLRwGo6MB8GA1UdIwQYMBaAFA4D08Lo8sU1gr7RwhTB/Tqupa5a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDE4RC9BM0Y2QUNBRUUw NzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhUV0N2dEhDRk1IOU9xNmxy bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RnUFR3dWp5eFRXQ3Z0SENGTUg5T3E2bHJsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDE4RC9BM0Y2QUNBRUUwNzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhU V0N2dEhDRk1IOU9xNmxybG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzarm5TTAYzZey5tbnmQ/hpC4UGMZa5VYgExtjkwPN9xnJ1UOTSGYA WSCfMniJV0FfAfP+hfhOfQt+toBnH4ZrfsHhSvhj1iLROeuGvDkLYkGIsDiWT2yb IcsyhjVot7gkYy7IubUGFkx5slYTc8onO1fjvmwaRfwjFawyOMUcOsl0fMgNjiX2 4dhhO91t4qCmY1vQpsFWtmoKBBKzDR4cnvVthdNaZ1Cis8tVBLPORnQrDSGrlSU4 ga3TL5OnGcZl7WGR7jEtFH20uzO9NkA1VyH6ck9U97RPSeMOCc04cfZ8zymGtZLI r0fIcNsGa1nIWFMNu5sjwi8Yae16A7pU -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:44 2025 by rpki-client