$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json) Hash identifier: 7bOZg62smidxHmckeOAKZRb8p32y7Ez9MYbsHj+XaT4= Subject key identifier: A9:1E:B8:A9:47:48:F1:8A:89:5D:46:19:C7:55:C6:20:41:83:3C:F0 Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft Manifest number: 0591 Signing time: Fri 04 Jul 2025 23:43:08 +0000 Manifest this update: Fri 04 Jul 2025 23:43:08 +0000 Manifest next update: Fri 11 Jul 2025 23:43:08 +0000 Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: K+jzctgUeEglTUvGX9os2DH6WzBUoTlzPT5QU17mI9w=) 2: 54E9D878F08311EB8268373EC4F9AE02.roa (hash: 2dKBXSVS1H9+PztFUFeH1IJNMCL93pag3JLnjY536SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Validity Not Before: Jul 4 23:43:08 2025 GMT Not After : Jul 11 23:43:08 2025 GMT Subject: CN=6868670c-5066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:44:42:12:c4:5b:5f:e8:51:ae:1c:6d:78: 07:4f:f2:58:51:35:3e:c2:94:ed:bf:df:a1:87:ab: 95:91:08:53:1b:49:77:aa:7d:3e:9f:a3:7c:3a:b3: b1:d1:00:44:df:d8:ea:32:b2:18:ba:9c:07:48:c6: 35:a3:3f:9d:3f:db:52:f9:f6:fa:e9:fd:ea:07:3c: 64:0e:d9:b5:8e:9b:a3:61:20:c9:f8:e5:12:2b:02: f7:00:62:73:3f:03:19:ab:73:ad:4a:52:79:d8:59: b5:6a:4e:a8:0f:d9:92:15:28:55:0f:63:83:97:85: 24:83:f0:02:31:4f:2e:08:5a:47:cc:8a:5c:39:15: 99:a1:f3:71:a6:e7:10:23:2b:2e:78:cd:16:e4:32: a3:27:84:65:c6:0b:11:65:d7:1c:80:fc:ea:f1:0e: 57:60:bd:40:f5:da:17:d8:4a:0a:c7:e3:b3:f7:e4: ce:ae:38:48:c1:a7:74:18:ef:a2:7b:f8:18:d7:29: 80:5f:80:b3:02:e4:4f:ef:9d:58:4f:d6:32:da:6c: 78:e9:53:8f:1d:d2:77:d1:ec:61:4c:f3:a5:96:86: 47:6b:98:8c:db:67:11:95:73:ed:da:20:9c:ca:50: 01:0c:31:73:5f:5c:c1:10:25:d1:b0:53:5d:53:70: 13:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1E:B8:A9:47:48:F1:8A:89:5D:46:19:C7:55:C6:20:41:83:3C:F0 X509v3 Authority Key Identifier: keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:13:41:d7:7f:85:81:c6:ca:99:f0:29:d2:bf:de:65:cd:a8: 91:cf:86:22:39:66:d8:d7:14:d8:a2:51:52:2c:25:04:06:6b: 2d:6d:95:63:25:5d:3f:e0:90:3c:4e:aa:91:56:98:03:20:92: 28:fd:9d:a4:b9:eb:e3:0e:78:89:c2:20:80:dc:56:86:39:24: 40:09:ce:ac:b6:46:6b:bd:9b:9e:85:8b:8f:08:c8:76:0f:9b: 6b:b2:f1:2c:d8:73:e3:7f:db:17:54:70:fc:6b:58:35:72:c5: 57:23:4b:42:86:96:27:2f:33:3d:01:5d:43:92:c5:80:76:61: 59:9f:68:5e:0e:dc:c6:d0:4c:55:f7:41:bc:79:8c:98:5b:ec: 56:6b:82:58:bd:64:ed:ea:67:63:32:57:3c:73:d0:a0:7b:92: af:d4:d8:53:86:7e:52:88:90:f3:9c:99:7f:97:19:da:d1:96: 24:91:05:a1:be:ff:d2:ee:48:d1:f6:2b:e3:49:db:63:cb:eb: 5e:8b:ad:b2:d5:df:d7:64:d2:ae:93:fd:12:f4:40:5d:63:c1: 3b:41:68:c8:10:4b:a8:64:3c:88:6d:1a:95:ce:84:0d:8c:0c: ef:81:9d:d1:4b:d3:02:6b:da:1a:94:f5:42:fc:4b:5d:83:95: 26:41:78:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQxOEQxMTAvBgNVBAUTKDBFMDNEM0MyRThGMkM1MzU4MkJFRDFDMjE0QzFGRDNB QUVBNUFFNUEwHhcNMjUwNzA0MjM0MzA4WhcNMjUwNzExMjM0MzA4WjAYMRYwFAYD VQQDEw02ODY4NjcwYy01MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBdEQhLEW1/oUa4cbXgHT/JYUTU+wpTtv9+hh6uVkQhTG0l3qn0+n6N8OrOx 0QBE39jqMrIYupwHSMY1oz+dP9tS+fb66f3qBzxkDtm1jpujYSDJ+OUSKwL3AGJz PwMZq3OtSlJ52Fm1ak6oD9mSFShVD2ODl4Ukg/ACMU8uCFpHzIpcORWZofNxpucQ IysueM0W5DKjJ4RlxgsRZdccgPzq8Q5XYL1A9doX2EoKx+Oz9+TOrjhIwad0GO+i e/gY1ymAX4CzAuRP751YT9Yy2mx46VOPHdJ30exhTPOlloZHa5iM22cRlXPt2iCc ylABDDFzX1zBECXRsFNdU3AT0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkeuKlH SPGKiV1GGcdVxiBBgzzwMB8GA1UdIwQYMBaAFA4D08Lo8sU1gr7RwhTB/Tqupa5a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDE4RC9BM0Y2QUNBRUUw NzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhUV0N2dEhDRk1IOU9xNmxy bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RnUFR3dWp5eFRXQ3Z0SENGTUg5T3E2bHJsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDE4RC9BM0Y2QUNBRUUwNzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhU V0N2dEhDRk1IOU9xNmxybG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuE0HXf4WBxsqZ8CnSv95lzaiRz4YiOWbY1xTYolFSLCUEBmstbZVj JV0/4JA8TqqRVpgDIJIo/Z2kuevjDniJwiCA3FaGOSRACc6stkZrvZuehYuPCMh2 D5trsvEs2HPjf9sXVHD8a1g1csVXI0tChpYnLzM9AV1DksWAdmFZn2heDtzG0ExV 90G8eYyYW+xWa4JYvWTt6mdjMlc8c9Cge5Kv1NhThn5SiJDznJl/lxna0ZYkkQWh vv/S7kjR9ivjSdtjy+tei62y1d/XZNKuk/0S9EBdY8E7QWjIEEuoZDyIbRqVzoQN jAzvgZ3RS9MCa9oalPVC/Etdg5UmQXjF -----END CERTIFICATE-----Generated at Sun Jul 6 01:00:47 2025 by rpki-client