$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: 2jbtbKAm8Vww5jsksjONo4mJ2UCsgd3DY+Or5Tutp+Y= Subject key identifier: E8:F4:DE:5E:63:97:10:3C:FA:AC:E7:83:99:F7:7A:D6:3F:6C:A4:A3 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01F3 Signing time: Sat 23 Aug 2025 02:58:22 +0000 Manifest this update: Sat 23 Aug 2025 02:58:21 +0000 Manifest next update: Sat 30 Aug 2025 02:58:21 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: lGjfmynhjkWbE+Mbq2X/P+AK1p9VS4mHHD2tDEluflQ=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Aug 23 02:58:21 2025 GMT Not After : Aug 30 02:58:21 2025 GMT Subject: CN=68a92e4e-4925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:9e:5d:e0:8c:ca:4d:30:ed:74:a8:f1:b0: bf:9b:0e:67:1d:5f:27:a5:f3:6f:05:9b:fc:a1:e2: 45:be:bf:c0:1e:ba:c1:e6:1e:04:9f:44:79:2c:2d: 58:3a:81:49:e1:19:62:01:83:9f:1d:32:1f:c6:8c: eb:6e:3b:1b:07:21:1b:db:ab:2f:d7:4a:3d:a4:80: 35:bb:ca:24:42:81:51:f0:bf:9a:5a:9c:16:62:6d: 0e:64:33:b6:b3:08:2f:80:ce:da:16:24:93:65:dc: 74:0b:4c:7f:92:cf:8d:d4:5a:6c:84:1e:3b:fb:48: 4c:18:a7:61:0d:ef:1f:51:ed:f8:dd:42:ba:e2:7b: 71:b8:63:dd:1f:6a:e5:67:c1:36:f1:95:79:9a:33: 66:df:b6:11:85:b3:4c:be:76:73:e5:63:af:10:96: 10:53:28:1d:a7:8b:c1:0c:ca:0d:18:e5:4b:85:4c: 69:3f:ca:3a:bd:9c:01:84:8b:96:af:13:e4:cd:8f: a6:50:00:9f:3a:ab:87:5c:18:84:ac:0f:3a:b6:0d: c5:6b:59:1c:bc:fd:f4:e3:b8:d1:15:39:fe:1f:80: b9:18:9c:f5:9a:c8:4a:93:9c:b2:72:4a:2d:4e:02: 51:a5:84:96:50:c9:39:47:c5:13:8b:93:dd:d9:ba: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F4:DE:5E:63:97:10:3C:FA:AC:E7:83:99:F7:7A:D6:3F:6C:A4:A3 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:3e:2a:c6:10:f7:2e:0c:66:28:66:c9:a7:9e:c9:b6:e7: 94:79:ae:f2:68:06:65:86:3a:e4:15:e4:52:55:f2:ba:37:47: b5:9f:45:c8:9d:11:76:1e:91:1b:e2:05:f8:d5:28:e9:82:3a: 6d:1c:51:da:43:e0:d9:13:b5:05:99:63:94:69:75:7d:35:7a: b3:65:dc:e9:de:9d:61:52:bf:c1:91:89:23:d2:b8:7d:e6:14: 0a:20:fe:ee:97:08:fb:bb:5b:12:67:7b:89:1e:c4:09:be:db: 5f:cf:09:61:00:6a:00:cf:0c:9a:28:06:29:f5:a3:10:23:11: aa:76:47:0a:6e:a3:35:2e:d6:b9:a3:0f:b6:2f:9a:7b:d0:7e: 16:8a:4a:2d:0d:95:0f:28:f0:ce:f4:87:4e:77:c4:22:69:87: dd:2f:a2:04:be:6c:15:19:0e:5c:be:74:a2:cc:2c:b1:01:df: 86:b9:76:3d:49:05:0c:63:e9:ce:41:97:fa:ad:27:af:ec:34: e8:ba:06:3e:b2:5c:8a:ad:d6:dc:38:82:cf:e8:7c:62:09:a0: 9f:30:f1:39:33:a2:ce:c4:fb:78:ea:d3:90:05:49:09:7d:d9: e9:56:15:8f:f0:4a:9b:02:47:95:17:78:83:fb:ea:12:62:fd: 16:03:83:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwODIzMDI1ODIxWhcNMjUwODMwMDI1ODIxWjAYMRYwFAYD VQQDEw02OGE5MmU0ZS00OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD6eXeCMyk0w7XSo8bC/mw5nHV8npfNvBZv8oeJFvr/AHrrB5h4En0R5LC1Y OoFJ4RliAYOfHTIfxozrbjsbByEb26sv10o9pIA1u8okQoFR8L+aWpwWYm0OZDO2 swgvgM7aFiSTZdx0C0x/ks+N1FpshB47+0hMGKdhDe8fUe343UK64ntxuGPdH2rl Z8E28ZV5mjNm37YRhbNMvnZz5WOvEJYQUygdp4vBDMoNGOVLhUxpP8o6vZwBhIuW rxPkzY+mUACfOquHXBiErA86tg3Fa1kcvP3047jRFTn+H4C5GJz1mshKk5yyckot TgJRpYSWUMk5R8UTi5Pd2br7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj03l5j lxA8+qzng5n3etY/bKSjMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEWT4qxhD3LgxmKGbJp57JtueUea7yaAZlhjrkFeRSVfK6N0e1n0XI nRF2HpEb4gX41SjpgjptHFHaQ+DZE7UFmWOUaXV9NXqzZdzp3p1hUr/BkYkj0rh9 5hQKIP7ulwj7u1sSZ3uJHsQJvttfzwlhAGoAzwyaKAYp9aMQIxGqdkcKbqM1Lta5 ow+2L5p70H4WikotDZUPKPDO9IdOd8QiaYfdL6IEvmwVGQ5cvnSizCyxAd+GuXY9 SQUMY+nOQZf6rSev7DTougY+slyKrdbcOILP6HxiCaCfMPE5M6LOxPt46tOQBUkJ fdnpVhWP8EqbAkeVF3iD++oSYv0WA4N6 -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:59 2025 by rpki-client