$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: cno6ozfF43fR5H3UDHALNMIB4iE0lHPqWxbTLVxgIWw= Subject key identifier: 9D:3D:26:AD:63:F8:40:5A:4E:5A:23:C4:82:61:70:02:54:5E:D4:7C Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 0167 Signing time: Thu 03 Jul 2025 04:00:31 +0000 Manifest this update: Thu 03 Jul 2025 04:00:30 +0000 Manifest next update: Thu 10 Jul 2025 04:00:30 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: b4b+aAIUX7cyc9EGQSRgKfdq/TitSs4TZF+HNh17DHc=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: Jul 3 04:00:30 2025 GMT Not After : Jul 10 04:00:30 2025 GMT Subject: CN=6866005f-9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:78:67:0f:de:b6:d0:48:97:a3:65:49:7d: 16:45:1c:2f:07:02:ef:ca:0b:69:fb:16:82:10:92: 14:a1:41:0a:ed:c1:3d:a9:fa:2e:04:8a:0f:4c:4f: b6:bd:b8:86:bf:e1:6d:2d:29:99:16:e2:24:46:59: d8:37:83:44:8d:9b:b5:ba:5c:f7:c3:ac:69:e0:89: 7c:fe:3a:88:3c:81:b8:5a:88:d8:5e:32:e9:0d:de: 53:ae:f9:eb:71:90:41:47:e9:eb:e6:85:0b:66:48: b3:61:ba:53:cd:56:91:39:3a:62:61:15:4c:6a:75: 68:26:bb:16:37:c6:55:97:e8:0e:27:c9:21:60:ed: f9:9a:50:ee:12:3a:26:2f:b1:5e:70:e4:85:cc:20: a8:5f:71:d8:41:25:57:1c:7d:7d:d9:5d:d6:7b:c1: cd:fe:8b:d5:48:bf:29:4f:93:d1:bc:de:66:d4:37: 3c:13:5b:cf:0e:5c:83:fe:cf:5b:99:a3:88:14:5b: c7:3c:eb:84:e8:39:18:47:a0:5b:78:24:16:a5:c8: 72:f5:77:7a:dd:90:1d:8d:c3:09:45:0d:11:e7:99: 32:25:51:a1:f6:b4:f1:d0:9b:cf:bb:57:e3:79:f5: 8a:17:c1:5e:fe:ee:99:57:30:26:ab:a3:ba:d0:f4: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:26:AD:63:F8:40:5A:4E:5A:23:C4:82:61:70:02:54:5E:D4:7C X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:55:33:c0:1e:65:61:5f:d2:45:90:8e:3b:62:db:bc:9f:ff: 98:e5:8c:11:56:37:c2:75:38:1b:4d:c7:f5:fc:86:10:d7:41: 54:92:38:fa:f0:7f:41:f0:e6:be:59:1f:06:cb:8f:a7:09:2f: 76:8c:d7:98:e6:77:7f:60:62:63:03:06:72:f2:84:48:14:36: 9c:d6:cd:aa:d4:19:be:cd:ad:ce:2f:fa:c4:d6:9a:fa:77:1c: d6:6f:f7:02:38:1d:15:90:bf:89:62:75:e7:33:00:17:ff:0d: 80:79:40:bb:24:8d:63:de:16:42:11:42:fe:79:40:a6:40:e9: 41:c0:f1:b6:59:e2:58:10:64:52:32:9f:22:3c:aa:0a:e4:ec: 16:6b:95:e0:34:cf:ee:bd:d0:ab:78:1e:7d:2c:f6:2f:cd:b3: 41:09:aa:84:61:f7:0e:fd:79:ac:48:82:43:ee:2a:ea:e7:b4: e3:cd:56:db:92:ee:4a:6c:72:55:b2:83:ee:c9:e8:52:31:49: f9:bf:6a:e6:06:6b:16:e6:9b:9c:41:08:79:e7:10:ef:bb:42: 54:f4:04:73:ed:59:91:b1:b8:71:71:7c:2a:ad:89:62:68:78: 6d:c6:7d:f7:de:d9:3e:3b:1c:d6:07:9f:5b:b2:90:73:69:4a: 62:ab:fa:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjUwNzAzMDQwMDMwWhcNMjUwNzEwMDQwMDMwWjAYMRYwFAYD VQQDEw02ODY2MDA1Zi05NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4l4Zw/ettBIl6NlSX0WRRwvBwLvygtp+xaCEJIUoUEK7cE9qfouBIoPTE+2 vbiGv+FtLSmZFuIkRlnYN4NEjZu1ulz3w6xp4Il8/jqIPIG4WojYXjLpDd5Trvnr cZBBR+nr5oULZkizYbpTzVaROTpiYRVManVoJrsWN8ZVl+gOJ8khYO35mlDuEjom L7FecOSFzCCoX3HYQSVXHH192V3We8HN/ovVSL8pT5PRvN5m1Dc8E1vPDlyD/s9b maOIFFvHPOuE6DkYR6BbeCQWpchy9Xd63ZAdjcMJRQ0R55kyJVGh9rTx0JvPu1fj efWKF8Fe/u6ZVzAmq6O60PSvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ09Jq1j +EBaTlojxIJhcAJUXtR8MB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVTPAHmVhX9JFkI47Ytu8n/+Y5YwRVjfCdTgbTcf1/IYQ10FUkjj6 8H9B8Oa+WR8Gy4+nCS92jNeY5nd/YGJjAwZy8oRIFDac1s2q1Bm+za3OL/rE1pr6 dxzWb/cCOB0VkL+JYnXnMwAX/w2AeUC7JI1j3hZCEUL+eUCmQOlBwPG2WeJYEGRS Mp8iPKoK5OwWa5XgNM/uvdCreB59LPYvzbNBCaqEYfcO/XmsSIJD7irq57TjzVbb ku5KbHJVsoPuyehSMUn5v2rmBmsW5pucQQh55xDvu0JU9ARz7VmRsbhxcXwqrYli aHhtxn333tk+OxzWB59bspBzaUpiq/pW -----END CERTIFICATE-----Generated at Fri Jul 4 14:46:26 2025 by rpki-client