$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: wqwUGOFedBML2b41nC9P8RNd/6+4vXrSNBM68t8icDI= Subject key identifier: 2B:19:C6:14:D5:FC:ED:C7:62:C2:0F:B1:E5:5E:3B:EC:66:EE:96:0F Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0C2C Signing time: Fri 22 Aug 2025 18:47:55 +0000 Manifest this update: Fri 22 Aug 2025 18:47:54 +0000 Manifest next update: Fri 29 Aug 2025 18:47:54 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: uIuvRVjVkGOoh3Sw5+ZDg41NmX8EHxJhu45wAFw9Odk=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Aug 22 18:47:54 2025 GMT Not After : Aug 29 18:47:54 2025 GMT Subject: CN=68a8bb5a-0f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:ec:74:38:e1:be:9e:87:83:3f:03:3f:f3: 0c:41:0a:ed:ae:3e:5f:d7:12:cb:68:eb:4c:44:aa: 2c:98:19:b6:e0:5e:87:f6:2e:d1:a3:50:4a:78:fb: b5:c1:a9:87:f8:8e:11:6e:fb:c7:70:87:4e:9d:8b: dd:97:12:13:46:48:fc:95:3d:94:99:94:7d:76:03: f9:63:ba:6a:8f:09:a5:48:cd:ba:cb:c0:cd:53:44: be:15:31:14:e2:66:61:9e:ed:ac:d2:91:9f:cb:f6: 8d:3e:b6:fa:36:be:53:39:13:86:45:24:d1:81:4f: 34:1f:a6:0c:80:f3:6d:92:70:3d:8d:28:79:18:93: a6:b0:bd:23:fb:67:ba:9e:61:f3:af:f0:49:a7:37: e8:a4:93:e5:12:86:a0:5b:a7:3f:1a:6a:23:8b:4c: 84:90:6c:7d:14:ba:44:9b:d6:90:3b:98:15:1b:ea: 02:ac:07:59:93:42:71:78:95:08:a0:f6:9a:65:e9: 94:47:79:69:ff:95:8f:57:c8:ed:b7:c4:8f:ea:ff: fe:3c:51:a3:31:2e:fd:e5:f9:d5:c8:4e:d6:23:64: 26:9f:84:8e:80:d3:89:67:9e:bd:0f:ab:83:16:87: 2b:6f:ee:72:51:dc:d4:0b:12:55:86:7e:31:f1:5b: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:19:C6:14:D5:FC:ED:C7:62:C2:0F:B1:E5:5E:3B:EC:66:EE:96:0F X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ea:d4:25:f0:d4:95:1c:c5:61:b2:27:48:d9:84:f8:2d:de: 33:a9:a7:2f:b9:b3:91:93:53:1e:d9:aa:c0:af:57:e4:2d:3e: a3:bf:5e:bf:d9:ac:e8:de:6a:56:e6:20:66:d0:cb:6f:76:43: 28:55:cc:26:65:c8:fb:20:8e:18:9e:9c:cf:ab:ce:ad:f7:1f: 2f:eb:db:c4:7b:dd:16:1b:2b:b0:b6:2f:13:e7:0d:f7:2e:8f: 6a:12:56:5f:64:27:90:cb:9f:55:4e:25:41:1e:85:5c:df:b7: 3a:d8:3c:ee:53:fd:4a:c5:a2:b5:93:5d:d5:63:14:af:d0:f3: 54:e4:e8:d6:ea:d9:08:4b:6e:61:b5:07:b9:a0:c9:78:15:c0: b6:c0:fc:9e:40:49:a5:a3:53:67:86:ef:fa:87:26:53:f7:30: 0b:31:8d:fd:b4:3a:2f:5b:98:8c:ff:2f:8b:98:89:4a:20:ff: 2e:76:be:57:1a:1d:07:cf:83:d5:49:c8:d7:50:9c:17:14:d9: ff:76:f3:92:5d:50:b5:62:bd:d8:36:6d:e9:38:c5:11:23:b3: 1d:1c:f9:fc:17:98:de:cb:65:c4:48:1f:62:ce:88:e6:9f:62: 54:5d:09:45:1e:36:db:1b:75:0b:3e:57:12:c6:a1:08:09:16: 2b:22:a4:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjUwODIyMTg0NzU0WhcNMjUwODI5MTg0NzU0WjAYMRYwFAYD VQQDEw02OGE4YmI1YS0wZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XvsdDjhvp6Hgz8DP/MMQQrtrj5f1xLLaOtMRKosmBm24F6H9i7Ro1BKePu1 wamH+I4RbvvHcIdOnYvdlxITRkj8lT2UmZR9dgP5Y7pqjwmlSM26y8DNU0S+FTEU 4mZhnu2s0pGfy/aNPrb6Nr5TOROGRSTRgU80H6YMgPNtknA9jSh5GJOmsL0j+2e6 nmHzr/BJpzfopJPlEoagW6c/Gmoji0yEkGx9FLpEm9aQO5gVG+oCrAdZk0JxeJUI oPaaZemUR3lp/5WPV8jtt8SP6v/+PFGjMS795fnVyE7WI2Qmn4SOgNOJZ569D6uD Focrb+5yUdzUCxJVhn4x8VtYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsZxhTV /O3HYsIPseVeO+xm7pYPMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB76tQl8NSVHMVhsidI2YT4Ld4zqacvubORk1Me2arAr1fkLT6jv16/ 2azo3mpW5iBm0MtvdkMoVcwmZcj7II4YnpzPq86t9x8v69vEe90WGyuwti8T5w33 Lo9qElZfZCeQy59VTiVBHoVc37c62DzuU/1KxaK1k13VYxSv0PNU5OjW6tkIS25h tQe5oMl4FcC2wPyeQEmlo1Nnhu/6hyZT9zALMY39tDovW5iM/y+LmIlKIP8udr5X Gh0Hz4PVScjXUJwXFNn/dvOSXVC1Yr3YNm3pOMURI7MdHPn8F5jey2XESB9izojm n2JUXQlFHjbbG3ULPlcSxqEICRYrIqSd -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:45 2025 by rpki-client