$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: /QsUAD4kGpy+ytiTSRcmS8RykU1wh89ZU7unesWn2dg= Subject key identifier: F2:C2:B9:26:8D:2E:F7:F6:7C:D0:89:4E:B1:55:76:DD:35:8E:52:81 Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 02:18:06 +0000 Manifest this update: Sat 23 Aug 2025 02:18:05 +0000 Manifest next update: Sat 30 Aug 2025 02:18:05 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: 0bFtjclikQj2R3DZ7Zq0H8k9YV0HU1DCggsF1O6mBq8=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Aug 23 02:18:05 2025 GMT Not After : Aug 30 02:18:05 2025 GMT Subject: CN=68a924dd-f584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:58:81:bd:01:5c:16:ec:f3:3f:2d:d7:62: 37:89:34:e6:6d:ad:2d:3b:67:23:28:ef:7c:14:b5: 75:3e:e9:7e:1b:45:77:26:4d:d3:97:47:bc:ea:8f: e7:35:f0:e7:7e:90:88:81:2d:f4:fb:27:81:48:c3: c1:c3:ab:02:ae:7f:93:fa:01:f3:f4:94:65:91:22: b1:35:68:ef:ec:31:05:c8:d0:00:f1:85:ca:5a:fb: b4:ee:8b:70:20:41:80:85:56:0c:87:97:c3:fd:90: 15:c1:af:69:d6:54:f0:17:51:3f:c2:94:46:b6:f8: dc:09:a5:55:be:8e:46:42:ee:b0:7c:bd:ab:aa:4f: e7:1d:f0:0b:85:f2:28:13:da:4f:d2:45:9f:4c:cc: 8c:4c:db:05:b1:9b:f4:3d:35:b0:64:59:3f:20:d0: d0:f9:42:25:c4:25:fd:70:e5:d1:89:f5:39:db:60: d2:9e:f0:43:2c:1a:7a:97:35:11:95:36:7a:de:14: fd:88:dc:c3:02:8e:1f:4c:4f:85:9d:49:12:86:20: 70:bc:fc:c2:f8:71:e4:05:5f:fd:08:7d:85:52:88: 1e:67:7d:73:4c:44:25:90:8d:07:15:00:68:f9:67: 3a:aa:b2:bc:c9:28:34:4d:77:dc:74:88:2a:c4:89: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C2:B9:26:8D:2E:F7:F6:7C:D0:89:4E:B1:55:76:DD:35:8E:52:81 X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:aa:cf:80:5d:7e:f7:85:9c:ba:15:2a:78:e9:1b:db:9f:3e: ae:bb:e4:e7:10:4a:83:d0:d0:78:7e:e4:97:f9:92:ce:76:56: 81:42:9f:69:8b:bd:49:a5:fc:80:fe:e7:4a:cb:3c:26:9a:94: 7b:07:c4:69:64:a4:37:82:d4:96:9b:73:7a:2d:47:43:66:e0: 45:8a:ec:16:26:84:40:8c:f4:27:89:49:7f:31:c8:41:3b:e8: 05:d3:39:7f:25:ea:47:cd:1b:8f:3c:11:03:b2:65:0b:d3:77: 9f:7e:14:cb:06:8e:61:3e:ab:18:0d:97:86:5c:88:d0:4c:74: ab:a6:06:bb:a6:e6:2e:1c:3c:ec:54:7b:50:46:46:c6:54:f9: ef:f2:6f:1c:6a:99:4a:a8:a0:bb:85:56:d2:e0:13:00:bf:a3: c0:1e:60:35:e0:c8:a2:70:6a:62:cd:f4:55:92:d6:2d:0f:eb: f4:73:32:6c:74:b9:20:26:d3:2a:b0:86:5e:a1:8a:dc:f6:c5: 8d:d8:54:33:2b:01:e1:b4:10:38:db:62:23:ee:14:0e:8b:21: 24:68:94:aa:39:72:53:c8:a0:a8:89:26:62:b3:01:24:68:8e: 80:6c:73:1c:31:f7:2d:b9:f9:e9:a6:24:cb:b0:dc:a0:ab:99: 59:39:1e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwODIzMDIxODA1WhcNMjUwODMwMDIxODA1WjAYMRYwFAYD VQQDEw02OGE5MjRkZC1mNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMJYgb0BXBbs8z8t12I3iTTmba0tO2cjKO98FLV1Pul+G0V3Jk3Tl0e86o/n NfDnfpCIgS30+yeBSMPBw6sCrn+T+gHz9JRlkSKxNWjv7DEFyNAA8YXKWvu07otw IEGAhVYMh5fD/ZAVwa9p1lTwF1E/wpRGtvjcCaVVvo5GQu6wfL2rqk/nHfALhfIo E9pP0kWfTMyMTNsFsZv0PTWwZFk/INDQ+UIlxCX9cOXRifU522DSnvBDLBp6lzUR lTZ63hT9iNzDAo4fTE+FnUkShiBwvPzC+HHkBV/9CH2FUogeZ31zTEQlkI0HFQBo +Wc6qrK8ySg0TXfcdIgqxIngkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLCuSaN Lvf2fNCJTrFVdt01jlKBMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoqs+AXX73hZy6FSp46Rvbnz6uu+TnEEqD0NB4fuSX+ZLOdlaBQp9p i71JpfyA/udKyzwmmpR7B8RpZKQ3gtSWm3N6LUdDZuBFiuwWJoRAjPQniUl/MchB O+gF0zl/JepHzRuPPBEDsmUL03effhTLBo5hPqsYDZeGXIjQTHSrpga7puYuHDzs VHtQRkbGVPnv8m8caplKqKC7hVbS4BMAv6PAHmA14MiicGpizfRVktYtD+v0czJs dLkgJtMqsIZeoYrc9sWN2FQzKwHhtBA422Ij7hQOiyEkaJSqOXJTyKCoiSZiswEk aI6AbHMcMfctufnppiTLsNygq5lZOR49 -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:33 2025 by rpki-client