$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: cJDH7SlCKFKm9UQsRfrcjFZsyJLF1rOAoi3+YMi/h7A= Subject key identifier: A9:CF:00:DF:FA:14:C4:85:EB:F3:DB:C9:C5:BB:E8:F8:AA:BD:0E:1A Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0916 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 090F Signing time: Wed 02 Jul 2025 20:33:22 +0000 Manifest this update: Wed 02 Jul 2025 20:33:22 +0000 Manifest next update: Wed 09 Jul 2025 20:33:22 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: MHR66KQvggmYh/u7GJDgbEPKzBjgcUys7EFJVWH3r0U=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2326 (0x916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Jul 2 20:33:22 2025 GMT Not After : Jul 9 20:33:22 2025 GMT Subject: CN=68659792-7a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0e:e6:0c:cc:1f:43:09:bb:80:dd:6b:89:92: fa:c7:43:3a:1b:a9:d6:26:e6:d7:66:42:4c:70:d7: a9:16:03:de:fa:8c:a3:f1:0a:46:2a:d5:81:cb:ec: 0f:c3:04:2c:11:4d:f8:23:64:f0:92:26:f9:d4:bc: 15:10:86:4b:26:db:a0:2b:7d:54:0f:a7:1b:87:6a: 29:bb:24:36:1f:e8:47:b2:49:eb:12:a0:f6:80:3f: 43:39:08:14:00:16:74:13:d3:ec:df:67:ce:0f:d7: 99:c4:3f:5c:86:d2:20:bf:a0:d5:9f:20:50:8d:6c: 89:16:bd:64:f7:fa:1a:5c:34:ec:73:46:95:ae:e0: f6:29:81:a2:5a:7f:8e:dd:25:c3:28:e5:65:1c:f1: 5e:71:35:4d:dc:45:e8:22:4a:5a:55:50:cb:6f:4c: 34:0b:d5:a3:90:6f:57:d3:59:f4:22:7a:1e:d3:3a: c7:99:bd:79:5f:99:5a:f0:b0:a9:ce:2e:34:40:0e: 90:83:74:04:cf:18:9a:fe:ac:e7:3e:2b:ce:3b:45: 00:68:e8:52:73:08:e9:cf:4b:4d:27:48:5f:18:5e: 42:bd:cb:8c:57:37:77:b9:fe:10:64:e9:22:ca:8f: 57:9c:a4:69:71:5b:67:22:a8:b1:b4:d7:99:20:83: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:00:DF:FA:14:C4:85:EB:F3:DB:C9:C5:BB:E8:F8:AA:BD:0E:1A X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:85:55:92:af:ef:34:7a:86:d3:1e:98:3a:51:1d:ef:06:38: 5e:b6:ec:8a:de:7a:2e:73:3a:ef:c1:4c:9c:4c:9d:55:14:c9: 6a:7b:30:62:56:bf:e0:51:0d:7c:e9:60:66:42:8f:2b:26:14: 1b:bd:26:0f:3e:5d:f8:16:8f:93:0a:a5:24:d1:da:00:f3:74: 3b:c2:19:ba:75:89:9f:a8:53:17:cb:59:8a:2a:8f:1e:ac:52: 5e:95:a9:ba:cc:77:18:ee:fa:30:14:a6:6b:8b:3b:12:c1:b1: 8d:2b:ee:7f:7d:5e:44:ee:8f:a0:b6:43:8d:c7:41:9b:1f:67: 87:3f:90:b6:24:4f:7d:09:55:57:80:5b:10:01:23:24:f0:3b: ab:2a:ad:20:47:2e:5f:7d:62:64:88:be:cb:b7:6e:82:ec:75: c2:f5:5f:60:16:07:7f:ea:55:87:6a:7d:2d:bc:36:ce:59:2c: 21:b0:0d:b1:c6:22:41:8c:1d:1b:83:c6:c0:a1:e2:45:ee:7b: 7e:aa:f1:cb:a7:66:5f:bb:74:42:7e:9c:49:5a:a3:b6:5f:71: ef:d2:ea:6a:9d:62:cd:95:13:0a:29:1a:44:25:b7:25:f4:69: c1:b8:fa:5a:e7:85:7c:7d:b4:76:cf:a4:52:81:be:93:51:54: 04:67:e1:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUwNzAyMjAzMzIyWhcNMjUwNzA5MjAzMzIyWjAYMRYwFAYD VQQDEw02ODY1OTc5Mi03YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Q7mDMwfQwm7gN1riZL6x0M6G6nWJubXZkJMcNepFgPe+oyj8QpGKtWBy+wP wwQsEU34I2Twkib51LwVEIZLJtugK31UD6cbh2opuyQ2H+hHsknrEqD2gD9DOQgU ABZ0E9Ps32fOD9eZxD9chtIgv6DVnyBQjWyJFr1k9/oaXDTsc0aVruD2KYGiWn+O 3SXDKOVlHPFecTVN3EXoIkpaVVDLb0w0C9WjkG9X01n0Inoe0zrHmb15X5la8LCp zi40QA6Qg3QEzxia/qznPivOO0UAaOhScwjpz0tNJ0hfGF5CvcuMVzd3uf4QZOki yo9XnKRpcVtnIqixtNeZIIPJQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnPAN/6 FMSF6/PbycW76PiqvQ4aMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyhVWSr+80eobTHpg6UR3vBjhetuyK3nouczrvwUycTJ1VFMlqezBi Vr/gUQ186WBmQo8rJhQbvSYPPl34Fo+TCqUk0doA83Q7whm6dYmfqFMXy1mKKo8e rFJelam6zHcY7vowFKZrizsSwbGNK+5/fV5E7o+gtkONx0GbH2eHP5C2JE99CVVX gFsQASMk8DurKq0gRy5ffWJkiL7Lt26C7HXC9V9gFgd/6lWHan0tvDbOWSwhsA2x xiJBjB0bg8bAoeJF7nt+qvHLp2Zfu3RCfpxJWqO2X3Hv0upqnWLNlRMKKRpEJbcl 9GnBuPpa54V8fbR2z6RSgb6TUVQEZ+GQ -----END CERTIFICATE-----Generated at Thu Jul 3 05:22:06 2025 by rpki-client