$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: w+puAcbrFPW22MFBEVrESlzlhx9ECVoj4xHyM7qSsh8= Subject key identifier: 04:AF:E1:AC:F1:A3:2E:DB:82:08:1F:8D:52:68:C9:01:37:5F:6D:9E Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 0929 Signing time: Fri 22 Aug 2025 20:22:32 +0000 Manifest this update: Fri 22 Aug 2025 20:22:31 +0000 Manifest next update: Fri 29 Aug 2025 20:22:31 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: RiCJ+p1qYb19FKn5JTxZ8OaZiD4iMMGA0l6YQ2NFSf8=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Aug 22 20:22:31 2025 GMT Not After : Aug 29 20:22:31 2025 GMT Subject: CN=68a8d188-b3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:e7:40:31:6f:c9:bc:a6:c0:49:52:4b:50: 16:a3:f3:36:3b:37:f7:2e:94:15:cb:a8:ec:4a:59: 88:fd:67:36:ec:eb:5a:2d:bb:6c:da:e4:ea:60:42: 18:0f:b9:62:5c:14:d5:98:19:8a:92:5f:6b:68:24: fc:96:3c:ea:07:75:74:0d:c5:f7:b1:11:56:f8:8a: 31:b0:2d:84:85:e9:26:f7:aa:4b:5d:34:b5:ac:56: 1e:22:3d:5d:78:4a:e4:af:22:79:69:13:09:20:ec: 9e:d2:47:ad:50:90:d1:ce:63:20:2c:f9:a5:4d:a9: 91:64:09:d1:48:58:6d:65:a3:16:21:2e:55:33:30: 7c:c4:01:f0:9f:12:f4:2a:2a:7e:ae:cb:29:64:39: 63:a6:0b:bc:46:7c:c6:8b:17:59:e2:a5:a7:55:f0: be:80:1a:17:0a:c8:90:ad:62:7e:b1:15:02:6f:1b: 03:dc:ab:b8:3f:ef:8d:33:b4:f5:28:46:26:4c:4d: df:b6:c1:28:f9:e5:34:13:0a:89:01:37:83:fe:f5: db:3c:b6:4f:66:28:b5:1a:14:9b:0f:99:39:e0:97: 7b:56:af:12:88:7a:fd:8d:92:11:8c:9d:94:95:d2: 83:46:b9:a8:68:1c:c7:4d:2d:fd:20:b8:e1:ba:ee: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AF:E1:AC:F1:A3:2E:DB:82:08:1F:8D:52:68:C9:01:37:5F:6D:9E X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:22:5d:3f:2d:a4:17:a6:f5:df:16:57:ed:2c:37:e7:a5: 4d:18:4f:b6:d4:02:a0:89:97:c5:ab:ff:bc:70:5e:3b:2e:0d: 83:b4:69:43:08:85:9c:62:66:65:4a:f4:6b:74:d3:4c:86:d3: ab:64:dc:c8:08:6c:65:49:bc:b2:76:38:6f:83:9a:5c:e4:ca: c5:5a:e2:de:91:f5:2f:29:83:ae:56:1b:50:9b:61:b4:2a:b9: 27:5a:b1:1e:db:9a:d5:8e:95:db:74:cf:98:7e:08:8b:a2:6d: 0b:f2:02:ce:62:bf:77:1e:0c:d6:6d:fd:7f:aa:73:4a:41:cc: d0:52:2a:02:28:dc:15:07:72:76:6c:11:7f:59:2a:0b:62:f5: 88:9d:6f:20:ef:8f:6a:54:a4:ac:71:4f:4f:72:81:4e:31:b4: c8:de:fd:24:8c:7b:3c:e0:16:26:11:1b:d5:6c:06:dc:29:53: 46:cd:4c:68:6f:f6:02:60:69:e5:87:d3:98:3f:4e:3a:ed:92: 45:18:c3:42:be:a4:62:d3:fa:f1:94:ab:da:60:ce:e7:e8:b7: 9d:50:1e:3b:64:86:1a:af:5e:e8:b8:70:86:03:9d:8b:98:27: a5:4c:6b:00:4d:e0:3c:37:0d:78:50:92:2e:36:14:90:ea:1c: 0c:29:d9:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUwODIyMjAyMjMxWhcNMjUwODI5MjAyMjMxWjAYMRYwFAYD VQQDEw02OGE4ZDE4OC1iM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pXnQDFvybymwElSS1AWo/M2Ozf3LpQVy6jsSlmI/Wc27OtaLbts2uTqYEIY D7liXBTVmBmKkl9raCT8ljzqB3V0DcX3sRFW+IoxsC2Ehekm96pLXTS1rFYeIj1d eErkryJ5aRMJIOye0ketUJDRzmMgLPmlTamRZAnRSFhtZaMWIS5VMzB8xAHwnxL0 Kip+rsspZDljpgu8RnzGixdZ4qWnVfC+gBoXCsiQrWJ+sRUCbxsD3Ku4P++NM7T1 KEYmTE3ftsEo+eU0EwqJATeD/vXbPLZPZii1GhSbD5k54Jd7Vq8SiHr9jZIRjJ2U ldKDRrmoaBzHTS39ILjhuu6JDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASv4azx oy7bgggfjVJoyQE3X22eMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4UCJdPy2kF6b13xZX7Sw356VNGE+21AKgiZfFq/+8cF47Lg2DtGlD CIWcYmZlSvRrdNNMhtOrZNzICGxlSbyydjhvg5pc5MrFWuLekfUvKYOuVhtQm2G0 KrknWrEe25rVjpXbdM+YfgiLom0L8gLOYr93HgzWbf1/qnNKQczQUioCKNwVB3J2 bBF/WSoLYvWInW8g749qVKSscU9PcoFOMbTI3v0kjHs84BYmERvVbAbcKVNGzUxo b/YCYGnlh9OYP0467ZJFGMNCvqRi0/rxlKvaYM7n6LedUB47ZIYar17ouHCGA52L mCelTGsATeA8Nw14UJIuNhSQ6hwMKdnb -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:09 2025 by rpki-client