$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: nbde4uql8+yiDghWb35iBzj/lYxBXbaiH8jMBRfiksk= Subject key identifier: CA:4B:62:12:1B:71:E0:7B:EA:A5:70:9B:83:4C:0F:2F:59:97:FE:03 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 28 Signing time: Sat 23 Aug 2025 08:01:56 +0000 Manifest this update: Sat 23 Aug 2025 08:01:56 +0000 Manifest next update: Sat 30 Aug 2025 08:01:56 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: 9H0/YvUT0HJNyuq3eRbBtLBCR4xeSp+A+jw6g0pnYbE=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: yyRnOy3I+YsGzwaRvaOYjHZbPADEQBV8Fr6YK9Scj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Aug 23 08:01:56 2025 GMT Not After : Aug 30 08:01:56 2025 GMT Subject: CN=68a97574-8601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:cc:b3:13:8b:42:39:38:6e:cc:ac:b7:92: 47:ed:51:be:3d:1b:3f:7f:f3:b4:07:1b:03:8c:cf: cd:06:18:14:22:cf:9e:09:c8:21:55:08:3c:d6:36: 6e:a9:95:cb:a1:3f:1a:ee:b0:63:77:ba:e3:4c:d5: fc:4b:90:fa:1a:4d:97:52:61:e8:82:57:02:12:53: 07:31:63:20:4b:92:7d:3d:87:c6:45:50:27:12:01: e5:88:c6:85:c0:ea:59:76:b0:62:50:90:0e:b0:d6: 87:0e:78:97:3e:ac:54:74:85:26:65:8a:83:b5:aa: f2:6c:08:4d:c8:6f:a0:d7:64:68:0e:75:a4:3f:2a: be:35:fb:fc:57:56:de:67:17:ea:fa:bd:a6:82:a2: b0:3b:be:84:4d:f8:17:a4:13:ec:29:14:7c:7f:de: 50:25:cf:a3:60:28:e5:88:b3:97:e0:58:14:7e:07: 09:b9:80:8e:01:43:ab:60:66:db:4b:9b:7c:a0:08: bd:76:e6:83:22:21:bb:b5:de:9e:ae:c1:3a:12:d7: 60:1f:84:0e:24:9f:ca:d7:76:a2:6d:5d:97:bd:58: d0:79:ca:5d:73:53:f9:64:e4:33:f0:e8:f5:73:83: b6:a2:2b:7f:ac:12:2a:a4:06:63:77:fd:f4:0f:82: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:62:12:1B:71:E0:7B:EA:A5:70:9B:83:4C:0F:2F:59:97:FE:03 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:49:4e:85:55:d8:f2:6d:6d:5a:48:6c:df:21:83:fc:9c:f3: 6a:df:0a:e7:74:75:32:5f:2b:be:9d:c1:5b:8f:e2:f4:f2:f8: b9:c1:2b:db:87:19:5f:ce:ec:dc:e7:80:7c:3d:04:67:d0:06: 5b:98:bf:fc:fc:52:b1:9a:d4:51:47:cf:9e:2b:1a:4a:e0:75: 3a:23:0e:73:57:ce:92:6c:5b:59:0f:63:39:db:22:ab:ff:b7: 0e:97:ee:b0:28:78:03:7d:db:69:2d:f1:03:0d:ff:b0:d8:b2: 07:f0:2e:36:68:bf:fd:a6:e3:53:6d:fa:67:a6:50:05:d1:46: 82:fb:8e:f3:c2:f1:8d:37:eb:4f:da:e9:b1:cc:14:c3:99:da: d9:27:6d:ce:59:84:0d:94:98:64:49:80:5b:23:e7:22:d4:0d: e6:06:1a:98:9b:36:a4:ac:54:54:46:99:29:38:20:b1:cc:23: 2a:62:fa:4e:61:6e:3c:45:3e:d3:48:a8:de:17:5d:c7:da:63: 6e:03:32:f2:aa:bc:7c:a1:54:10:34:00:90:6e:3a:2d:99:26: 1d:3f:ea:3a:fc:29:97:59:a7:52:9f:74:cd:97:fb:74:9f:f4: bf:26:0f:12:45:84:70:46:ab:36:52:cc:09:b1:be:f7:88:d1: 97:bd:10:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTA4MjMwODAxNTZaFw0yNTA4MzAwODAxNTZaMBgxFjAUBgNV BAMTDTY4YTk3NTc0LTg2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwJcyzE4tCOThuzKy3kkftUb49Gz9/87QHGwOMz80GGBQiz54JyCFVCDzWNm6p lcuhPxrusGN3uuNM1fxLkPoaTZdSYeiCVwISUwcxYyBLkn09h8ZFUCcSAeWIxoXA 6ll2sGJQkA6w1ocOeJc+rFR0hSZlioO1qvJsCE3Ib6DXZGgOdaQ/Kr41+/xXVt5n F+r6vaaCorA7voRN+BekE+wpFHx/3lAlz6NgKOWIs5fgWBR+Bwm5gI4BQ6tgZttL m3ygCL125oMiIbu13p6uwToS12AfhA4kn8rXdqJtXZe9WNB5yl1zU/lk5DPw6PVz g7aiK3+sEiqkBmN3/fQPghATAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyktiEhtx 4HvqpXCbg0wPL1mX/gMwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAONJToVV2PJtbVpIbN8hg/yc82rfCud0dTJfK76dwVuP4vTy+LnBK9uH GV/O7NzngHw9BGfQBluYv/z8UrGa1FFHz54rGkrgdTojDnNXzpJsW1kPYznbIqv/ tw6X7rAoeAN922kt8QMN/7DYsgfwLjZov/2m41Nt+memUAXRRoL7jvPC8Y0360/a 6bHMFMOZ2tknbc5ZhA2UmGRJgFsj5yLUDeYGGpibNqSsVFRGmSk4ILHMIypi+k5h bjxFPtNIqN4XXcfaY24DMvKqvHyhVBA0AJBuOi2ZJh0/6jr8KZdZp1KfdM2X+3Sf 9L8mDxJFhHBGqzZSzAmxvveI0Ze9EBk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:12 2025 by rpki-client