$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: ezbZgwmx6St/xFv+OoPgCoUJW44wyTdIXoFfeicq0T8= Subject key identifier: 1F:C6:29:F3:F3:45:05:CE:BD:3D:47:99:79:A1:57:83:F2:5E:50:FB Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0359 Signing time: Sat 23 Aug 2025 01:13:57 +0000 Manifest this update: Sat 23 Aug 2025 01:13:57 +0000 Manifest next update: Sat 30 Aug 2025 01:13:57 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: U8PkzQ2AQswGHDaM6CcwRRvtvoJq5d/kTpX4WQ226VQ=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Aug 23 01:13:57 2025 GMT Not After : Aug 30 01:13:57 2025 GMT Subject: CN=68a915d5-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:5f:0b:75:5c:4f:18:c2:41:38:ca:8a:7d: 81:09:66:8a:a7:0b:0b:5a:14:61:65:e8:ad:7c:a6: 23:67:6f:34:ef:9a:79:84:43:b3:0e:60:d7:c3:e4: bc:f4:bc:05:b0:8f:b4:91:be:08:c1:45:0a:9c:f4: 2d:34:90:a0:b2:3c:5b:cf:92:c7:5b:65:a4:55:9e: 9e:9a:ee:cb:e0:0b:31:99:38:fb:4c:b0:e2:ce:7b: 86:a5:bb:b7:1d:d5:27:f8:64:b4:88:b6:62:2f:e2: af:81:c7:b5:6f:06:55:22:4b:4e:4d:d9:24:0b:0a: 29:cb:68:28:91:be:84:99:cd:2b:a6:1a:64:6f:6e: 86:ee:1b:eb:f6:6e:57:ea:8d:15:df:3d:41:fd:c1: f2:37:a5:23:4a:0d:f8:a9:92:57:17:79:37:4b:5e: 71:c6:92:76:47:0f:db:b7:41:98:a7:c0:e0:f8:e5: 50:de:28:31:6d:ac:0d:e5:30:29:69:f3:9d:57:7f: b3:d9:31:e6:60:7a:97:af:6b:9d:8a:f7:13:34:3c: 50:d5:63:04:fe:e4:b9:15:af:a6:5b:b9:47:4e:3e: ef:a4:69:87:77:55:bf:bd:5a:0d:ae:6e:cd:d5:28: e1:bb:04:36:1e:58:85:dc:5a:1c:70:b2:f7:4d:7b: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:29:F3:F3:45:05:CE:BD:3D:47:99:79:A1:57:83:F2:5E:50:FB X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ef:3d:06:05:d8:e7:3b:50:c1:94:68:86:87:a5:a0:db:21: 3b:33:90:d0:ce:f6:fb:88:6b:b6:78:b7:a1:bc:ef:f8:6a:47: 80:dc:56:6b:4c:bf:a9:1f:2d:fe:04:15:2c:06:46:28:e0:2c: 8d:a6:c8:26:d4:e1:e8:67:9f:76:9c:7d:53:d7:ec:ec:c0:2a: 26:bc:e2:3c:e5:61:0a:42:ca:ff:66:55:0e:94:fc:20:4e:c0: 95:30:9c:33:b5:d2:45:8b:4c:44:93:f2:e8:e3:d7:4f:30:8c: 55:a0:2b:c2:24:fe:49:97:3b:84:b7:50:3a:f9:54:c3:09:a0: 1b:1a:aa:dd:1c:67:53:29:69:0a:ce:09:22:18:0d:4d:29:b2: 47:b0:37:8b:56:53:96:6d:16:d4:b6:6d:5d:96:54:78:66:ad: fc:dc:ae:63:5d:6d:09:16:b7:b3:f7:b5:25:d0:71:fd:d6:9d: 1b:13:31:81:35:2b:08:fd:d0:fc:10:01:85:48:a2:05:2f:ba: d8:ed:2a:5e:fe:a9:fb:e5:f5:87:de:a3:44:ec:ec:98:d6:4f: e3:c4:13:12:d2:c8:bb:c5:e1:45:ed:b7:23:55:57:73:0a:de: a5:89:40:82:ea:65:f6:bf:6e:b3:02:7e:7f:39:5d:99:d4:51: 6f:cc:48:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwODIzMDExMzU3WhcNMjUwODMwMDExMzU3WjAYMRYwFAYD VQQDEw02OGE5MTVkNS03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4NfC3VcTxjCQTjKin2BCWaKpwsLWhRhZeitfKYjZ28075p5hEOzDmDXw+S8 9LwFsI+0kb4IwUUKnPQtNJCgsjxbz5LHW2WkVZ6emu7L4AsxmTj7TLDiznuGpbu3 HdUn+GS0iLZiL+Kvgce1bwZVIktOTdkkCwopy2gokb6Emc0rphpkb26G7hvr9m5X 6o0V3z1B/cHyN6UjSg34qZJXF3k3S15xxpJ2Rw/bt0GYp8Dg+OVQ3igxbawN5TAp afOdV3+z2THmYHqXr2udivcTNDxQ1WME/uS5Fa+mW7lHTj7vpGmHd1W/vVoNrm7N 1SjhuwQ2HliF3FoccLL3TXsuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/GKfPz RQXOvT1HmXmhV4PyXlD7MB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL7z0GBdjnO1DBlGiGh6Wg2yE7M5DQzvb7iGu2eLehvO/4akeA3FZr TL+pHy3+BBUsBkYo4CyNpsgm1OHoZ592nH1T1+zswComvOI85WEKQsr/ZlUOlPwg TsCVMJwztdJFi0xEk/Lo49dPMIxVoCvCJP5JlzuEt1A6+VTDCaAbGqrdHGdTKWkK zgkiGA1NKbJHsDeLVlOWbRbUtm1dllR4Zq383K5jXW0JFrez97Ul0HH91p0bEzGB NSsI/dD8EAGFSKIFL7rY7Spe/qn75fWH3qNE7OyY1k/jxBMS0si7xeFF7bcjVVdz Ct6liUCC6mX2v26zAn5/OV2Z1FFvzEhT -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:20 2025 by rpki-client