$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft File: DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json) Hash identifier: 6YfsKogk83BRxwa21s282dLRryk50OKX2Lblc5oYr6Y= Subject key identifier: 8E:97:73:20:8C:CD:6B:49:E5:9B:90:E6:96:E5:D9:6D:CA:42:E2:E5 Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA Certificate issuer: /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 04:55:41 +0000 Manifest this update: Sat 23 Aug 2025 04:55:41 +0000 Manifest next update: Sat 30 Aug 2025 04:55:41 +0000 Files and hashes: 1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: 1bVGvSs7jzYwwlAA8ZnfaeqdUSGKX/p9+WSAyLWsrHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Validity Not Before: Aug 23 04:55:41 2025 GMT Not After : Aug 30 04:55:41 2025 GMT Subject: CN=68a949cd-8b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:38:49:63:15:3a:ce:b9:a0:41:3b:05:77: bc:16:3c:63:63:bd:82:40:08:6d:45:2f:55:c6:5f: ef:a5:2a:be:b3:57:6e:4f:11:af:1a:58:fd:08:ea: 44:66:af:72:62:d3:af:95:e6:7c:8d:7e:b1:0d:33: ed:67:1d:d6:d1:9c:34:5a:08:43:fc:db:30:21:51: a7:96:2e:88:97:2a:a6:55:06:61:25:b3:a5:5b:83: 03:ba:63:c7:e7:dd:a5:85:bf:c9:2f:c4:a1:cc:7f: 00:db:80:7e:f8:ca:eb:e1:7a:ae:79:5e:35:c2:98: 87:07:08:6d:64:e1:65:ac:a3:47:ca:e7:ce:08:a4: c6:73:ab:e8:15:68:f6:dc:cb:9a:a7:c9:90:30:7a: 7a:b3:70:7e:63:b9:1c:fd:c4:36:1f:8e:74:59:91: 53:c2:c3:f9:5b:93:2c:7c:ef:97:ca:34:69:a1:ca: 43:68:2c:20:a1:9a:8f:0d:29:40:3b:7a:5d:65:af: fe:1f:12:9f:ee:78:cf:a9:49:19:b2:46:27:f1:f5: 39:77:bd:77:73:c1:ac:fa:81:64:98:26:b0:04:97: 45:5d:a0:8b:8e:9f:0f:34:4d:07:ae:f6:12:6a:a2: 00:49:44:cd:1a:ca:0f:f2:9d:60:cc:f1:8f:cb:81: c1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:73:20:8C:CD:6B:49:E5:9B:90:E6:96:E5:D9:6D:CA:42:E2:E5 X509v3 Authority Key Identifier: keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:a9:63:c9:d5:cb:9f:ba:78:f4:f2:4a:f0:72:d3:48:34: 5c:fb:25:19:af:be:56:cb:83:43:a9:dd:ac:b9:e1:5d:6e:9f: c3:52:a1:cb:5a:38:b6:d8:d5:15:1d:06:cb:ee:a6:9e:c8:64: e1:e1:59:3b:b7:ba:0b:1c:d6:ef:dc:b2:47:6e:cd:b0:8c:9f: 80:27:b0:56:78:77:40:ba:ad:fb:2d:93:a5:c1:ee:07:72:00: e7:87:31:fb:11:eb:77:b6:db:b4:08:48:ce:37:62:df:a5:22: ef:19:3e:7e:eb:5e:4f:12:62:2e:d8:1a:93:a2:51:f0:30:6b: e3:04:91:e9:14:d7:71:02:46:dc:97:99:3d:b3:07:45:1e:06: 9e:cc:78:db:74:5f:67:63:4e:77:41:88:e7:8b:43:81:5e:61: e1:46:6b:4a:99:46:5d:b0:7b:5c:25:77:f2:90:0a:54:e8:10: f1:d1:a1:bd:ba:4e:c2:c2:b6:68:72:f5:cd:a6:ad:28:eb:e2: 3c:93:c9:35:e3:df:a2:6c:73:9f:aa:b6:3e:1a:78:d6:f2:bb: c2:c6:69:fa:c2:0d:cd:8b:e0:f7:d2:b0:c9:dc:72:0e:c2:95: 0b:06:70:b6:b4:dd:93:cb:65:a0:35:e7:6b:f1:fb:75:00:a9: 28:33:6d:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDBFNjI2QkVCM0Q0MjA1OTMzMzNCRkI0Qzg1ODMwN0E4 OTlFQTdEQ0EwHhcNMjUwODIzMDQ1NTQxWhcNMjUwODMwMDQ1NTQxWjAYMRYwFAYD VQQDEw02OGE5NDljZC04YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0M4SWMVOs65oEE7BXe8FjxjY72CQAhtRS9Vxl/vpSq+s1duTxGvGlj9COpE Zq9yYtOvleZ8jX6xDTPtZx3W0Zw0WghD/NswIVGnli6IlyqmVQZhJbOlW4MDumPH 592lhb/JL8ShzH8A24B++Mrr4XqueV41wpiHBwhtZOFlrKNHyufOCKTGc6voFWj2 3Muap8mQMHp6s3B+Y7kc/cQ2H450WZFTwsP5W5MsfO+XyjRpocpDaCwgoZqPDSlA O3pdZa/+HxKf7njPqUkZskYn8fU5d713c8Gs+oFkmCawBJdFXaCLjp8PNE0HrvYS aqIASUTNGsoP8p1gzPGPy4HB0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6XcyCM zWtJ5ZuQ5pbl2W3KQuLlMB8GA1UdIwQYMBaAFA5ia+s9QgWTMzv7TIWDB6iZ6n3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9DNThDRjg0Q0NB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0JaTXpPX3RNaFlNSHFKbnFm Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtSnI2ejFDQlpNek9fdE1oWU1IcUpucWZjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTgxQi9DNThDRjg0Q0NBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0Ja TXpPX3RNaFlNSHFKbnFmY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg5aljydXLn7p49PJK8HLTSDRc+yUZr75Wy4NDqd2sueFdbp/DUqHL Wji22NUVHQbL7qaeyGTh4Vk7t7oLHNbv3LJHbs2wjJ+AJ7BWeHdAuq37LZOlwe4H cgDnhzH7Eet3ttu0CEjON2LfpSLvGT5+615PEmIu2BqTolHwMGvjBJHpFNdxAkbc l5k9swdFHgaezHjbdF9nY053QYjni0OBXmHhRmtKmUZdsHtcJXfykApU6BDx0aG9 uk7CwrZocvXNpq0o6+I8k8k149+ibHOfqrY+GnjW8rvCxmn6wg3Ni+D30rDJ3HIO wpULBnC2tN2Ty2WgNedr8ft1AKkoM23r -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:21 2025 by rpki-client