$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: tGirF0Cs+KOjq+P1T502UKNlH4VRk2A4OMBmldsXRFE= Subject key identifier: 42:98:1F:F7:0B:38:B5:72:39:C2:32:E4:84:E7:25:DA:CF:0E:75:A6 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0B34 Signing time: Fri 22 Aug 2025 19:40:06 +0000 Manifest this update: Fri 22 Aug 2025 19:40:05 +0000 Manifest next update: Fri 29 Aug 2025 19:40:05 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: M5fpjZN6ONkpQSyR4ddZNfnx8c4L8URMKeaiCUnxXkc=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: 1uKvVpgCcQqroLN7AwMHaqVoCWybjV0K8HdokVEjChQ=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Aug 22 19:40:05 2025 GMT Not After : Aug 29 19:40:05 2025 GMT Subject: CN=68a8c796-6611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:95:09:a6:da:ab:a2:10:4f:f0:14:53:41: 13:cb:2b:e1:53:94:56:fc:d7:a3:7f:88:ed:c9:bc: f5:f1:57:69:29:7f:4a:51:31:93:20:69:2b:52:b2: cb:8e:2b:dd:18:58:b2:01:29:7a:c1:2a:44:60:6a: e3:4f:71:bb:21:ec:ff:2f:0e:8e:8c:75:7c:e1:7f: 8c:05:25:23:d4:0d:b1:be:02:8e:6e:d4:4a:67:f4: 12:00:be:9c:27:a1:68:f8:97:5d:54:5e:9f:aa:43: 29:a6:24:f9:52:af:85:8c:c1:70:b4:07:6d:3f:2f: 53:74:f5:0c:22:75:c9:59:d2:2e:84:4c:5b:c7:64: 77:13:37:03:41:a3:f8:f6:22:7e:15:3e:d9:1a:30: df:0f:d9:54:57:2a:64:75:e3:7a:38:12:54:42:1e: 31:46:2b:59:ad:cd:73:66:a5:d0:e8:69:44:7a:1c: b3:db:5c:b5:0d:39:14:3b:0f:7b:91:a7:ad:37:11: 3f:57:79:e2:55:6a:8c:36:7f:10:ed:37:04:cf:37: 91:3c:b8:30:77:69:ee:dc:e9:a9:16:bd:3c:f8:57: 23:de:a4:07:d5:0d:97:54:9e:9d:a3:74:04:3a:d9: e7:b3:eb:64:b7:f9:43:59:2f:ce:ed:24:12:86:35: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:1F:F7:0B:38:B5:72:39:C2:32:E4:84:E7:25:DA:CF:0E:75:A6 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:1c:8c:a6:42:f0:0e:1f:3f:94:0e:a2:11:00:c8:ef:ef: 4b:6b:e3:d0:1b:a5:d3:2d:f7:93:0a:b5:59:ee:06:d9:34:9f: f8:4d:b0:ad:9e:d4:f6:51:a6:68:d9:56:84:47:6f:93:2b:96: 43:df:b2:f3:85:0d:69:7a:40:68:27:ed:da:8b:b6:2e:da:ea: 96:53:26:0f:8d:53:d0:54:62:58:c9:b0:d0:57:bd:20:6d:70: b2:c2:57:70:74:ce:88:d0:a1:66:34:6b:76:2e:6a:a3:bb:6f: 0d:73:b4:77:df:7c:f3:5e:b4:85:40:b6:60:92:81:e7:a9:41: 45:92:26:8c:44:18:98:c6:01:61:8f:5f:f7:14:6a:c3:ee:b6: 0f:3e:40:43:07:d8:e0:45:69:8c:41:cd:8d:6d:df:1f:ab:6b: 79:b2:d4:02:b2:b7:8f:a8:d5:54:d7:1f:25:fb:8e:d2:77:b3: 57:3e:6a:3f:72:57:b1:30:4e:76:82:5a:d9:0b:56:fa:e6:61: c5:06:65:5d:65:c5:19:47:c9:4d:de:62:e2:33:aa:e9:90:bd: f2:d7:42:a2:27:e8:13:14:60:84:64:e7:a0:49:ce:a9:0e:41: c6:21:81:70:80:71:48:80:62:12:05:5f:da:c1:cc:b8:4a:14: 6c:de:03:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwODIyMTk0MDA1WhcNMjUwODI5MTk0MDA1WjAYMRYwFAYD VQQDEw02OGE4Yzc5Ni02NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvACVCabaq6IQT/AUU0ETyyvhU5RW/Nejf4jtybz18VdpKX9KUTGTIGkrUrLL jivdGFiyASl6wSpEYGrjT3G7Iez/Lw6OjHV84X+MBSUj1A2xvgKObtRKZ/QSAL6c J6Fo+JddVF6fqkMppiT5Uq+FjMFwtAdtPy9TdPUMInXJWdIuhExbx2R3EzcDQaP4 9iJ+FT7ZGjDfD9lUVypkdeN6OBJUQh4xRitZrc1zZqXQ6GlEehyz21y1DTkUOw97 kaetNxE/V3niVWqMNn8Q7TcEzzeRPLgwd2nu3OmpFr08+Fcj3qQH1Q2XVJ6do3QE Otnns+tkt/lDWS/O7SQShjWQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKYH/cL OLVyOcIy5ITnJdrPDnWmMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2iByMpkLwDh8/lA6iEQDI7+9La+PQG6XTLfeTCrVZ7gbZNJ/4TbCt ntT2UaZo2VaER2+TK5ZD37LzhQ1pekBoJ+3ai7Yu2uqWUyYPjVPQVGJYybDQV70g bXCywldwdM6I0KFmNGt2Lmqju28Nc7R333zzXrSFQLZgkoHnqUFFkiaMRBiYxgFh j1/3FGrD7rYPPkBDB9jgRWmMQc2Nbd8fq2t5stQCsrePqNVU1x8l+47Sd7NXPmo/ clexME52glrZC1b65mHFBmVdZcUZR8lN3mLiM6rpkL3y10KiJ+gTFGCEZOegSc6p DkHGIYFwgHFIgGISBV/awcy4ShRs3gMY -----END CERTIFICATE-----Generated at Sat Aug 23 22:17:41 2025 by rpki-client