$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: 0s+whIvXfBz9GQzU5N0foKzdJo5VDny87W8nRitwJBw= Subject key identifier: 13:88:1C:03:9E:D0:59:0F:AA:EE:D5:F1:52:FD:66:D0:5B:37:03:D8 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0B09 Signing time: Wed 02 Jul 2025 19:48:35 +0000 Manifest this update: Wed 02 Jul 2025 19:48:34 +0000 Manifest next update: Wed 09 Jul 2025 19:48:34 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: dDzh0m9qMq9LeOxtxQeb2h4FzptFeUxnn3iT0Ezh/U8=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) 7: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: d4UXXCMBLzbA5F5CBh6+/uxfNEdacqbjKjEwNBL2vSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Jul 2 19:48:34 2025 GMT Not After : Jul 9 19:48:34 2025 GMT Subject: CN=68658d12-50ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:c4:1a:db:5e:3f:b2:7c:a3:66:7f:cf:e7: fe:cc:86:1d:09:65:b7:a3:d2:ea:00:94:82:cf:28: c7:bd:9e:c4:4b:f1:7c:e2:93:11:14:39:a6:85:df: dc:92:74:9f:c2:b8:db:82:77:32:99:ce:86:64:f4: c8:66:b3:12:5e:0e:d9:7c:1e:40:91:06:df:85:12: 95:c1:f0:fd:3d:38:25:ea:c6:fa:eb:60:18:7b:4d: 75:83:1e:33:3d:4b:96:c9:e9:f3:2a:99:09:d7:8d: dc:f3:90:1f:97:a8:7e:3d:77:f1:30:1e:13:a0:ac: 0e:f0:f1:5f:f7:f1:7b:0a:17:d7:f5:21:1c:fb:8e: cf:21:a4:25:21:81:a4:01:7c:b5:08:9d:93:7a:19: 8c:a6:dc:45:81:9d:e1:76:f0:39:2f:49:61:30:bb: 79:74:ad:40:bc:f4:5b:29:ac:05:cc:6d:e8:bc:bf: a0:a2:ea:6d:59:71:38:9e:ef:7b:2b:c3:5c:fe:b8: e9:ab:08:5c:80:ca:c6:5a:61:fd:89:47:48:29:c4: 27:33:9d:70:f4:a2:77:6e:fd:5f:c7:73:21:05:8b: 2f:99:00:33:3b:9a:b6:b7:33:b4:7c:70:1e:b7:05: 4c:84:0d:c9:3b:a6:49:9d:81:a1:32:71:1e:db:34: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:1C:03:9E:D0:59:0F:AA:EE:D5:F1:52:FD:66:D0:5B:37:03:D8 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4e:f0:20:89:91:47:8a:63:f6:99:71:2c:50:35:81:d0:c4: 17:07:33:8f:09:43:ad:7e:aa:10:60:93:15:33:33:a3:89:20: d2:e7:af:d2:ca:68:4f:74:ed:a7:fd:8c:0a:18:2b:1b:6a:c5: df:3c:de:1f:5d:13:30:b4:0b:25:71:34:4a:f6:44:cf:8e:57: a5:73:01:77:f6:03:26:47:d2:8d:8e:99:28:cf:00:fd:c6:c2: c6:99:23:4b:58:b7:f8:33:1c:85:2e:e7:a8:e1:a3:d6:97:63: 0f:b5:03:a8:06:b0:ed:d2:ba:e0:dc:4b:fe:a4:fb:54:4f:0b: d8:f7:1e:16:6c:69:c2:6b:52:e2:38:e8:70:0f:d2:d4:d3:99: 37:df:2b:46:69:50:c9:19:fb:cc:af:29:e7:d7:d3:05:4a:e8: 53:15:8c:b1:0e:6c:e7:fe:15:ad:56:82:76:a5:c9:56:ca:1c: 4d:38:ee:27:c4:a3:9b:76:e0:93:15:ba:4c:4f:72:3a:42:aa: cf:42:27:54:94:15:ed:cb:fa:3c:e1:f4:cc:79:0e:9b:12:49: 89:4f:bf:5d:9d:9e:cc:64:12:b2:77:fa:4e:5c:c6:03:c4:64: 33:e3:c6:36:15:35:31:d7:7e:70:2b:77:3b:65:87:21:9c:6a: 0f:aa:99:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNzAyMTk0ODM0WhcNMjUwNzA5MTk0ODM0WjAYMRYwFAYD VQQDEw02ODY1OGQxMi01MGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1fEGtteP7J8o2Z/z+f+zIYdCWW3o9LqAJSCzyjHvZ7ES/F84pMRFDmmhd/c knSfwrjbgncymc6GZPTIZrMSXg7ZfB5AkQbfhRKVwfD9PTgl6sb662AYe011gx4z PUuWyenzKpkJ143c85Afl6h+PXfxMB4ToKwO8PFf9/F7ChfX9SEc+47PIaQlIYGk AXy1CJ2TehmMptxFgZ3hdvA5L0lhMLt5dK1AvPRbKawFzG3ovL+gouptWXE4nu97 K8Nc/rjpqwhcgMrGWmH9iUdIKcQnM51w9KJ3bv1fx3MhBYsvmQAzO5q2tzO0fHAe twVMhA3JO6ZJnYGhMnEe2zQMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOIHAOe 0FkPqu7V8VL9ZtBbNwPYMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXTvAgiZFHimP2mXEsUDWB0MQXBzOPCUOtfqoQYJMVMzOjiSDS56/S ymhPdO2n/YwKGCsbasXfPN4fXRMwtAslcTRK9kTPjlelcwF39gMmR9KNjpkozwD9 xsLGmSNLWLf4MxyFLueo4aPWl2MPtQOoBrDt0rrg3Ev+pPtUTwvY9x4WbGnCa1Li OOhwD9LU05k33ytGaVDJGfvMrynn19MFSuhTFYyxDmzn/hWtVoJ2pclWyhxNOO4n xKObduCTFbpMT3I6QqrPQidUlBXty/o84fTMeQ6bEkmJT79dnZ7MZBKyd/pOXMYD xGQz48Y2FTUx135wK3c7ZYchnGoPqpkO -----END CERTIFICATE-----Generated at Thu Jul 3 05:38:35 2025 by rpki-client