$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: 1iPtAgQMCGnnDTAvP3k35hx+PSQPvifjyly4MOHVPmY= Subject key identifier: B9:D9:EF:6F:8D:0B:89:28:1B:83:6B:40:6F:66:1E:19:BF:39:58:4C Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0A1F Signing time: Fri 22 Aug 2025 19:55:22 +0000 Manifest this update: Fri 22 Aug 2025 19:55:21 +0000 Manifest next update: Fri 29 Aug 2025 19:55:21 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: Nz/3BOm19HGoWcmlCua8aAE3glVVgTSJk+R43Tnh1TE=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: OnZAowiVuvOnwLvfgL0R8vIbc2U3axlj1bMkwdwdu4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Aug 22 19:55:21 2025 GMT Not After : Aug 29 19:55:21 2025 GMT Subject: CN=68a8cb2a-f08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:3e:7c:f6:90:4b:62:51:b3:c5:bb:09:7c: f7:3d:e7:34:80:31:26:06:3a:31:78:94:74:bc:95: 24:60:d0:43:24:00:2b:03:61:7a:8a:3c:c2:7e:18: 5a:bd:75:29:1e:06:48:dd:e4:3e:59:b4:06:40:35: 0c:ef:a3:55:7a:c5:2f:ac:42:24:82:45:39:c4:89: 23:11:37:c6:92:54:8d:c9:85:65:a4:a6:04:9f:c5: ab:a9:20:9f:79:41:e1:9d:31:c8:0b:52:05:62:01: 42:3c:d8:38:10:b7:c5:99:84:a9:c6:5b:e2:c8:27: ac:43:ff:98:5a:cb:3c:d3:5f:f5:b5:a0:0e:ae:a7: 12:45:80:bb:de:bd:09:60:8b:b6:74:c2:0e:08:db: 34:aa:83:19:fe:ec:b0:18:af:fd:d1:9c:8b:5c:8d: ee:ed:6f:fa:b9:63:27:89:b8:45:af:f2:41:4e:e1: 80:01:e6:4f:0b:ea:05:d9:97:ba:e5:46:f8:8a:48: cc:c6:68:00:18:30:26:92:1c:80:d2:8d:ee:22:be: a6:0d:b8:4e:b6:27:21:10:73:d3:ab:46:4d:54:30: cd:ff:6f:16:30:e4:5b:05:cc:e1:dd:5d:29:bd:a4: 0f:be:19:2c:da:87:16:6f:b8:90:26:19:82:7d:4d: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:EF:6F:8D:0B:89:28:1B:83:6B:40:6F:66:1E:19:BF:39:58:4C X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ff:f8:7b:99:0e:8f:c8:7d:29:d3:7c:e6:c9:52:f0:10:65: 43:e0:ff:c6:db:cd:55:6d:f5:16:21:d2:62:dd:ef:6b:c2:bb: 6a:a4:6d:17:e8:77:2b:64:7c:d7:13:c1:da:b1:b3:30:e0:0c: 3d:a4:e6:32:50:6e:6a:82:5c:2e:68:04:75:3f:81:22:a7:c8: bb:90:82:a5:ce:ff:28:40:8f:59:55:21:50:76:83:32:3a:9b: 61:aa:22:69:79:e3:22:f2:b3:c4:e8:1a:a7:24:13:c5:e9:07: 63:d8:d4:96:60:33:d9:9d:12:3f:ff:4a:95:e3:7b:f6:4e:0e: 99:99:a8:30:23:e4:db:92:06:8d:ca:e0:a4:76:93:4b:ba:83: 49:03:f7:13:63:e6:8b:1a:86:53:09:74:fd:c3:8e:07:0f:bd: 96:23:92:49:4a:36:89:69:21:ac:62:44:e5:1e:71:ec:0b:13: d0:2f:12:18:c3:f8:bc:d2:d2:07:de:c3:d7:17:0d:b9:06:4a: d6:39:cb:63:ee:d8:69:24:4d:c2:c2:a9:cc:63:fd:f8:c3:64: 0d:25:31:f5:8d:65:73:15:5d:37:c0:7e:4d:e1:8a:75:b4:d6: 87:ac:c3:89:f3:cc:b1:17:2e:f2:26:ad:be:48:10:93:a3:77: 20:9d:ee:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjUwODIyMTk1NTIxWhcNMjUwODI5MTk1NTIxWjAYMRYwFAYD VQQDEw02OGE4Y2IyYS1mMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzI+fPaQS2JRs8W7CXz3Pec0gDEmBjoxeJR0vJUkYNBDJAArA2F6ijzCfhha vXUpHgZI3eQ+WbQGQDUM76NVesUvrEIkgkU5xIkjETfGklSNyYVlpKYEn8WrqSCf eUHhnTHIC1IFYgFCPNg4ELfFmYSpxlviyCesQ/+YWss801/1taAOrqcSRYC73r0J YIu2dMIOCNs0qoMZ/uywGK/90ZyLXI3u7W/6uWMnibhFr/JBTuGAAeZPC+oF2Ze6 5Ub4ikjMxmgAGDAmkhyA0o3uIr6mDbhOtichEHPTq0ZNVDDN/28WMORbBczh3V0p vaQPvhks2ocWb7iQJhmCfU1eKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnZ72+N C4koG4NrQG9mHhm/OVhMMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh//h7mQ6PyH0p03zmyVLwEGVD4P/G281VbfUWIdJi3e9rwrtqpG0X 6HcrZHzXE8HasbMw4Aw9pOYyUG5qglwuaAR1P4Eip8i7kIKlzv8oQI9ZVSFQdoMy OpthqiJpeeMi8rPE6BqnJBPF6Qdj2NSWYDPZnRI//0qV43v2Tg6ZmagwI+TbkgaN yuCkdpNLuoNJA/cTY+aLGoZTCXT9w44HD72WI5JJSjaJaSGsYkTlHnHsCxPQLxIY w/i80tIH3sPXFw25BkrWOctj7thpJE3CwqnMY/34w2QNJTH1jWVzFV03wH5N4Yp1 tNaHrMOJ88yxFy7yJq2+SBCTo3cgne6k -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:02 2025 by rpki-client