$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: yB7dLMEt0UtciWlOXpvilaDsxJh21ZsF4r5r0XSY3EE= Subject key identifier: 99:51:8A:D5:9A:06:C4:1C:6E:29:86:F2:F8:9F:34:83:CC:7B:8F:24 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 03FF Signing time: Sat 23 Aug 2025 00:41:41 +0000 Manifest this update: Sat 23 Aug 2025 00:41:41 +0000 Manifest next update: Sat 30 Aug 2025 00:41:41 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: u0B+uGwlo72poe4CEm1yGULSNxvwnn2vn3APA9M1HQE=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Aug 23 00:41:41 2025 GMT Not After : Aug 30 00:41:41 2025 GMT Subject: CN=68a90e45-c45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:f8:8e:22:33:18:7e:a5:1b:41:77:4e:6f: 84:bc:c2:ae:15:af:b5:52:c1:56:96:27:73:43:99: 3a:ff:1b:be:5d:9f:ae:55:2b:72:5f:78:6b:a5:fd: 1e:68:93:aa:f7:aa:3d:3c:ad:6d:29:95:47:5d:ac: 4d:95:3a:c7:a7:9a:ed:d0:b8:46:65:98:ee:32:97: f0:2d:db:bd:8c:b9:a9:e1:61:bf:83:c8:b5:dc:b8: 63:a5:8b:97:f5:6d:01:08:60:0a:85:bb:93:78:0d: c3:7e:fd:4b:1b:46:cb:99:e1:34:a3:06:57:0e:8b: 98:a1:ad:41:02:e4:a6:03:ea:8c:95:9f:81:51:2a: a5:6d:b9:d7:37:49:33:e5:e9:75:21:a2:ab:0a:e1: c0:e9:58:bb:2e:b9:fe:58:d0:4b:7b:c4:d1:2f:a3: f2:ab:d6:52:a2:88:c8:dc:ac:92:cd:5c:95:cc:12: 53:4d:75:21:79:d3:e4:a8:ba:7d:0c:97:6f:16:bf: ef:a3:26:05:ad:eb:e1:0f:9d:6d:df:4e:7a:91:4e: 6e:5e:24:53:c5:1c:92:1c:db:19:28:f3:60:8a:05: f2:ce:69:9c:1c:cc:6a:a8:29:55:22:14:1a:15:a1: f2:e0:1a:76:42:ac:41:27:85:64:81:a2:77:ff:69: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:8A:D5:9A:06:C4:1C:6E:29:86:F2:F8:9F:34:83:CC:7B:8F:24 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:3b:50:6d:e9:21:f2:9a:19:53:19:de:de:50:f0:b9:9b: 6b:31:86:0e:77:d0:9a:9d:80:9a:aa:40:9d:0e:b6:13:d2:8e: 42:a0:30:e0:68:e9:c7:e4:f4:27:9d:8e:04:94:83:28:fa:3f: 04:0c:fa:59:fb:b9:b1:de:fc:28:57:89:2b:ed:01:e9:0f:43: 2e:bb:97:b5:70:ec:dc:89:33:89:5c:53:a8:25:17:48:60:c2: 7e:05:7a:a5:56:e0:99:17:f9:97:d3:78:1d:ef:ba:8e:b9:a7: 8d:50:ef:5e:15:4a:ed:21:66:8a:01:f5:84:2b:b3:64:74:e8: d1:6d:69:2e:05:ef:60:1c:16:08:2d:ad:79:30:a0:fc:10:4b: ad:90:f7:57:0f:0d:46:86:ff:0c:84:60:c6:1a:d6:d0:ce:fd: 23:1f:d0:03:22:7b:30:10:63:9a:cb:93:8f:f7:ee:20:8e:7b: 32:e8:4d:8c:3f:c3:3d:d3:a1:61:48:28:d1:9e:d3:2d:8d:fa: d7:2f:3f:74:5b:45:e5:df:a2:43:2d:ee:cd:35:fc:4a:90:94: 66:f5:97:9e:23:94:d7:35:aa:5d:c6:f2:94:db:f7:fd:29:46: 96:0b:de:ab:ca:88:ab:71:67:af:33:63:9c:ad:0e:af:8f:34: 89:af:19:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUwODIzMDA0MTQxWhcNMjUwODMwMDA0MTQxWjAYMRYwFAYD VQQDEw02OGE5MGU0NS1jNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Vz4jiIzGH6lG0F3Tm+EvMKuFa+1UsFWlidzQ5k6/xu+XZ+uVStyX3hrpf0e aJOq96o9PK1tKZVHXaxNlTrHp5rt0LhGZZjuMpfwLdu9jLmp4WG/g8i13LhjpYuX 9W0BCGAKhbuTeA3Dfv1LG0bLmeE0owZXDouYoa1BAuSmA+qMlZ+BUSqlbbnXN0kz 5el1IaKrCuHA6Vi7Lrn+WNBLe8TRL6Pyq9ZSoojI3KySzVyVzBJTTXUhedPkqLp9 DJdvFr/voyYFrevhD51t3056kU5uXiRTxRySHNsZKPNgigXyzmmcHMxqqClVIhQa FaHy4Bp2QqxBJ4VkgaJ3/2nEdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlRitWa BsQcbimG8vifNIPMe48kMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNvTtQbekh8poZUxne3lDwuZtrMYYOd9CanYCaqkCdDrYT0o5CoDDg aOnH5PQnnY4ElIMo+j8EDPpZ+7mx3vwoV4kr7QHpD0Muu5e1cOzciTOJXFOoJRdI YMJ+BXqlVuCZF/mX03gd77qOuaeNUO9eFUrtIWaKAfWEK7NkdOjRbWkuBe9gHBYI La15MKD8EEutkPdXDw1Ghv8MhGDGGtbQzv0jH9ADInswEGOay5OP9+4gjnsy6E2M P8M906FhSCjRntMtjfrXLz90W0Xl36JDLe7NNfxKkJRm9ZeeI5TXNapdxvKU2/f9 KUaWC96ryoircWevM2OcrQ6vjzSJrxmK -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:54 2025 by rpki-client