$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json) Hash identifier: hzqUybdYHLIYPqmsIfXaedBaMtp+4hIdZPF/LFj4fX8= Subject key identifier: 93:80:B5:99:8A:B6:78:80:1E:69:53:4C:B5:3D:E9:A1:B3:60:85:CD Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft Manifest number: 021A Signing time: Sat 23 Aug 2025 02:12:31 +0000 Manifest this update: Sat 23 Aug 2025 02:12:31 +0000 Manifest next update: Sat 30 Aug 2025 02:12:31 +0000 Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: DYjt4apH1D7gfVzCQkTd69Cn0Wb96yeD2qriyHbqWlo=) 2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: 3aaeEi1YrA3uSceTUOZGuJZHBHy8WbpEjF+B/7Isrys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Validity Not Before: Aug 23 02:12:31 2025 GMT Not After : Aug 30 02:12:31 2025 GMT Subject: CN=68a9238f-fbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:6f:47:08:53:6d:a8:10:fa:50:53:5a:65: 4a:0f:2a:51:9e:55:cd:e8:fd:b0:a9:8b:11:28:4d: 19:c1:71:30:b2:bd:39:48:67:38:ae:fe:64:80:b9: be:0d:3e:72:5f:96:a9:e6:70:eb:2e:55:2f:32:73: e9:4c:0f:41:97:c1:ac:3e:d6:bd:1c:df:46:9b:d7: 5d:19:30:8a:6c:21:46:c4:41:66:39:60:0a:8f:dd: 43:a6:3d:50:f7:e4:7a:83:1a:fa:52:bf:d3:f7:8a: 18:6b:0a:cb:3b:40:8e:e4:06:6b:53:47:d2:f9:ea: c4:69:fe:43:1d:b0:37:f3:b4:d1:f9:80:de:43:7c: a8:03:02:9c:76:e3:c7:b5:e4:6e:f6:5a:b2:09:52: d4:e1:bb:be:90:1b:2b:98:b6:17:83:de:df:4c:30: c0:92:26:10:66:76:56:8b:18:03:a3:01:f3:d2:15: 41:50:6e:d0:17:ad:16:90:0a:5c:f1:d2:8a:7b:fd: ec:85:53:53:d5:e6:85:59:95:7e:ff:53:d3:3c:7e: df:98:a5:56:4e:2d:d0:5a:52:31:c3:23:5e:dd:0f: e1:f6:ff:d1:fe:7e:50:83:ec:09:96:d5:14:73:57: 49:c9:d4:9c:5d:50:5a:03:91:4f:f5:6d:f2:10:66: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:B5:99:8A:B6:78:80:1E:69:53:4C:B5:3D:E9:A1:B3:60:85:CD X509v3 Authority Key Identifier: keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:86:47:1b:da:83:f7:e3:73:ca:ec:d2:af:b1:dd:cb:84:b5: d7:e4:c7:d8:ce:c2:b0:26:ef:78:6e:ac:e2:71:d9:f6:f2:b3: ce:e5:30:92:76:97:eb:9a:68:8d:8f:f2:7f:c5:e8:9c:f0:2a: 5f:28:64:df:4f:64:70:6f:66:8a:55:4a:60:b2:59:67:e6:8c: 58:2f:e2:f3:cf:a2:ce:0d:f8:d1:f2:b2:f0:29:5a:f9:87:18: df:c2:8e:2a:0f:df:39:68:2f:83:81:fc:ff:f2:b6:67:83:a9: 01:4f:2a:55:b4:ba:2e:8d:d9:72:e0:95:c1:1d:99:72:b8:7a: 6d:ab:0d:1c:22:f4:bd:c7:b2:e8:2d:e4:a8:95:38:d5:a0:4f: b8:1a:9b:4b:63:ff:fd:f8:a3:54:8a:72:fc:ed:cb:68:9f:0e: 61:0f:81:a4:1b:2b:af:2f:da:c9:be:74:b8:3f:b7:0b:8e:35: 07:94:af:84:f7:2c:fd:6a:59:bd:dc:c8:71:07:b2:7c:26:a1: 19:02:d5:65:3e:ea:5b:ee:a6:76:33:d4:89:61:62:32:5b:4a: 02:7b:90:53:04:2c:28:96:a5:3a:1d:ab:68:15:f0:49:9f:ef: fd:83:dc:8d:c0:bb:cd:1e:2d:3d:e1:ee:e4:83:03:66:80:5d: fd:25:9d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMjQxMTAvBgNVBAUTKDcwMzZBMjAwNzdGRjg3RkVGQTM0MDBEN0Y5MDc2QjdF MTk4MzhCMkUwHhcNMjUwODIzMDIxMjMxWhcNMjUwODMwMDIxMjMxWjAYMRYwFAYD VQQDEw02OGE5MjM4Zi1mYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JdvRwhTbagQ+lBTWmVKDypRnlXN6P2wqYsRKE0ZwXEwsr05SGc4rv5kgLm+ DT5yX5ap5nDrLlUvMnPpTA9Bl8GsPta9HN9Gm9ddGTCKbCFGxEFmOWAKj91Dpj1Q 9+R6gxr6Ur/T94oYawrLO0CO5AZrU0fS+erEaf5DHbA387TR+YDeQ3yoAwKcduPH teRu9lqyCVLU4bu+kBsrmLYXg97fTDDAkiYQZnZWixgDowHz0hVBUG7QF60WkApc 8dKKe/3shVNT1eaFWZV+/1PTPH7fmKVWTi3QWlIxwyNe3Q/h9v/R/n5Qg+wJltUU c1dJydScXVBaA5FP9W3yEGYntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOAtZmK tniAHmlTTLU96aGzYIXNMB8GA1UdIwQYMBaAFHA2ogB3/4f++jQA1/kHa34Zg4su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEyNC81NjU1REE3NjQ5 RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hfNzZOQURYLVFkcmZobURp eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEYWlBSGZfaF83Nk5BRFgtUWRyZmhtRGl5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEyNC81NjU1REE3NjQ5RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hf NzZOQURYLVFkcmZobURpeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphkcb2oP343PK7NKvsd3LhLXX5MfYzsKwJu94bqzicdn28rPO5TCS dpfrmmiNj/J/xeic8CpfKGTfT2Rwb2aKVUpgslln5oxYL+Lzz6LODfjR8rLwKVr5 hxjfwo4qD985aC+Dgfz/8rZng6kBTypVtLoujdly4JXBHZlyuHptqw0cIvS9x7Lo LeSolTjVoE+4GptLY//9+KNUinL87ctonw5hD4GkGyuvL9rJvnS4P7cLjjUHlK+E 9yz9alm93MhxB7J8JqEZAtVlPupb7qZ2M9SJYWIyW0oCe5BTBCwolqU6HatoFfBJ n+/9g9yNwLvNHi094e7kgwNmgF39JZ3z -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:42 2025 by rpki-client