$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: 0IytHm8Jfqsezz3pWZ9BXzZltvbj7lr/GnSBrsmCkwc= Subject key identifier: AA:4A:FC:51:A1:47:AB:AC:38:28:80:E4:AC:66:CC:00:A1:9E:43:98 Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 03A5 Signing time: Sat 23 Aug 2025 01:01:53 +0000 Manifest this update: Sat 23 Aug 2025 01:01:52 +0000 Manifest next update: Sat 30 Aug 2025 01:01:52 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: /Z/E863xBoBys/4HMf3MfuOd7DhmxDfy5kVz7oOhDTA=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Aug 23 01:01:52 2025 GMT Not After : Aug 30 01:01:52 2025 GMT Subject: CN=68a91301-d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:2b:6f:54:c0:74:e2:19:9b:af:1c:ec:57: 59:9c:5d:85:b0:5b:9c:4f:ee:d4:5d:6b:1a:0e:20: 93:c6:88:6f:91:bf:c6:c8:22:8d:39:53:4b:dc:47: 88:a6:5d:4c:a2:07:cc:41:8b:2b:a7:b0:44:1e:bc: 1b:0c:db:a5:fd:13:15:8a:75:9e:4a:02:b6:19:87: bc:bb:bd:1a:77:55:77:37:6d:c5:4c:97:7e:15:44: 66:68:e7:15:f2:29:8a:54:6d:f4:3d:39:a5:55:79: 12:af:13:db:89:3e:0b:56:cb:75:6c:e1:e6:f8:69: 34:2a:9d:40:df:84:9d:ad:2b:f3:65:df:40:9a:bf: e1:a0:5f:ad:78:58:fe:0c:0e:65:cc:05:f2:97:3c: 28:bb:e3:31:bf:44:18:f4:68:c6:f0:e7:52:b4:79: de:50:b3:cf:22:e0:cd:dc:39:cb:29:1c:97:e1:01: d3:90:c1:3d:de:b2:ea:fa:21:39:a7:5a:af:1d:29: e4:8b:44:ea:71:76:ad:0c:3e:7f:42:03:21:32:a1: c4:28:0d:0d:99:9a:95:0b:14:72:82:9e:72:9e:44: d6:be:d0:15:5e:76:e0:d7:dd:eb:d8:18:f6:a3:30: 1b:9d:2d:d4:4f:fc:aa:e6:5f:63:59:17:4d:50:2d: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4A:FC:51:A1:47:AB:AC:38:28:80:E4:AC:66:CC:00:A1:9E:43:98 X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:92:95:a4:28:d3:96:6a:8b:d7:3e:25:26:29:83:33:11:83: 22:24:19:c0:96:ef:cb:24:9c:51:31:8e:6b:d7:9a:6f:fe:49: f1:7c:39:9d:83:e0:cd:fa:2b:e7:56:ad:eb:4a:21:5a:49:6e: 9c:72:86:49:2c:7f:f5:cc:ac:a0:7b:79:b1:70:e7:a2:49:75: 63:b4:ed:89:ee:2b:27:1d:72:4e:a0:ff:1e:9c:df:d6:db:0b: 09:af:ac:85:0e:f0:a1:32:27:cc:7c:f1:af:4c:8b:56:12:23: 83:9e:17:1e:b3:e3:59:c5:7e:67:f7:02:e8:cb:26:fd:4b:2f: ca:0f:31:61:db:c5:3d:a6:2a:64:81:d3:68:73:d5:6e:4c:88: db:1d:28:6a:e1:d5:06:1c:c0:9b:78:c0:99:8c:c6:83:d0:4c: 6a:06:98:09:45:59:db:92:83:64:22:b1:ed:e3:ad:d1:a1:51: 73:1c:de:79:e3:76:df:b8:94:6d:9c:f5:e4:7a:78:f8:18:74: 62:62:c8:7e:f9:31:3b:5f:b4:37:4a:89:03:1d:0c:4a:dd:56: 6c:ac:54:c5:f7:16:00:6d:27:be:db:1f:fd:cc:66:30:01:7c: 04:28:d6:7a:ae:f1:f1:95:ed:fc:39:f2:31:7a:87:39:c1:66: c3:d2:bf:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwODIzMDEwMTUyWhcNMjUwODMwMDEwMTUyWjAYMRYwFAYD VQQDEw02OGE5MTMwMS1kNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/Irb1TAdOIZm68c7FdZnF2FsFucT+7UXWsaDiCTxohvkb/GyCKNOVNL3EeI pl1MogfMQYsrp7BEHrwbDNul/RMVinWeSgK2GYe8u70ad1V3N23FTJd+FURmaOcV 8imKVG30PTmlVXkSrxPbiT4LVst1bOHm+Gk0Kp1A34SdrSvzZd9Amr/hoF+teFj+ DA5lzAXylzwou+Mxv0QY9GjG8OdStHneULPPIuDN3DnLKRyX4QHTkME93rLq+iE5 p1qvHSnki0TqcXatDD5/QgMhMqHEKA0NmZqVCxRygp5ynkTWvtAVXnbg193r2Bj2 ozAbnS3UT/yq5l9jWRdNUC1fjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpK/FGh R6usOCiA5KxmzAChnkOYMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClkpWkKNOWaovXPiUmKYMzEYMiJBnAlu/LJJxRMY5r15pv/knxfDmd g+DN+ivnVq3rSiFaSW6ccoZJLH/1zKyge3mxcOeiSXVjtO2J7isnHXJOoP8enN/W 2wsJr6yFDvChMifMfPGvTItWEiODnhces+NZxX5n9wLoyyb9Sy/KDzFh28U9pipk gdNoc9VuTIjbHShq4dUGHMCbeMCZjMaD0ExqBpgJRVnbkoNkIrHt463RoVFzHN55 43bfuJRtnPXkenj4GHRiYsh++TE7X7Q3SokDHQxK3VZsrFTF9xYAbSe+2x/9zGYw AXwEKNZ6rvHxle38OfIxeoc5wWbD0r8v -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:59 2025 by rpki-client