$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: f3b3KC3KXO6F8WECBKoJofzTuchC+zGKgiZr8hQzenY= Subject key identifier: 74:EB:EA:99:3A:3E:A0:DD:6A:AA:81:88:64:89:54:8D:F1:03:4D:CC Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0329 Signing time: Sat 23 Aug 2025 01:22:58 +0000 Manifest this update: Sat 23 Aug 2025 01:22:57 +0000 Manifest next update: Sat 30 Aug 2025 01:22:57 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: yPs5A5dYFgN5Pzu36ipWFbF2AopdIKgdN/A+s0m+gXY=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dymLbJxwcC+zoVbs1raLnxC102YzGfBqYVissSmUr50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Aug 23 01:22:57 2025 GMT Not After : Aug 30 01:22:57 2025 GMT Subject: CN=68a917f2-fed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:3c:0b:dd:2e:fb:35:b5:49:df:72:bc:6c: 77:0d:38:cb:8b:60:9f:81:3e:c2:52:e8:e3:05:be: 6a:75:27:b9:b3:45:04:c0:3d:59:4d:00:a3:fb:91: 9e:23:b1:28:7f:13:0f:49:6a:fc:14:90:64:61:2b: a3:06:e5:8c:5c:18:9f:15:91:e5:e3:5f:32:d3:80: 64:d5:9b:89:45:72:36:a0:c7:cd:78:a7:02:38:84: ce:b9:ec:1f:b7:07:bb:e3:42:04:cd:b5:ed:4b:ee: 57:4d:a5:89:d8:05:ce:a9:fb:7a:4f:ea:3a:14:e6: b8:88:5b:8f:a1:d8:27:db:4f:ea:53:69:c7:a3:b0: 21:bf:1a:44:85:2a:ff:d8:c0:78:8e:5b:8c:0e:2c: b5:de:51:ec:25:c0:cc:f1:a8:c9:36:ed:cc:2f:7a: f9:71:28:ab:49:50:7f:2a:bb:bb:ca:79:14:71:65: 58:06:39:76:de:20:02:fb:d1:b7:65:5e:b2:3e:01: 64:e5:5b:86:0a:98:78:8e:1e:34:be:69:70:30:5c: 4e:3a:e0:b7:73:0e:2c:20:f1:cf:78:67:b0:b0:4e: df:70:e6:c2:1e:41:f6:6c:e3:53:9d:ad:0b:8d:9d: 5f:0d:1e:21:6d:d9:77:c6:3e:ae:57:4b:f7:3d:c8: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EB:EA:99:3A:3E:A0:DD:6A:AA:81:88:64:89:54:8D:F1:03:4D:CC X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9a:03:2c:b5:56:22:a5:e5:b7:9a:39:be:5e:cd:f3:24:bf: bb:f1:c9:47:db:df:70:40:cd:f4:51:f1:af:7e:c9:4c:19:ab: 4f:23:6d:8a:0c:70:fc:12:fd:13:eb:d3:0d:5f:04:39:fb:d3: 51:f5:f9:67:97:0a:4f:b5:c8:ad:9c:e1:95:21:74:09:53:91: 59:b9:c0:81:e5:3c:4d:42:36:92:b0:b5:c4:57:b8:34:f7:d4: 9a:3f:bc:c5:cf:4c:3e:91:22:8f:bb:6e:12:54:59:81:0e:34: 08:b7:68:16:70:11:fe:0c:6a:54:40:37:93:44:b7:b2:65:e9: 86:51:80:6b:5d:58:ba:4d:df:b3:cb:46:53:62:0d:d2:e1:21: 46:c9:b0:f2:d8:fd:ee:7c:4e:dc:22:39:4d:c1:57:1d:a8:5d: 40:31:6b:52:24:64:41:59:27:cb:2e:db:55:80:8a:03:07:85: 01:64:c9:3d:b1:be:5d:5a:34:45:bb:84:83:4c:f7:03:47:da: 65:a2:91:d5:4c:ab:97:70:3d:13:88:02:9e:cf:19:44:3a:ca: ff:7f:b3:e7:5d:64:46:0b:97:56:76:40:e4:55:8f:7f:8c:1f: 13:8a:4d:b7:70:e7:a3:55:d3:37:fa:f0:30:8b:0e:a7:bf:70: c3:46:6d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjUwODIzMDEyMjU3WhcNMjUwODMwMDEyMjU3WjAYMRYwFAYD VQQDEw02OGE5MTdmMi1mZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4w8C90u+zW1Sd9yvGx3DTjLi2CfgT7CUujjBb5qdSe5s0UEwD1ZTQCj+5Ge I7EofxMPSWr8FJBkYSujBuWMXBifFZHl418y04Bk1ZuJRXI2oMfNeKcCOITOuewf twe740IEzbXtS+5XTaWJ2AXOqft6T+o6FOa4iFuPodgn20/qU2nHo7AhvxpEhSr/ 2MB4jluMDiy13lHsJcDM8ajJNu3ML3r5cSirSVB/Kru7ynkUcWVYBjl23iAC+9G3 ZV6yPgFk5VuGCph4jh40vmlwMFxOOuC3cw4sIPHPeGewsE7fcObCHkH2bONTna0L jZ1fDR4hbdl3xj6uV0v3PchfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTr6pk6 PqDdaqqBiGSJVI3xA03MMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMmgMstVYipeW3mjm+Xs3zJL+78clH299wQM30UfGvfslMGatPI22K DHD8Ev0T69MNXwQ5+9NR9flnlwpPtcitnOGVIXQJU5FZucCB5TxNQjaSsLXEV7g0 99SaP7zFz0w+kSKPu24SVFmBDjQIt2gWcBH+DGpUQDeTRLeyZemGUYBrXVi6Td+z y0ZTYg3S4SFGybDy2P3ufE7cIjlNwVcdqF1AMWtSJGRBWSfLLttVgIoDB4UBZMk9 sb5dWjRFu4SDTPcDR9plopHVTKuXcD0TiAKezxlEOsr/f7PnXWRGC5dWdkDkVY9/ jB8Tik23cOejVdM3+vAwiw6nv3DDRm3d -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:00 2025 by rpki-client