$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json) Hash identifier: rJb2yZK0dk5wISvfG7xGKO/N5UbHQti2YfFiVULc9Pk= Subject key identifier: C0:6D:55:2D:30:7A:AF:F5:DA:DC:E9:8A:39:99:97:F0:F1:F8:67:97 Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft Manifest number: 05DC Signing time: Fri 22 Aug 2025 23:15:21 +0000 Manifest this update: Fri 22 Aug 2025 23:15:20 +0000 Manifest next update: Fri 29 Aug 2025 23:15:20 +0000 Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: 1YRmevaAMs6FaZzqqcVpW4aYX97aBgy0UgpmOC5co30=) 2: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: ex+WlMFyVtiheikj5CcskwxC1bY5wSTJhW1aaMBV/nE=) 3: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: eH6QA4sZzgrBJC86LHr1zy/a4vVBHZoyZjexz7LGcMM=) 4: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: +Zl76cmx7AGsUQYqJ/t8IiGMCuy30Wvn2FjTFytnW7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Validity Not Before: Aug 22 23:15:20 2025 GMT Not After : Aug 29 23:15:20 2025 GMT Subject: CN=68a8fa08-628c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:5f:2e:14:9f:b7:b6:f1:ad:85:4a:5b:b2: bf:b4:4d:85:2c:d6:2e:fe:30:82:31:a2:e0:0c:f5: a4:44:ae:4a:6f:52:c5:e2:48:3c:46:e4:2e:d2:54: 57:af:a0:fa:c4:b7:40:21:77:98:39:92:ae:df:0d: 80:4d:7a:72:4c:7f:4d:d1:5e:d7:b6:2d:7d:08:a8: f4:db:df:64:45:90:fe:d6:0f:a4:3e:13:48:92:8c: 11:17:ef:d8:fa:2d:87:c3:8b:21:49:e5:23:29:c2: ce:6d:2f:eb:ad:9d:22:3e:09:0a:41:78:18:da:f1: 22:c8:e4:46:68:b5:c7:f0:d4:7c:8b:23:fd:a6:f2: 89:0b:0c:f5:e1:5c:a0:79:9f:f8:dd:ce:89:0c:61: 9a:e9:95:2f:e5:27:17:7f:19:4e:8e:c2:12:ef:b0: 27:65:16:d8:18:98:02:95:08:e5:a7:22:ff:76:fa: 20:9e:b3:11:47:28:52:cd:56:aa:7f:c8:b0:f0:1e: d4:b9:cb:98:83:0b:82:34:7e:88:dc:a4:15:bd:d8: 8b:d0:9c:56:f3:30:56:1f:47:61:05:9a:94:78:62: 2a:30:aa:f3:97:68:e1:06:9f:48:44:57:fd:1c:c0: 3c:b5:7b:88:37:c4:b7:31:ef:8f:fa:b4:ce:2d:26: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:55:2D:30:7A:AF:F5:DA:DC:E9:8A:39:99:97:F0:F1:F8:67:97 X509v3 Authority Key Identifier: keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a1:75:2f:94:00:a1:69:a9:d2:7d:c4:18:00:61:d4:b5:46: 3a:bb:81:de:ed:41:7e:0f:03:83:b5:7e:5b:4e:55:2a:a6:e3: 31:f4:82:61:34:ce:3e:28:12:17:40:fb:f8:58:68:e3:4a:65: 49:42:a4:27:3d:3b:79:db:bb:43:af:ce:4d:7d:e4:66:69:80: 66:3c:4b:59:25:c2:f4:01:b9:d0:17:b0:1b:e7:11:ee:2a:8f: 99:91:1c:f2:fa:0c:f8:9c:92:5f:fa:44:1e:ba:14:65:81:d3: 5a:6b:3e:0f:df:cd:ab:ad:ff:e7:3a:3a:78:89:a8:0f:1d:c8: 63:b7:6f:50:ff:69:90:73:87:8b:9f:76:9e:9c:16:de:1a:74: e5:37:fd:ee:25:c1:a8:2e:74:30:34:18:95:95:21:36:7f:5d: d5:02:95:0e:74:f3:65:13:f8:d4:36:9a:28:fb:a4:50:6c:58: 4d:40:f8:2b:11:b4:ce:80:89:b5:62:83:90:6f:d9:ab:e7:bd: f8:d7:4f:39:1a:47:97:81:c0:c5:be:8b:bc:88:48:0e:b1:ad: 24:24:8f:6a:93:a9:e9:e5:da:36:d6:32:d6:c2:f1:e0:b3:b9: 44:6d:e3:46:35:29:7b:b7:1e:87:10:88:80:80:63:a2:cb:09: 5c:ed:37:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE MTFERTE3ODcwHhcNMjUwODIyMjMxNTIwWhcNMjUwODI5MjMxNTIwWjAYMRYwFAYD VQQDEw02OGE4ZmEwOC02MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwptfLhSft7bxrYVKW7K/tE2FLNYu/jCCMaLgDPWkRK5Kb1LF4kg8RuQu0lRX r6D6xLdAIXeYOZKu3w2ATXpyTH9N0V7Xti19CKj0299kRZD+1g+kPhNIkowRF+/Y +i2Hw4shSeUjKcLObS/rrZ0iPgkKQXgY2vEiyORGaLXH8NR8iyP9pvKJCwz14Vyg eZ/43c6JDGGa6ZUv5ScXfxlOjsIS77AnZRbYGJgClQjlpyL/dvognrMRRyhSzVaq f8iw8B7UucuYgwuCNH6I3KQVvdiL0JxW8zBWH0dhBZqUeGIqMKrzl2jhBp9IRFf9 HMA8tXuIN8S3Me+P+rTOLSZKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBtVS0w eq/12tzpijmZl/Dx+GeXMB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGOS80RUMyQ0Q3NENGNEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRY OGVLZHdSbFJXRjNSSGVGNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPoXUvlAChaanSfcQYAGHUtUY6u4He7UF+DwODtX5bTlUqpuMx9IJh NM4+KBIXQPv4WGjjSmVJQqQnPTt527tDr85NfeRmaYBmPEtZJcL0AbnQF7Ab5xHu Ko+ZkRzy+gz4nJJf+kQeuhRlgdNaaz4P382rrf/nOjp4iagPHchjt29Q/2mQc4eL n3aenBbeGnTlN/3uJcGoLnQwNBiVlSE2f13VApUOdPNlE/jUNpoo+6RQbFhNQPgr EbTOgIm1YoOQb9mr57341085GkeXgcDFvou8iEgOsa0kJI9qk6np5do21jLWwvHg s7lEbeNGNSl7tx6HEIiAgGOiywlc7TeU -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:33 2025 by rpki-client