$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json) Hash identifier: 8yUkJgqwRvDE2SGixLClTQLDQ9PEwn/WhLGiGGicoY8= Subject key identifier: 5B:97:7A:52:A3:FA:88:CB:CF:2F:66:2D:6E:1D:71:15:52:9A:6E:45 Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft Manifest number: 9B Signing time: Tue 01 Jul 2025 07:05:24 +0000 Manifest this update: Tue 01 Jul 2025 07:05:23 +0000 Manifest next update: Tue 08 Jul 2025 07:05:23 +0000 Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: KkYcqSGiZGsmJrqccomsZaWzzVMlpnh4IcO7iFI3xhA=) 2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=) 3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Validity Not Before: Jul 1 07:05:23 2025 GMT Not After : Jul 8 07:05:23 2025 GMT Subject: CN=686388b4-f9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:d9:10:86:3f:24:b8:ad:a6:d1:8e:d1:62: af:c9:db:c9:4e:42:d3:48:00:29:fc:f6:e0:f0:62: d4:13:d8:3d:e5:64:35:d4:b5:be:30:6c:aa:16:d9: 81:83:9e:66:30:fa:ef:22:71:8a:85:42:2f:01:ce: dd:2b:e8:fe:1b:56:16:5b:ce:a3:d8:fd:92:47:70: 1f:2a:cc:c7:ea:83:bd:8c:4b:e9:a4:f1:51:47:c7: 04:51:1d:52:12:76:a1:2a:e6:f2:37:9e:4a:35:aa: 76:f2:72:d4:18:2c:36:48:1a:04:a1:0f:12:d8:a9: 08:bc:4a:24:00:34:f9:03:3b:d9:bb:cd:44:37:e3: cd:e2:32:ad:cb:52:68:2c:36:ae:70:cc:15:35:54: 53:68:c5:95:f6:7c:dd:e3:bb:15:93:4a:4a:be:e8: 19:99:83:28:95:ba:0a:71:ba:8a:3f:2c:c0:64:ed: 70:07:93:37:a5:8c:a4:0c:b3:e3:db:ec:2a:6e:27: cc:2b:ad:03:7b:63:95:cd:46:e0:51:cf:0e:c3:e0: d7:9f:20:2d:1f:64:e8:34:70:57:2b:09:d9:bd:e4: e3:56:d8:2b:1f:a1:c6:50:43:45:b7:bc:33:dc:bd: c6:83:2a:a0:eb:74:cb:58:8a:2e:01:e6:c6:d4:19: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:7A:52:A3:FA:88:CB:CF:2F:66:2D:6E:1D:71:15:52:9A:6E:45 X509v3 Authority Key Identifier: keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:0c:44:10:43:c2:0a:f3:07:d4:b1:16:10:1e:c4:12:83: 58:d0:20:c5:b4:b4:3b:e9:f5:c2:59:7f:76:ae:89:18:60:62: 2d:3c:e6:92:8b:ef:14:f3:ce:31:5d:9b:fa:f9:ad:db:99:1f: 6b:61:77:a8:c4:81:b1:b5:21:0c:eb:83:6b:ee:2e:ec:e7:55: 2f:09:86:20:69:be:3b:1f:7d:9d:5f:86:5a:a1:b7:b1:80:d2: f4:6d:6a:d2:8a:08:f3:6a:22:ce:58:93:de:f7:02:c0:2d:78: 2a:42:2a:69:3f:ba:71:54:9d:98:59:b3:74:b5:ae:fb:e1:c1: 24:dc:67:17:0b:c3:d0:e7:8e:10:c1:1a:95:a6:fd:68:0a:7b: 39:ed:87:76:77:bf:bb:66:42:aa:83:f3:c4:ea:76:0e:b0:51: 8f:3f:b6:71:a4:b8:a4:e4:6e:3f:f1:0e:10:c3:48:3e:68:50: 03:b1:83:16:d9:72:74:0d:ed:8c:6a:9f:f5:b0:8a:65:cb:77: a2:a7:8f:e0:c0:a8:9a:cb:b2:06:57:0d:41:ad:a3:ef:06:4f: 51:cd:ee:df:1c:ed:35:ef:12:05:fc:55:b9:f6:ff:c6:2b:51: 55:9e:46:6c:bf:3a:56:0b:28:1a:5e:06:0c:5c:35:4c:ef:59: fd:da:ae:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE4RTIxMTAvBgNVBAUTKDBDMDUyNDNCN0VGNTU2MTFFNDBBNERCQkY3RkU3RTkx MjA5MkE2NTIwHhcNMjUwNzAxMDcwNTIzWhcNMjUwNzA4MDcwNTIzWjAYMRYwFAYD VQQDEw02ODYzODhiNC1mOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW/ZEIY/JLitptGO0WKvydvJTkLTSAAp/Pbg8GLUE9g95WQ11LW+MGyqFtmB g55mMPrvInGKhUIvAc7dK+j+G1YWW86j2P2SR3AfKszH6oO9jEvppPFRR8cEUR1S EnahKubyN55KNap28nLUGCw2SBoEoQ8S2KkIvEokADT5AzvZu81EN+PN4jKty1Jo LDaucMwVNVRTaMWV9nzd47sVk0pKvugZmYMolboKcbqKPyzAZO1wB5M3pYykDLPj 2+wqbifMK60De2OVzUbgUc8Ow+DXnyAtH2ToNHBXKwnZveTjVtgrH6HGUENFt7wz 3L3Ggyqg63TLWIouAebG1BlZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuXelKj +ojLzy9mLW4dcRVSmm5FMB8GA1UdIwQYMBaAFAwFJDt+9VYR5ApNu/f+fpEgkqZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QThFMi9BNDUxRDk4NDZG MkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZoSGtDazI3OV81LWtTQ1Nw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3BsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QThFMi9BNDUxRDk4NDZGMkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZo SGtDazI3OV81LWtTQ1NwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGoQxEEEPCCvMH1LEWEB7EEoNY0CDFtLQ76fXCWX92rokYYGItPOaS i+8U884xXZv6+a3bmR9rYXeoxIGxtSEM64Nr7i7s51UvCYYgab47H32dX4Zaobex gNL0bWrSigjzaiLOWJPe9wLALXgqQippP7pxVJ2YWbN0ta774cEk3GcXC8PQ544Q wRqVpv1oCns57Yd2d7+7ZkKqg/PE6nYOsFGPP7ZxpLik5G4/8Q4Qw0g+aFADsYMW 2XJ0De2Map/1sIply3eip4/gwKiay7IGVw1BraPvBk9Rze7fHO017xIF/FW59v/G K1FVnkZsvzpWCygaXgYMXDVM71n92q5u -----END CERTIFICATE-----Generated at Wed Jul 2 14:52:27 2025 by rpki-client