$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json) Hash identifier: eb9hsCAtKj9Hd3IovmdVyuDaT3Fh7TJfa4Dqp63bXUs= Subject key identifier: 57:A7:15:A1:CF:64:2B:8F:7E:25:C4:57:FE:B0:7E:22:01:D7:E7:32 Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft Manifest number: 01DB Signing time: Sat 23 Aug 2025 02:48:29 +0000 Manifest this update: Sat 23 Aug 2025 02:48:29 +0000 Manifest next update: Sat 30 Aug 2025 02:48:29 +0000 Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: M0DXuh4ti0oinJ/nS1KpE2QsT0xQF4Tb2i5Uqpc7Mlc=) 2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 949cDrd9O3ejSTUuoxYP0yKZgFwRWnkdff/N9Ay5rNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Validity Not Before: Aug 23 02:48:29 2025 GMT Not After : Aug 30 02:48:29 2025 GMT Subject: CN=68a92bfd-2668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:cb:04:91:5f:1f:ee:8f:17:c2:bf:1d:5d: 77:64:88:8a:87:d4:ec:98:5d:75:cc:74:44:ff:4b: 9b:a9:c3:d6:97:10:40:ab:e9:81:a8:ad:ed:be:6b: 8c:9c:fc:a5:2f:12:2a:3e:8f:9c:9e:a4:4a:f6:b1: c1:dc:5a:43:f4:01:be:91:65:73:ce:82:cf:37:ae: e2:ba:a4:bb:da:36:15:0e:48:22:bd:6e:f7:b8:ea: bf:63:36:94:b3:e5:55:2f:ff:80:8c:9d:75:d0:1e: 1e:aa:d8:d3:45:3c:cd:23:02:d1:f5:86:34:a8:96: c9:5f:c8:9a:c9:94:f8:f9:57:49:c4:35:25:04:65: 4d:f4:41:8a:97:3c:7a:64:b4:70:47:58:4e:d8:75: 81:a6:ed:c9:3c:68:d2:64:f9:0c:3d:ef:71:00:c3: d5:c0:50:6c:f5:c0:31:69:cb:05:a5:9f:ce:42:6a: d4:78:f5:57:fb:d8:d4:c9:5e:10:4e:d1:fe:8c:69: 11:38:a4:2b:a9:ec:ca:e7:0b:9e:76:58:e9:06:d8: 02:5e:c5:9b:5d:ac:f6:fe:31:d1:2e:f0:48:3c:f6: c6:cd:b8:2e:b2:89:b0:64:9f:31:d4:03:a9:97:e1: 62:9f:84:3b:0d:d9:cb:01:a8:a0:cc:54:50:7c:5d: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:15:A1:CF:64:2B:8F:7E:25:C4:57:FE:B0:7E:22:01:D7:E7:32 X509v3 Authority Key Identifier: keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6e:6c:96:dd:4d:7d:27:e6:3b:c1:d5:b5:d6:7b:c6:92:a3: 91:5c:b1:7f:d1:54:8c:2b:29:a5:e6:d4:98:a3:fa:f7:a4:cf: 04:f3:e6:85:fc:09:8b:35:3a:82:4d:00:e6:1a:e2:fa:07:ca: 06:0b:17:11:25:b9:1c:2e:16:33:78:b8:ab:00:89:c3:ad:82: 1c:ee:5c:6a:0c:f0:b3:b8:7a:7f:93:19:f2:33:1f:e9:16:50: 49:ce:74:ca:de:6a:fb:20:0a:91:e6:69:3b:b1:9a:2c:07:30: c8:7d:df:b9:82:77:ad:5c:20:a6:5f:d2:2c:fe:93:29:9a:f0: c8:d0:b7:ba:a9:da:56:82:ea:5d:8e:ca:c4:05:99:c1:7a:4b: 1f:70:c3:f2:a8:87:a3:02:f9:fe:c4:42:56:13:b7:30:b0:91: 9b:87:ac:d5:f7:e1:87:c0:8c:1e:e5:b1:2d:4d:c6:4d:2b:79: 70:4e:55:e2:f7:17:7d:b6:70:c2:5d:c4:cc:df:31:6d:ca:be: c6:8b:f6:0c:4a:c9:a8:62:c2:ff:77:04:ed:a0:1d:4e:68:b0: c0:e3:62:49:e8:ca:22:47:34:9c:00:14:78:5c:29:cf:5b:2d: cf:ff:9d:f6:de:ab:f2:f5:46:7f:ab:88:a2:b8:32:03:01:72: a2:c3:7b:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB OTRFMDc4Q0YwHhcNMjUwODIzMDI0ODI5WhcNMjUwODMwMDI0ODI5WjAYMRYwFAYD VQQDEw02OGE5MmJmZC0yNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ObLBJFfH+6PF8K/HV13ZIiKh9TsmF11zHRE/0ubqcPWlxBAq+mBqK3tvmuM nPylLxIqPo+cnqRK9rHB3FpD9AG+kWVzzoLPN67iuqS72jYVDkgivW73uOq/YzaU s+VVL/+AjJ110B4eqtjTRTzNIwLR9YY0qJbJX8iayZT4+VdJxDUlBGVN9EGKlzx6 ZLRwR1hO2HWBpu3JPGjSZPkMPe9xAMPVwFBs9cAxacsFpZ/OQmrUePVX+9jUyV4Q TtH+jGkROKQrqezK5wuedljpBtgCXsWbXaz2/jHRLvBIPPbGzbgusomwZJ8x1AOp l+Fin4Q7DdnLAaigzFRQfF0MbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFenFaHP ZCuPfiXEV/6wfiIB1+cyMB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1 Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtv VEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdbmyW3U19J+Y7wdW11nvGkqORXLF/0VSMKyml5tSYo/r3pM8E8+aF /AmLNTqCTQDmGuL6B8oGCxcRJbkcLhYzeLirAInDrYIc7lxqDPCzuHp/kxnyMx/p FlBJznTK3mr7IAqR5mk7sZosBzDIfd+5gnetXCCmX9Is/pMpmvDI0Le6qdpWgupd jsrEBZnBeksfcMPyqIejAvn+xEJWE7cwsJGbh6zV9+GHwIwe5bEtTcZNK3lwTlXi 9xd9tnDCXcTM3zFtyr7Gi/YMSsmoYsL/dwTtoB1OaLDA42JJ6MoiRzScABR4XCnP Wy3P/5323qvy9UZ/q4iiuDIDAXKiw3sg -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:08 2025 by rpki-client