$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: H0PYxXw1aAKJpEm6njO1v8LRpgUVwcTcyfLg/IXK1oQ= Subject key identifier: CE:04:56:25:75:91:28:6B:5A:BE:8C:6D:C4:3D:C4:E2:D3:64:BA:A0 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 01E8 Signing time: Sat 23 Aug 2025 02:41:31 +0000 Manifest this update: Sat 23 Aug 2025 02:41:30 +0000 Manifest next update: Sat 30 Aug 2025 02:41:30 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: PYUp7JeCZDYMO9fzXV842XZcDbVawtmXhE2hfjyVWGM=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Aug 23 02:41:30 2025 GMT Not After : Aug 30 02:41:30 2025 GMT Subject: CN=68a92a5a-b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:93:b1:4a:f6:86:61:5d:6a:fa:88:63:8d: 2c:17:1c:88:0f:07:95:a3:64:c8:13:de:f8:62:b7: 7d:c4:0c:8b:c8:8b:3f:2d:f5:88:9b:e6:06:64:45: 60:03:22:3f:1a:f0:82:eb:4f:99:17:47:de:a5:3b: b7:be:0a:f2:96:5a:4f:21:46:ce:8b:ed:00:4c:72: cc:f0:2e:da:2f:1d:81:a6:bf:3f:e0:1c:2c:80:5a: d2:6d:0c:7d:e4:64:64:74:b7:49:44:c9:e7:cf:13: ff:26:e7:af:15:ef:e0:ba:a7:1d:ba:06:99:07:be: b8:00:c1:e2:f5:34:db:e2:3b:ce:76:1a:9b:7e:6d: f2:79:f3:fc:57:58:6c:9e:61:ec:39:4b:d6:24:a1: 2b:3b:fe:56:fa:91:c3:29:78:c1:93:d2:c4:1e:c2: 08:a5:d8:9a:6a:d1:28:88:8b:d2:c8:29:8e:bb:b3: be:03:ab:66:36:6e:9b:e6:d5:df:33:c0:3d:19:7d: 3f:1c:c2:7d:8f:e1:8c:ce:88:69:9e:6e:df:82:ae: 56:36:23:e2:59:b2:e3:46:eb:e4:40:4b:86:98:52: 7e:7a:a3:f2:78:9b:68:de:84:10:80:3d:cd:0c:ce: 9a:00:9b:ac:60:71:ef:c6:07:4a:1f:21:a1:50:b2: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:04:56:25:75:91:28:6B:5A:BE:8C:6D:C4:3D:C4:E2:D3:64:BA:A0 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:99:ce:30:f2:c7:5a:fe:1c:84:09:43:d5:60:01:40:8d:c6: 5b:6c:51:a9:b1:89:5b:8c:c8:1c:aa:ac:50:b8:4c:88:2d:59: d8:ee:dd:4e:a5:49:a0:d0:1a:3a:f7:5f:25:8e:99:f0:40:5d: b8:23:c3:ec:dd:0a:66:70:e6:84:f0:19:8b:6c:02:66:2c:23: 41:4d:b3:ba:59:74:b9:da:a3:18:42:e7:98:67:ba:c2:41:7b: 22:ed:57:e8:7c:41:b1:1a:2c:f7:69:4a:1b:bb:18:a8:d7:8c: e2:8f:7a:8e:ab:f1:65:ed:6e:c8:78:55:c0:a8:40:83:9b:77: 4d:2d:3f:ef:7a:9e:63:97:72:ab:aa:b5:fb:5d:fa:ef:1a:8a: 04:e2:e1:d7:1a:15:fd:93:c3:d0:72:c9:0d:0f:90:72:6e:1b: 14:16:32:e4:29:c3:c1:8f:78:15:55:0c:b8:80:6c:47:c9:61: a1:91:04:8e:4e:86:58:25:ff:aa:9c:b7:f7:48:f6:6c:f2:23: ce:2d:e6:ad:52:26:71:45:d2:6d:08:2a:d4:cc:71:95:82:8d: 07:cf:6e:98:aa:5d:08:2c:c4:e2:2c:84:1b:a6:95:d2:da:25: 2c:6e:3d:79:94:f4:db:b7:ff:b7:7a:17:4c:80:2c:ee:ed:2c: 9c:12:d7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUwODIzMDI0MTMwWhcNMjUwODMwMDI0MTMwWjAYMRYwFAYD VQQDEw02OGE5MmE1YS1iOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YiTsUr2hmFdavqIY40sFxyIDweVo2TIE974Yrd9xAyLyIs/LfWIm+YGZEVg AyI/GvCC60+ZF0fepTu3vgryllpPIUbOi+0ATHLM8C7aLx2Bpr8/4BwsgFrSbQx9 5GRkdLdJRMnnzxP/JuevFe/guqcdugaZB764AMHi9TTb4jvOdhqbfm3yefP8V1hs nmHsOUvWJKErO/5W+pHDKXjBk9LEHsIIpdiaatEoiIvSyCmOu7O+A6tmNm6b5tXf M8A9GX0/HMJ9j+GMzohpnm7fgq5WNiPiWbLjRuvkQEuGmFJ+eqPyeJto3oQQgD3N DM6aAJusYHHvxgdKHyGhULJ5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4EViV1 kShrWr6MbcQ9xOLTZLqgMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7mc4w8sda/hyECUPVYAFAjcZbbFGpsYlbjMgcqqxQuEyILVnY7t1O pUmg0Bo6918ljpnwQF24I8Ps3QpmcOaE8BmLbAJmLCNBTbO6WXS52qMYQueYZ7rC QXsi7VfofEGxGiz3aUobuxio14zij3qOq/Fl7W7IeFXAqECDm3dNLT/vep5jl3Kr qrX7XfrvGooE4uHXGhX9k8PQcskND5BybhsUFjLkKcPBj3gVVQy4gGxHyWGhkQSO ToZYJf+qnLf3SPZs8iPOLeatUiZxRdJtCCrUzHGVgo0Hz26Yql0ILMTiLIQbppXS 2iUsbj15lPTbt/+3ehdMgCzu7SycEtc9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:31 2025 by rpki-client