$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json) Hash identifier: YXPX0AaEpC7UDC/KLNnbhPPefGnI2MTZj8XoL8jshlc= Subject key identifier: 0D:C6:33:CB:EE:02:FB:29:FF:0A:33:07:5B:13:12:D6:FE:2A:A4:C4 Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft Manifest number: 0701 Signing time: Fri 22 Aug 2025 22:04:43 +0000 Manifest this update: Fri 22 Aug 2025 22:04:42 +0000 Manifest next update: Fri 29 Aug 2025 22:04:42 +0000 Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: 8mkxD+ga7SBUpeAmL7JjwnGTDJeuCCGhGIvjqRAEov8=) 2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: Zjwbd7A/MXOwRReQkUKden3QdXuGaPIKzLzYkjV/0SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Validity Not Before: Aug 22 22:04:42 2025 GMT Not After : Aug 29 22:04:42 2025 GMT Subject: CN=68a8e97a-2b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:1d:dd:cf:60:07:3d:b8:73:cf:7a:3f:ec: 4a:3d:d5:14:a5:f6:1b:9b:3d:80:0c:ea:c4:f0:ca: 72:79:59:2b:77:68:0b:f5:41:ae:3f:92:4f:e2:28: ce:fe:44:dd:2b:ec:f2:fa:6f:83:ca:60:00:fb:83: 5c:cf:37:34:c0:0d:58:76:bc:8e:96:42:99:73:79: 8c:61:13:d5:c7:18:1b:01:2f:77:61:62:82:f9:bc: 00:33:28:f5:79:42:0d:15:ad:34:ff:4d:86:19:16: ac:2f:09:d0:71:c7:43:aa:3e:a6:2a:45:79:04:31: ac:1a:34:41:64:d0:02:84:7f:97:ef:bc:37:02:ff: 40:da:69:d6:7a:a2:8b:02:ad:8c:2a:92:1b:1b:61: 22:5e:37:55:b4:ed:81:16:16:28:bf:fa:85:1c:8e: 37:ce:d0:4d:99:70:10:61:df:ad:1a:03:95:4a:55: 2e:e3:bf:f8:5e:e2:22:cb:8f:05:8b:46:16:36:88: e0:01:a9:58:c7:bd:62:84:bb:e6:b3:40:03:e2:0c: 36:a4:b4:62:8e:fb:9b:0f:ae:ba:31:95:c5:3c:35: 7f:b9:14:08:98:76:2a:ab:b3:ae:60:49:0d:2b:d3: 48:f6:42:88:a0:76:eb:1f:47:c0:ba:be:6a:4c:de: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:33:CB:EE:02:FB:29:FF:0A:33:07:5B:13:12:D6:FE:2A:A4:C4 X509v3 Authority Key Identifier: keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:20:ec:3b:36:76:97:88:3c:6b:bc:b2:8c:8d:82:2c:b2:91: d2:79:53:33:2a:04:33:76:b6:c7:91:d2:cf:da:3b:2b:c4:55: 62:4d:0b:df:85:74:69:65:95:53:ad:b5:9b:d9:36:f2:81:8a: 22:21:c1:04:61:2f:97:4c:f7:fc:56:92:bd:7e:ab:e8:69:f0: c8:ef:90:49:ee:17:7a:85:38:23:e5:97:c2:6c:e5:1f:17:0b: 35:c2:9b:6e:45:6a:5c:d5:6c:3f:a7:43:97:67:7d:1a:c8:34: c0:21:7b:f6:b3:2a:53:8b:d3:d4:f2:f6:00:9c:2b:b3:32:dd: 65:26:c3:1f:ba:ce:b6:74:6c:da:a2:c4:e8:af:64:1f:ac:ae: a5:f2:bb:b1:10:0b:e6:52:64:7d:46:40:c8:d9:a4:01:f2:99: ee:9f:91:93:fa:97:ea:57:10:ec:1f:fc:ab:af:54:0d:64:4d: 23:77:21:0e:69:d7:5a:89:bd:c5:99:30:fa:e3:80:b3:1a:ac: d7:a2:7d:d2:8c:5b:6a:72:8b:f9:39:33:e5:12:38:07:86:b7: 70:c4:7d:23:8c:ff:42:3c:cc:64:f0:53:30:76:c1:4a:45:1c: cc:9c:51:3f:ab:57:18:0a:74:6b:a9:29:54:ad:35:55:a9:e8: 52:78:0c:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4 RTU3NzM3MjQwHhcNMjUwODIyMjIwNDQyWhcNMjUwODI5MjIwNDQyWjAYMRYwFAYD VQQDEw02OGE4ZTk3YS0yYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Eod3c9gBz24c896P+xKPdUUpfYbmz2ADOrE8MpyeVkrd2gL9UGuP5JP4ijO /kTdK+zy+m+DymAA+4Nczzc0wA1YdryOlkKZc3mMYRPVxxgbAS93YWKC+bwAMyj1 eUINFa00/02GGRasLwnQccdDqj6mKkV5BDGsGjRBZNAChH+X77w3Av9A2mnWeqKL Aq2MKpIbG2EiXjdVtO2BFhYov/qFHI43ztBNmXAQYd+tGgOVSlUu47/4XuIiy48F i0YWNojgAalYx71ihLvms0AD4gw2pLRijvubD666MZXFPDV/uRQImHYqq7OuYEkN K9NI9kKIoHbrH0fAur5qTN5QlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3GM8vu Avsp/wozB1sTEtb+KqTEMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1 OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2 TDFwWEM1bFJmS0NPVjNOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkIOw7NnaXiDxrvLKMjYIsspHSeVMzKgQzdrbHkdLP2jsrxFViTQvf hXRpZZVTrbWb2TbygYoiIcEEYS+XTPf8VpK9fqvoafDI75BJ7hd6hTgj5ZfCbOUf Fws1wptuRWpc1Ww/p0OXZ30ayDTAIXv2sypTi9PU8vYAnCuzMt1lJsMfus62dGza osTor2QfrK6l8ruxEAvmUmR9RkDI2aQB8pnun5GT+pfqVxDsH/yrr1QNZE0jdyEO addaib3FmTD644CzGqzXon3SjFtqcov5OTPlEjgHhrdwxH0jjP9CPMxk8FMwdsFK RRzMnFE/q1cYCnRrqSlUrTVVqehSeAzw -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:06 2025 by rpki-client