$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: cG6gmL7+TZfOo6pgmLux6b1hd476BoE58uXWxVtPVYw= Subject key identifier: 18:92:E0:4A:4F:94:31:AB:B7:20:40:8C:D0:6E:8E:4E:13:39:51:5E Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 177B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1757 Signing time: Wed 16 Jul 2025 16:42:35 +0000 Manifest this update: Wed 16 Jul 2025 16:42:35 +0000 Manifest next update: Wed 23 Jul 2025 16:42:35 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: xLdhh2Htwo9HwiEi2lZ4hO/v2hS6VWEwUbRtx9a11rM=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6011 (0x177b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Jul 16 16:42:35 2025 GMT Not After : Jul 23 16:42:35 2025 GMT Subject: CN=6877d67b-7323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:0e:92:7c:06:cb:b8:ba:9f:6b:30:12:45: 66:db:45:30:34:f5:46:25:1d:72:dc:2c:08:15:c1: 71:74:9d:75:c3:70:83:a5:66:98:32:80:75:d1:9a: 60:0a:a8:5c:ad:a8:c8:8b:dc:3a:59:b5:3a:1f:ca: 48:34:62:f4:c4:8b:a6:1e:02:9d:5b:09:ee:10:ca: 41:d4:b9:dd:1c:d8:74:47:0b:e5:40:e6:5b:42:75: 2c:16:46:07:36:05:6d:3b:4d:67:86:ff:bf:41:9e: 52:5c:7f:07:22:5e:03:98:a5:40:37:0e:2b:cf:2c: 4f:0c:eb:c2:2d:98:44:d6:67:5a:53:fa:99:c7:92: 00:ab:eb:ed:c2:4c:a5:42:1a:59:49:8f:99:d9:d4: 27:90:95:7c:41:c1:b8:9a:68:b2:59:85:e2:54:29: e8:c5:47:e8:2b:41:cf:9e:34:63:0f:96:b8:ed:bc: 5f:30:b4:4b:39:78:ae:73:c3:4f:cf:d6:b3:43:ec: 66:ac:5a:2a:39:f1:de:27:a0:65:79:30:c7:bf:f6: 0f:60:cd:ac:d4:af:ea:e4:45:10:db:7c:c0:03:6e: 3e:5d:d7:0c:b1:f8:2c:39:56:51:de:41:91:4d:30: 84:5f:b7:2f:5e:8f:5a:88:b1:af:1c:ec:82:e8:bf: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:92:E0:4A:4F:94:31:AB:B7:20:40:8C:D0:6E:8E:4E:13:39:51:5E X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:61:c8:4f:36:72:cc:e1:c3:12:e9:4f:f4:26:7c:95:55:e0: 46:a2:28:9e:59:94:10:74:01:1b:83:67:b7:7a:87:dd:4d:66: 93:85:38:5b:05:ff:8b:d0:ae:9d:d6:51:9d:08:af:2b:22:e5: 23:58:ee:ed:68:d7:9d:4a:b5:05:43:b3:ce:58:24:97:8a:33: 41:5f:0b:11:02:8f:54:78:fa:ea:60:58:7a:83:53:b0:ed:0f: 60:ff:f6:22:ba:d4:62:a2:ba:3c:18:4d:87:b2:79:11:cf:26: 2d:4a:f4:7c:4b:8c:c1:c5:fa:a7:09:c6:48:80:ae:9d:55:a4: 74:c9:1e:c1:a4:c0:f4:ff:81:64:4d:df:d0:ff:2a:88:a3:8c: 21:62:c2:c8:98:a2:ee:7f:77:78:5d:dc:87:19:af:16:2e:2c: ec:23:e9:59:15:1b:91:87:a6:45:7d:1a:3e:22:cf:54:57:41: d4:78:b3:98:4f:24:69:63:bd:19:e7:8f:28:de:e4:70:8d:42: 40:a2:93:14:45:a0:44:5d:d7:27:c6:27:0e:fc:f6:b6:dd:b3: 72:80:4c:df:5f:d2:c4:7c:a5:3d:12:75:cb:5a:ef:20:b2:6c: f7:f7:a3:3a:38:99:27:76:5b:7f:af:88:8c:d0:c2:17:58:1f: 5b:8d:57:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwNzE2MTY0MjM1WhcNMjUwNzIzMTY0MjM1WjAYMRYwFAYD VQQDEw02ODc3ZDY3Yi03MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ToOknwGy7i6n2swEkVm20UwNPVGJR1y3CwIFcFxdJ11w3CDpWaYMoB10Zpg CqhcrajIi9w6WbU6H8pINGL0xIumHgKdWwnuEMpB1LndHNh0RwvlQOZbQnUsFkYH NgVtO01nhv+/QZ5SXH8HIl4DmKVANw4rzyxPDOvCLZhE1mdaU/qZx5IAq+vtwkyl QhpZSY+Z2dQnkJV8QcG4mmiyWYXiVCnoxUfoK0HPnjRjD5a47bxfMLRLOXiuc8NP z9azQ+xmrFoqOfHeJ6BleTDHv/YPYM2s1K/q5EUQ23zAA24+XdcMsfgsOVZR3kGR TTCEX7cvXo9aiLGvHOyC6L+FgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiS4EpP lDGrtyBAjNBujk4TOVFeMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7YchPNnLM4cMS6U/0JnyVVeBGoiieWZQQdAEbg2e3eofdTWaThThb Bf+L0K6d1lGdCK8rIuUjWO7taNedSrUFQ7POWCSXijNBXwsRAo9UePrqYFh6g1Ow 7Q9g//YiutRioro8GE2HsnkRzyYtSvR8S4zBxfqnCcZIgK6dVaR0yR7BpMD0/4Fk Td/Q/yqIo4whYsLImKLuf3d4XdyHGa8WLizsI+lZFRuRh6ZFfRo+Is9UV0HUeLOY TyRpY70Z548o3uRwjUJAopMURaBEXdcnxicO/Pa23bNygEzfX9LEfKU9EnXLWu8g smz396M6OJkndlt/r4iM0MIXWB9bjVeN -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:50 2025 by rpki-client