$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: SjKpT4y3QwyvefwsianmywjcyvzF7fuGONJZ8DYtS0w= Subject key identifier: F4:C6:BE:A3:C5:3B:33:66:29:70:7A:34:32:F3:03:D9:1D:57:61:AB Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: FC Signing time: Sat 23 Aug 2025 05:17:40 +0000 Manifest this update: Sat 23 Aug 2025 05:17:39 +0000 Manifest next update: Sat 30 Aug 2025 05:17:39 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: 7qC04IUW3+gLFJ1olg51X23xJF0VphoCg3Bh5aJCsPU=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Aug 23 05:17:39 2025 GMT Not After : Aug 30 05:17:39 2025 GMT Subject: CN=68a94ef4-e92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:ba:70:da:59:89:b9:36:f1:1c:45:a3:d3: 82:13:a9:5b:d8:63:ca:f9:af:2d:b4:86:64:45:a4: 3f:aa:b5:20:9e:2b:1f:79:92:cd:20:67:04:93:7b: 32:1d:d3:6f:98:9b:b2:c3:03:e9:4e:5e:2e:0e:cb: 99:ad:7c:80:a2:c2:a3:cf:08:82:92:db:81:23:25: ea:5d:7f:de:5e:9d:53:ea:b2:34:3b:d1:a1:3f:9a: 5e:8d:f4:7e:66:02:24:43:d3:ff:ed:1f:63:35:45: 69:d0:10:e1:d8:cb:47:eb:25:0b:98:96:7f:a9:91: a5:d4:0e:99:c1:71:6e:7e:88:68:0c:01:31:a6:cc: 56:35:b8:48:a4:b8:bd:c1:37:89:9b:35:96:4f:7b: f6:cc:0f:61:65:e1:9a:df:62:04:55:ce:31:ae:15: c4:e9:5d:a0:54:62:7a:37:7f:f5:90:ba:c9:b3:43: 74:7d:1e:ca:ed:94:83:74:91:95:b3:09:3a:92:7a: 43:5c:b5:55:52:9c:16:77:d2:32:1b:98:1b:79:6b: 4c:4d:5a:03:1d:7d:c2:9c:29:4c:19:fe:d5:d5:87: f6:cb:ae:95:c2:e4:b8:4b:e1:59:71:4e:d2:de:71: 82:9d:7d:c4:ba:24:a7:75:4a:a6:09:aa:94:91:c4: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C6:BE:A3:C5:3B:33:66:29:70:7A:34:32:F3:03:D9:1D:57:61:AB X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:d2:0d:bd:34:73:52:3f:a2:42:f7:b6:f9:dc:d2:69:45: e3:88:0d:63:16:a0:5c:a8:7c:a0:28:d4:93:ed:00:77:54:90: 1e:52:6c:df:83:30:38:5d:d9:bb:36:2d:08:f8:04:9b:19:a4: da:3a:3e:ef:1f:d4:6b:d9:e0:da:a9:a3:cf:46:62:63:16:cb: 18:e8:16:7e:02:4e:1e:6d:9b:ce:8a:a5:c4:f0:61:f6:48:05: 4b:fa:d7:de:02:27:bc:4a:ba:62:d4:11:c6:df:5e:c0:93:89: 65:db:64:f4:dc:5d:9d:60:b4:77:a0:84:6d:b7:d5:95:37:f1: 04:e1:a3:00:ce:dd:24:19:74:71:2c:32:b5:0d:53:5e:36:ab: cb:a2:13:27:23:d2:03:1b:6e:c2:3e:08:94:88:60:56:7b:51: ae:e4:5a:57:d6:19:44:3a:e0:5d:19:bb:c3:1b:2f:de:d2:9c: 33:46:2b:43:95:ec:7a:c7:b8:97:05:20:56:64:2a:30:43:20: 89:b0:d9:2f:fb:8d:7c:21:1c:20:98:58:02:7c:3f:9b:05:2d: 5e:b3:ca:03:a9:bb:dc:a1:64:51:5d:13:2d:97:2b:f7:e1:aa: 70:09:aa:8f:85:06:59:01:26:59:8d:7d:05:20:c6:8a:00:02: 95:ae:2b:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwODIzMDUxNzM5WhcNMjUwODMwMDUxNzM5WjAYMRYwFAYD VQQDEw02OGE5NGVmNC1lOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1u6cNpZibk28RxFo9OCE6lb2GPK+a8ttIZkRaQ/qrUgnisfeZLNIGcEk3sy HdNvmJuywwPpTl4uDsuZrXyAosKjzwiCktuBIyXqXX/eXp1T6rI0O9GhP5pejfR+ ZgIkQ9P/7R9jNUVp0BDh2MtH6yULmJZ/qZGl1A6ZwXFufohoDAExpsxWNbhIpLi9 wTeJmzWWT3v2zA9hZeGa32IEVc4xrhXE6V2gVGJ6N3/1kLrJs0N0fR7K7ZSDdJGV swk6knpDXLVVUpwWd9IyG5gbeWtMTVoDHX3CnClMGf7V1Yf2y66VwuS4S+FZcU7S 3nGCnX3EuiSndUqmCaqUkcRthwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTGvqPF OzNmKXB6NDLzA9kdV2GrMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsj9INvTRzUj+iQve2+dzSaUXjiA1jFqBcqHygKNST7QB3VJAeUmzf gzA4Xdm7Ni0I+ASbGaTaOj7vH9Rr2eDaqaPPRmJjFssY6BZ+Ak4ebZvOiqXE8GH2 SAVL+tfeAie8Srpi1BHG317Ak4ll22T03F2dYLR3oIRtt9WVN/EE4aMAzt0kGXRx LDK1DVNeNqvLohMnI9IDG27CPgiUiGBWe1Gu5FpX1hlEOuBdGbvDGy/e0pwzRitD lex6x7iXBSBWZCowQyCJsNkv+418IRwgmFgCfD+bBS1es8oDqbvcoWRRXRMtlyv3 4apwCaqPhQZZASZZjX0FIMaKAAKVrivZ -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:02 2025 by rpki-client