$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: 0EQ2Diw2wwlwnAB6fod0SFcLsYLNqZHsAY+Y24geuWk= Subject key identifier: 85:16:87:42:2D:92:BD:81:E7:53:ED:D0:26:F5:C8:B7:0B:8C:34:AB Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07DF Signing time: Fri 22 Aug 2025 21:11:56 +0000 Manifest this update: Fri 22 Aug 2025 21:11:55 +0000 Manifest next update: Fri 29 Aug 2025 21:11:55 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: XCuiPJ3upLzkQLFw3cPWhUfPrZLXPPR+SiXa5w7MbYY=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Aug 22 21:11:55 2025 GMT Not After : Aug 29 21:11:55 2025 GMT Subject: CN=68a8dd1b-8d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:08:3b:ac:3c:1a:25:25:4a:2f:34:07:d2: e0:70:ab:d1:d0:2a:05:de:2e:7e:a3:6c:6e:66:bf: be:eb:77:74:48:f9:30:77:32:43:45:e7:7d:81:22: ca:4b:fb:82:24:a2:c8:66:37:0a:5f:f2:93:ee:c8: ce:a7:ff:fd:0f:56:10:d1:60:f6:fa:37:0e:d6:af: 12:ca:85:49:79:7b:c5:73:2a:ce:53:e0:e9:ce:f7: a0:04:1c:fe:c8:ab:1d:e3:fc:a5:59:8a:d8:a4:04: 4b:48:8d:c2:37:0d:3b:d0:a5:79:d3:21:7f:35:34: 07:48:33:76:ff:15:d5:d6:60:12:a4:ff:78:52:ca: 9f:c2:10:e1:0f:47:07:62:87:17:e2:a3:66:90:bd: 0b:5b:04:86:5a:5c:e5:f4:1e:a5:29:93:04:19:80: 28:91:e7:a7:34:0b:28:76:59:f7:1a:4c:a9:01:ad: 4e:ad:73:5c:15:ae:7e:04:09:8d:83:bc:b7:f3:d5: d5:70:f8:ed:7f:eb:1f:3a:64:b1:00:8f:2d:17:c7: 00:59:21:9f:48:b4:d0:1e:20:de:05:26:a3:69:17: 26:ed:cd:46:87:af:b4:43:a8:f9:4c:2d:47:51:e9: de:4c:94:59:0c:c2:f9:3e:41:3a:a5:7e:41:a0:1e: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:87:42:2D:92:BD:81:E7:53:ED:D0:26:F5:C8:B7:0B:8C:34:AB X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d1:7e:25:91:2b:d1:9e:b5:f8:4d:85:d0:f8:06:d5:7d:a0: 04:60:bc:3a:5d:23:79:d0:76:6f:80:79:91:6d:e1:1b:6e:74: 1f:de:61:3d:c2:73:b3:93:60:74:81:a7:5c:7a:6d:b4:fc:c0: 39:66:87:63:0f:65:f2:08:43:af:9d:f2:32:08:97:5f:c6:d2: 0e:cc:30:ff:64:fd:99:f5:ea:d2:ca:7e:8f:34:83:42:c7:ca: a0:1a:03:70:05:2d:7d:90:d0:32:84:d8:db:15:04:50:60:6a: 98:2b:c2:0c:3d:a2:80:2c:e4:6c:98:88:59:59:b6:15:35:86: 69:47:b8:72:67:53:30:cd:25:e7:73:6f:c9:1f:f5:8e:a9:dc: b8:14:ff:f8:70:9f:a8:08:c6:15:7d:a1:fa:e8:31:cb:82:23: f1:3c:13:05:05:f9:9c:bd:b5:e5:eb:a6:07:6a:f8:02:a3:d5: 4d:c4:01:34:ab:77:6c:11:18:9c:a9:d6:38:30:d9:2d:37:6e: c4:7e:99:43:86:d8:38:ef:d1:6b:ab:66:a2:09:52:64:dd:9b: 54:3a:6c:8d:11:83:8f:4c:35:0d:96:88:bb:5a:47:e1:01:95: a9:7b:ed:94:c9:21:f4:7e:08:89:b9:4c:69:17:b9:cf:84:ed: 75:cb:f1:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwODIyMjExMTU1WhcNMjUwODI5MjExMTU1WjAYMRYwFAYD VQQDEw02OGE4ZGQxYi04ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13AIO6w8GiUlSi80B9LgcKvR0CoF3i5+o2xuZr++63d0SPkwdzJDRed9gSLK S/uCJKLIZjcKX/KT7sjOp//9D1YQ0WD2+jcO1q8SyoVJeXvFcyrOU+DpzvegBBz+ yKsd4/ylWYrYpARLSI3CNw070KV50yF/NTQHSDN2/xXV1mASpP94UsqfwhDhD0cH YocX4qNmkL0LWwSGWlzl9B6lKZMEGYAokeenNAsodln3GkypAa1OrXNcFa5+BAmN g7y389XVcPjtf+sfOmSxAI8tF8cAWSGfSLTQHiDeBSajaRcm7c1Gh6+0Q6j5TC1H UeneTJRZDML5PkE6pX5BoB6HMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUWh0It kr2B51Pt0Cb1yLcLjDSrMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz0X4lkSvRnrX4TYXQ+AbVfaAEYLw6XSN50HZvgHmRbeEbbnQf3mE9 wnOzk2B0gadcem20/MA5ZodjD2XyCEOvnfIyCJdfxtIOzDD/ZP2Z9erSyn6PNINC x8qgGgNwBS19kNAyhNjbFQRQYGqYK8IMPaKALORsmIhZWbYVNYZpR7hyZ1MwzSXn c2/JH/WOqdy4FP/4cJ+oCMYVfaH66DHLgiPxPBMFBfmcvbXl66YHavgCo9VNxAE0 q3dsERicqdY4MNktN27EfplDhtg479Frq2aiCVJk3ZtUOmyNEYOPTDUNloi7Wkfh AZWpe+2UySH0fgiJuUxpF7nPhO11y/Er -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:53 2025 by rpki-client