$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: 3yu6UNb0IBec9kPwDyqFk4uvXXfot65EvTQHafqK8Ik= Subject key identifier: 96:4B:CB:8F:DF:EB:B5:19:8E:24:D7:9C:63:3F:3E:EF:2A:F4:0C:DE Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07C5 Signing time: Wed 02 Jul 2025 21:24:15 +0000 Manifest this update: Wed 02 Jul 2025 21:24:14 +0000 Manifest next update: Wed 09 Jul 2025 21:24:14 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: 1U8ervYTUS8NZyLb0gW0jgLso+4q1T0PCdqCkDxkf5g=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Jul 2 21:24:14 2025 GMT Not After : Jul 9 21:24:14 2025 GMT Subject: CN=6865a37f-b988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:67:2b:df:ab:ec:fa:37:98:c7:a0:3e:17: e2:4f:b3:d1:0f:67:7a:0a:0d:11:fe:7a:05:27:26: 7f:35:04:f7:ca:c2:d5:75:fb:36:70:44:3c:21:55: a4:44:76:09:27:b2:be:6c:50:7b:ae:77:e3:fc:ee: 80:93:8f:02:f8:be:65:de:b2:7d:cb:dc:f4:8f:a1: 04:c0:c6:ac:bf:c3:73:19:70:bf:fd:84:07:a3:94: be:c5:65:59:64:d7:21:fd:53:f7:a2:9c:b1:43:3c: f3:8f:be:10:77:68:83:59:a4:35:d3:c7:e6:84:a1: 5f:a7:7d:ed:3d:b7:c3:c4:04:f6:c6:d3:c1:88:72: 08:5a:8d:b7:d8:e7:30:71:cc:37:a4:26:7c:42:f1: de:1f:b7:e7:74:b8:a3:ef:74:17:2a:b0:3c:82:a7: 56:29:5d:44:40:b8:18:f2:c8:08:79:7d:40:90:c3: 37:3d:b0:f1:8e:73:68:1e:18:6a:4f:a0:b9:30:fe: 9b:e0:c1:b9:a5:4d:84:d0:76:c4:aa:fd:e6:19:e4: b6:06:6c:13:cb:13:15:75:cd:0e:53:5d:30:c2:81: e5:33:1d:1f:d3:10:84:2c:2c:51:ae:3b:f0:1a:69: aa:ed:32:67:c1:42:fd:4f:a4:17:b4:a7:c4:93:52: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:CB:8F:DF:EB:B5:19:8E:24:D7:9C:63:3F:3E:EF:2A:F4:0C:DE X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:24:35:ce:c6:cb:8b:3e:79:ab:d8:d9:fa:9b:c6:4c:26:ca: 73:10:29:a0:73:19:0b:80:d9:62:8c:54:68:30:9c:97:92:7e: 47:a1:c1:11:f4:fa:be:f1:01:f4:46:0e:5b:4e:a6:3f:d2:64: a6:6d:c7:12:3f:04:6c:4a:77:f1:f1:f1:f5:b1:18:d2:d4:fc: 25:48:be:8b:a2:a1:a2:85:0d:03:f0:35:28:88:af:32:2a:e4: dc:b0:4d:ca:33:f6:c5:4d:b4:1c:59:63:cd:15:70:83:91:4f: 34:7a:e7:6d:a2:ec:0d:0d:d4:c7:24:ba:f3:87:2f:11:79:d5: 99:b2:56:f6:b6:38:64:cf:76:aa:93:0e:79:22:23:aa:d8:17: 5b:3a:a6:87:59:5e:03:1f:26:b4:18:b9:56:ef:ca:da:2f:37: 6b:06:be:e4:03:8d:ac:f7:88:3a:73:8a:49:73:91:ef:2f:db: 5c:b0:d7:b1:79:aa:e2:95:10:01:3a:f3:81:9c:34:ed:b8:44: a2:e7:fc:b1:55:6e:f4:83:54:31:b3:73:83:19:ba:e6:09:90: 23:20:7a:56:c1:4b:a1:c1:ae:14:38:22:93:e2:1d:16:e3:65: 6d:2b:75:f4:3a:87:29:87:2e:29:ce:5c:ce:97:f4:82:16:8a: 16:03:0b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNzAyMjEyNDE0WhcNMjUwNzA5MjEyNDE0WjAYMRYwFAYD VQQDEw02ODY1YTM3Zi1iOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qNnK9+r7Po3mMegPhfiT7PRD2d6Cg0R/noFJyZ/NQT3ysLVdfs2cEQ8IVWk RHYJJ7K+bFB7rnfj/O6Ak48C+L5l3rJ9y9z0j6EEwMasv8NzGXC//YQHo5S+xWVZ ZNch/VP3opyxQzzzj74Qd2iDWaQ108fmhKFfp33tPbfDxAT2xtPBiHIIWo232Ocw ccw3pCZ8QvHeH7fndLij73QXKrA8gqdWKV1EQLgY8sgIeX1AkMM3PbDxjnNoHhhq T6C5MP6b4MG5pU2E0HbEqv3mGeS2BmwTyxMVdc0OU10wwoHlMx0f0xCELCxRrjvw Gmmq7TJnwUL9T6QXtKfEk1LgLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZLy4/f 67UZjiTXnGM/Pu8q9AzeMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJDXOxsuLPnmr2Nn6m8ZMJspzECmgcxkLgNlijFRoMJyXkn5HocER 9Pq+8QH0Rg5bTqY/0mSmbccSPwRsSnfx8fH1sRjS1PwlSL6LoqGihQ0D8DUoiK8y KuTcsE3KM/bFTbQcWWPNFXCDkU80eudtouwNDdTHJLrzhy8RedWZslb2tjhkz3aq kw55IiOq2BdbOqaHWV4DHya0GLlW78raLzdrBr7kA42s94g6c4pJc5HvL9tcsNex earilRABOvOBnDTtuESi5/yxVW70g1Qxs3ODGbrmCZAjIHpWwUuhwa4UOCKT4h0W 42VtK3X0Oocphy4pzlzOl/SCFooWAws1 -----END CERTIFICATE-----Generated at Fri Jul 4 21:52:30 2025 by rpki-client