$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: iQAc9V8tedn2z61dhM5totjWGENYZIt2LINktEE7P5s= Subject key identifier: F8:86:74:8D:28:91:FD:56:B2:D9:BA:D9:1C:09:4A:5F:72:70:86:D5 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 202E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 18AD Signing time: Fri 22 Aug 2025 17:23:00 +0000 Manifest this update: Fri 22 Aug 2025 17:23:00 +0000 Manifest next update: Fri 29 Aug 2025 17:23:00 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: j6PIXfjjllZe7+f6QLr2EA+eqiIPzhpYMxqzth3jwrU=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8238 (0x202e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Aug 22 17:23:00 2025 GMT Not After : Aug 29 17:23:00 2025 GMT Subject: CN=68a8a774-ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:2c:a0:36:80:eb:38:5a:e9:4e:c7:cc:18: 51:de:54:45:f0:c4:22:61:66:38:c5:04:06:0b:a6: 92:c2:7d:62:da:16:52:18:f1:b1:d3:10:02:c0:f2: 22:9a:3e:5e:d7:17:6a:c6:b8:24:a2:88:8b:8c:b7: 2f:c5:9a:a1:23:02:01:10:2a:08:e9:e2:50:84:d6: 6b:a2:86:d0:16:37:c9:2e:7c:04:c3:8c:87:a6:5a: ff:77:09:14:34:20:9a:76:dd:2d:2a:85:b5:4e:5c: 35:7c:4f:93:cf:13:28:0e:53:e3:af:ec:e9:d0:29: 81:70:f6:8b:cf:9e:04:b8:db:27:6c:b2:19:72:e3: d7:9f:3b:0f:99:02:20:3a:fa:9c:a6:d2:7d:10:09: 56:78:b3:ca:69:aa:80:f1:f4:cf:9e:71:a7:ae:69: 73:2f:17:26:8b:58:f0:db:78:21:20:62:c3:f5:7d: fe:f9:fa:0d:0e:39:0b:b8:5c:4f:de:c3:71:bc:7b: fe:1a:12:e2:da:9c:c5:05:ce:ea:a9:e0:12:e6:18: b4:6b:d9:b7:00:32:2c:ce:b5:4a:c5:2d:68:09:79: 91:da:92:7a:a8:c9:cc:53:39:4c:5c:a3:2a:ab:23: a4:94:68:ac:a8:0e:36:85:4a:6b:94:c1:e0:8e:4f: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:86:74:8D:28:91:FD:56:B2:D9:BA:D9:1C:09:4A:5F:72:70:86:D5 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bc:37:b5:17:6b:20:a7:02:55:dd:94:bf:5c:cb:30:07:23: bd:49:56:97:be:b6:e0:d9:85:c2:8f:97:4d:44:18:50:02:6d: 5b:bc:ba:8d:e3:b8:ab:15:f3:17:94:bc:09:3b:06:d6:fd:69: 49:4c:04:43:7e:46:d7:66:f0:70:7c:20:10:41:a4:99:8c:ec: 51:4e:ba:cc:b8:20:f7:6d:2f:ac:82:73:34:3a:ca:48:52:ec: 45:c2:8d:3b:6f:df:78:fb:0f:16:5e:d8:a9:bc:19:8c:b8:ee: b8:18:eb:12:f2:dc:5b:29:d8:62:32:a2:7c:f8:ea:31:61:98: 7a:a2:ab:18:06:a3:98:57:a7:86:5f:4e:aa:62:4d:99:60:8c: aa:45:0a:53:5e:64:85:c0:24:35:29:39:be:a7:73:ff:de:d1: e1:86:e5:47:f7:e9:5d:62:29:a2:21:84:cc:b1:b5:09:5a:c2: 1c:ef:56:e6:a7:d5:84:35:34:97:a9:06:21:2c:55:9c:a0:00: d5:98:dc:9a:45:93:6f:b7:c6:ee:d3:3e:fb:a9:91:0f:a5:35: ca:80:44:b4:72:af:8f:0f:bc:86:63:d3:61:f3:c3:de:14:bb: 40:31:56:e6:6d:0b:39:6b:28:78:c7:fc:0f:e9:52:7d:4c:1f: e3:c4:4d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwODIyMTcyMzAwWhcNMjUwODI5MTcyMzAwWjAYMRYwFAYD VQQDEw02OGE4YTc3NC1jZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvcsoDaA6zha6U7HzBhR3lRF8MQiYWY4xQQGC6aSwn1i2hZSGPGx0xACwPIi mj5e1xdqxrgkooiLjLcvxZqhIwIBECoI6eJQhNZroobQFjfJLnwEw4yHplr/dwkU NCCadt0tKoW1Tlw1fE+TzxMoDlPjr+zp0CmBcPaLz54EuNsnbLIZcuPXnzsPmQIg OvqcptJ9EAlWeLPKaaqA8fTPnnGnrmlzLxcmi1jw23ghIGLD9X3++foNDjkLuFxP 3sNxvHv+GhLi2pzFBc7qqeAS5hi0a9m3ADIszrVKxS1oCXmR2pJ6qMnMUzlMXKMq qyOklGisqA42hUprlMHgjk+fhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiGdI0o kf1Wstm62RwJSl9ycIbVMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZvDe1F2sgpwJV3ZS/XMswByO9SVaXvrbg2YXCj5dNRBhQAm1bvLqN 47irFfMXlLwJOwbW/WlJTARDfkbXZvBwfCAQQaSZjOxRTrrMuCD3bS+sgnM0OspI UuxFwo07b994+w8WXtipvBmMuO64GOsS8txbKdhiMqJ8+OoxYZh6oqsYBqOYV6eG X06qYk2ZYIyqRQpTXmSFwCQ1KTm+p3P/3tHhhuVH9+ldYimiIYTMsbUJWsIc71bm p9WENTSXqQYhLFWcoADVmNyaRZNvt8bu0z77qZEPpTXKgES0cq+PD7yGY9Nh88Pe FLtAMVbmbQs5ayh4x/wP6VJ9TB/jxE0+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:42 2025 by rpki-client