$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: Wxu+koAp9loEFKgB5DoWSKpnzWcB/g45wwULkN16hyc= Subject key identifier: E3:92:05:37:A2:DE:1A:F6:35:F1:9B:1B:FF:AD:89:D1:FA:38:FC:E3 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 349D Signing time: Fri 04 Jul 2025 14:54:13 +0000 Manifest this update: Fri 04 Jul 2025 14:54:13 +0000 Manifest next update: Fri 11 Jul 2025 14:54:13 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: IUiwcx7kOwNc9g57xVstLVcpw3XTjflE0WhVEEfxTdQ=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Jul 4 14:54:13 2025 GMT Not After : Jul 11 14:54:13 2025 GMT Subject: CN=6867eb15-09d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:d1:7f:11:d1:6f:b7:cf:e6:f7:20:02:51: 7e:ba:34:d2:ee:05:45:7d:ad:fe:a9:de:cd:aa:07: 6d:e8:f6:07:15:6f:b4:76:a7:fe:82:97:c3:76:f1: 33:ad:ab:bc:47:20:b2:26:2e:05:ee:5a:38:d3:1c: 44:0f:30:d0:7f:97:2e:5c:11:32:76:a5:95:71:de: ca:f2:45:b1:68:ad:25:a7:0a:af:f0:01:76:af:e4: 95:54:b3:06:e0:30:b6:87:7e:d7:5d:08:57:56:5b: 00:f3:e5:a1:6c:7b:97:4f:cd:b4:13:c9:43:1d:6c: ab:44:6a:d4:c6:9d:8a:b7:20:08:a7:e3:19:ac:ff: a3:d5:d1:21:7f:d3:86:1f:4f:32:40:da:85:36:e6: 9b:05:76:9d:c7:10:46:ea:58:7c:5b:e7:a6:92:74: 64:47:53:9c:f8:7e:38:80:a7:da:76:50:72:f8:d3: 80:34:db:70:bc:81:c2:77:91:2b:24:90:a6:40:a6: 14:f6:d7:ac:1b:22:b1:dc:85:cb:8b:d3:ee:69:9a: 28:16:cb:7b:db:1c:07:c5:ad:4f:2a:52:63:69:d0: 25:ad:63:6d:0d:9b:82:96:c0:1c:0d:02:f4:c7:24: 5a:ba:04:4a:40:ea:4d:61:bc:62:73:6b:04:4e:7d: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:05:37:A2:DE:1A:F6:35:F1:9B:1B:FF:AD:89:D1:FA:38:FC:E3 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:e6:0b:98:ad:86:04:16:59:c7:33:0d:4b:ca:c1:2d:b4: a0:ac:c8:6b:f8:73:aa:1c:1f:77:3f:fc:35:47:eb:15:4e:61: 18:16:be:db:0f:db:fd:88:20:0f:be:d2:4a:72:68:72:4b:e3: ef:7c:87:ff:c4:05:8f:28:81:f1:cf:ea:a9:ce:eb:b4:bc:c5: 40:46:28:6a:e1:1c:1d:ef:22:06:0f:67:7b:d4:f8:f0:5e:1e: ba:56:2a:ca:61:ca:bf:e2:e1:fd:ca:c0:44:ed:02:f2:ec:44: 99:ed:2c:5f:e6:52:de:d3:ad:a5:4b:2a:57:17:50:41:01:bd: f3:e7:e2:a9:0d:b5:51:b9:e3:6b:5e:55:59:a1:ab:b5:d8:ee: 5e:b0:fb:ac:ea:30:db:44:47:fa:55:34:3f:cf:3a:ca:7b:aa: 1e:b0:c3:57:2b:32:70:cc:67:f1:e0:58:1a:34:d4:fa:a5:be: d0:6f:6a:ee:33:db:fa:95:8d:6c:d8:c2:b9:96:fd:ae:1d:c1: 7b:8c:28:ed:50:36:48:4f:a1:e9:ad:6e:11:fb:4d:54:3f:fa: c8:de:35:cb:0b:d4:75:d7:63:1e:da:9d:87:2a:bb:97:57:92: f1:79:e4:cc:a5:bc:5b:0a:42:57:c6:ac:68:e9:8d:32:7f:7f: ae:b7:81:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwNzA0MTQ1NDEzWhcNMjUwNzExMTQ1NDEzWjAYMRYwFAYD VQQDEw02ODY3ZWIxNS0wOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyHRfxHRb7fP5vcgAlF+ujTS7gVFfa3+qd7Nqgdt6PYHFW+0dqf+gpfDdvEz rau8RyCyJi4F7lo40xxEDzDQf5cuXBEydqWVcd7K8kWxaK0lpwqv8AF2r+SVVLMG 4DC2h37XXQhXVlsA8+WhbHuXT820E8lDHWyrRGrUxp2KtyAIp+MZrP+j1dEhf9OG H08yQNqFNuabBXadxxBG6lh8W+emknRkR1Oc+H44gKfadlBy+NOANNtwvIHCd5Er JJCmQKYU9tesGyKx3IXLi9PuaZooFst72xwHxa1PKlJjadAlrWNtDZuClsAcDQL0 xyRaugRKQOpNYbxic2sETn05WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOSBTei 3hr2NfGbG/+tidH6OPzjMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkEuYLmK2GBBZZxzMNS8rBLbSgrMhr+HOqHB93P/w1R+sVTmEYFr7b D9v9iCAPvtJKcmhyS+PvfIf/xAWPKIHxz+qpzuu0vMVARihq4Rwd7yIGD2d71Pjw Xh66VirKYcq/4uH9ysBE7QLy7ESZ7Sxf5lLe062lSypXF1BBAb3z5+KpDbVRueNr XlVZoau12O5esPus6jDbREf6VTQ/zzrKe6oesMNXKzJwzGfx4FgaNNT6pb7Qb2ru M9v6lY1s2MK5lv2uHcF7jCjtUDZIT6HprW4R+01UP/rI3jXLC9R112Me2p2HKruX V5LxeeTMpbxbCkJXxqxo6Y0yf3+ut4EW -----END CERTIFICATE-----Generated at Sat Jul 5 11:31:53 2025 by rpki-client