$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: 1//eGZoTC15uHrGFdSDFOTv+dAHsnqsu0Lr8ETKoDIE= Subject key identifier: D7:94:D1:B7:02:DF:0C:E8:DF:A6:CD:E3:FE:0C:45:9F:0C:EF:C9:64 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 028C Signing time: Sat 23 Aug 2025 01:53:01 +0000 Manifest this update: Sat 23 Aug 2025 01:53:01 +0000 Manifest next update: Sat 30 Aug 2025 01:53:00 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: oh4eY4KEDHCXwF4i2xSfn3x1iqLFh3n/iMexXUXE/Po=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Aug 23 01:53:01 2025 GMT Not After : Aug 30 01:53:00 2025 GMT Subject: CN=68a91efd-d7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:e6:e2:e4:a7:2c:c6:46:23:b8:e2:f4:eb: 42:6a:37:88:92:bc:56:66:ea:8b:47:67:17:a6:38: 08:dc:e0:28:06:61:ab:23:56:5c:48:58:05:a2:b9: ef:64:5d:0d:d7:28:b3:05:32:ff:15:9e:0c:a5:36: 45:48:8e:d5:55:0a:01:3e:14:74:72:a8:bc:43:1b: 34:81:3d:40:f0:6f:82:7c:5b:e0:da:01:0b:33:97: 99:c6:99:67:a9:ac:cb:0f:ba:c8:69:aa:22:13:79: 60:e3:15:b6:f9:e0:9c:9c:11:11:53:66:93:86:a3: 85:8c:55:97:7c:73:ed:b0:e9:7c:4a:8e:d6:eb:fe: a5:e4:1f:cc:0b:e9:7a:49:e2:b2:a4:2e:51:23:97: b3:d0:4f:0c:22:10:e8:0e:dc:42:11:50:a1:4c:b1: b7:97:03:70:6a:f3:44:5b:23:72:49:7f:0a:91:8f: 11:81:88:87:30:90:1d:39:70:54:bd:da:33:4f:e9: d3:62:d6:6a:6a:97:93:33:ed:f3:e9:66:8f:52:05: d0:8d:18:e8:5c:0e:08:5f:de:6d:96:ea:af:36:0d: d2:d4:cf:63:71:7d:0c:18:f2:57:f2:01:29:7e:8c: 3f:6f:2d:71:ec:2c:b3:4e:3c:5e:a4:a0:e6:2a:94: a8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:D1:B7:02:DF:0C:E8:DF:A6:CD:E3:FE:0C:45:9F:0C:EF:C9:64 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3e:e2:60:d4:b5:fc:5d:28:f2:dc:42:62:87:3a:89:d3:08: 47:a2:63:72:ad:b8:5c:07:b4:f2:bf:86:e4:c5:48:e3:9a:41: 3c:f3:cb:28:03:d1:2b:91:a9:8b:2c:f7:24:03:5c:ae:73:c3: 28:92:f2:e1:c9:e6:bf:0f:0b:84:4a:6f:38:6e:71:cf:fb:b0: 2c:55:08:d9:c6:0f:3a:90:69:77:e2:f1:3c:4a:01:ef:7c:80: 5d:e3:80:5c:5a:39:e6:0f:e2:a1:23:af:98:b2:c6:c6:0e:a0: 38:b7:2d:1e:88:5b:29:a8:fd:44:08:0a:69:a5:3e:9d:1b:64: 43:86:b8:dc:f4:38:72:85:8e:bf:47:b2:37:72:6b:67:b3:76: 5a:af:11:f2:9b:88:1d:2d:31:5a:ad:bc:d9:29:14:ed:80:15: ef:25:58:7e:a1:8d:ee:5b:18:ec:0b:85:72:3c:49:7e:f1:db: 4c:17:b8:6a:7a:f4:2d:8e:81:26:a4:e3:cd:21:0a:85:f3:99: 94:ab:73:09:e0:87:23:a4:61:24:b7:8c:3c:08:8a:fd:12:6b: 8c:51:1b:b8:ed:1d:02:4f:7a:94:bb:9e:e8:f9:b4:dc:cd:4d: 27:b6:0f:f0:e4:56:0a:43:75:54:29:54:ba:99:f5:2a:8a:6c: 93:fe:b2:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwODIzMDE1MzAxWhcNMjUwODMwMDE1MzAwWjAYMRYwFAYD VQQDEw02OGE5MWVmZC1kN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jHm4uSnLMZGI7ji9OtCajeIkrxWZuqLR2cXpjgI3OAoBmGrI1ZcSFgFornv ZF0N1yizBTL/FZ4MpTZFSI7VVQoBPhR0cqi8Qxs0gT1A8G+CfFvg2gELM5eZxpln qazLD7rIaaoiE3lg4xW2+eCcnBERU2aThqOFjFWXfHPtsOl8So7W6/6l5B/MC+l6 SeKypC5RI5ez0E8MIhDoDtxCEVChTLG3lwNwavNEWyNySX8KkY8RgYiHMJAdOXBU vdozT+nTYtZqapeTM+3z6WaPUgXQjRjoXA4IX95tluqvNg3S1M9jcX0MGPJX8gEp fow/by1x7CyzTjxepKDmKpSo7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeU0bcC 3wzo36bN4/4MRZ8M78lkMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOPuJg1LX8XSjy3EJihzqJ0whHomNyrbhcB7Tyv4bkxUjjmkE888so A9ErkamLLPckA1yuc8MokvLhyea/DwuESm84bnHP+7AsVQjZxg86kGl34vE8SgHv fIBd44BcWjnmD+KhI6+YssbGDqA4ty0eiFspqP1ECApppT6dG2RDhrjc9DhyhY6/ R7I3cmtns3ZarxHym4gdLTFarbzZKRTtgBXvJVh+oY3uWxjsC4VyPEl+8dtMF7hq evQtjoEmpOPNIQqF85mUq3MJ4IcjpGEkt4w8CIr9EmuMURu47R0CT3qUu57o+bTc zU0ntg/w5FYKQ3VUKVS6mfUqimyT/rLO -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:06 2025 by rpki-client