$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: Dxdd7lmoCzdYuT5UBnvqyQvt4gSuN1YLrsCtJdJqC4U= Subject key identifier: A0:8F:A4:1A:8C:C8:E7:23:3F:96:9D:DA:C5:D4:B4:10:C5:C9:77:F4 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 0271 Signing time: Tue 01 Jul 2025 02:25:41 +0000 Manifest this update: Tue 01 Jul 2025 02:25:41 +0000 Manifest next update: Tue 08 Jul 2025 02:25:41 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: TOXhto1EvvbPkYAimbLXaJsfbXJcJ3hMoA/mmgf+/s4=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Jul 1 02:25:41 2025 GMT Not After : Jul 8 02:25:41 2025 GMT Subject: CN=68634725-1820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:76:63:f7:70:a6:55:b2:b1:f4:0a:a5:02: 5c:93:32:e7:c6:e7:db:10:5f:2b:7d:2d:a7:13:76: 33:99:17:cd:02:14:a3:67:4e:6d:7b:3c:3a:d7:23: 58:ac:d4:9e:29:1d:85:4a:64:d4:06:0a:52:e1:e8: a4:26:6a:6f:a5:aa:e1:92:94:89:95:5b:4d:24:3c: 84:77:7b:c6:7e:75:e1:ea:68:f7:59:81:b4:99:af: e3:45:9b:5f:45:87:5d:ff:27:3b:18:4e:5d:5f:35: 8e:32:b6:60:ca:34:b8:32:d9:95:7c:60:af:40:2c: 80:b5:b5:87:d5:55:dc:de:52:5f:82:84:9f:47:08: bf:db:36:01:9c:44:62:ac:13:79:75:18:46:85:1a: 2f:1e:0c:79:44:9f:4f:74:f7:d2:99:9e:6c:b6:ff: 80:31:67:59:d6:0b:7a:80:60:8b:d1:d2:02:54:2f: 1d:ed:aa:b3:01:36:50:8e:d8:a9:c2:aa:ce:08:4c: 4d:97:b3:a0:11:b1:10:9e:2f:cb:cf:14:af:f2:79: b0:8e:9d:3f:a3:d0:2d:fe:93:2f:33:10:8e:64:63: 31:eb:fb:48:73:95:a3:f1:58:ef:62:80:8a:9b:bd: ec:b2:06:20:56:3a:f1:a5:9a:ff:bd:53:a1:c5:97: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:A4:1A:8C:C8:E7:23:3F:96:9D:DA:C5:D4:B4:10:C5:C9:77:F4 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:09:0c:94:b8:49:3f:56:50:8f:56:e1:a3:09:40:22:ea:aa: 2a:ef:b3:83:c7:c3:7b:02:27:26:70:0c:fd:a0:1d:f7:67:a6: 0d:b1:8e:ec:52:6d:b7:3d:01:ab:b3:7c:4c:f1:15:9b:76:2e: 45:4f:57:3d:4f:1b:29:f4:b5:f9:c0:d0:de:db:06:fe:cc:56: 32:bc:bd:c7:53:dc:61:18:9a:bc:b8:19:4c:d9:c0:91:83:cd: 6a:db:fc:e3:a4:d1:6a:49:05:d4:df:68:7d:12:47:68:78:41: b7:04:c6:cf:50:9c:35:ce:da:f7:a7:79:ac:b9:0d:6b:0c:ad: f7:60:c1:eb:ea:74:ca:e4:1a:b5:97:b5:21:ac:8f:28:84:42: be:ae:dd:ab:ce:61:78:8f:4b:97:9f:cd:79:2a:e6:11:d0:4b: 24:db:b4:40:54:93:3e:a9:1e:94:13:2f:08:f8:05:7e:98:cd: c9:c1:02:c2:1d:c9:46:44:5e:6e:53:47:4a:74:ef:0b:0e:f2: d9:95:21:00:c3:56:a1:17:4e:98:f0:57:79:5e:be:95:ab:f2: 66:99:9c:73:8e:29:4c:53:0f:d9:23:7c:88:b3:a9:42:ff:7b: 9c:bb:ea:de:9c:d4:8c:13:fe:1a:df:d7:b3:f5:7c:ee:dd:6a: de:4e:04:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwNzAxMDIyNTQxWhcNMjUwNzA4MDIyNTQxWjAYMRYwFAYD VQQDEw02ODYzNDcyNS0xODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6t2Y/dwplWysfQKpQJckzLnxufbEF8rfS2nE3YzmRfNAhSjZ05tezw61yNY rNSeKR2FSmTUBgpS4eikJmpvparhkpSJlVtNJDyEd3vGfnXh6mj3WYG0ma/jRZtf RYdd/yc7GE5dXzWOMrZgyjS4MtmVfGCvQCyAtbWH1VXc3lJfgoSfRwi/2zYBnERi rBN5dRhGhRovHgx5RJ9PdPfSmZ5stv+AMWdZ1gt6gGCL0dICVC8d7aqzATZQjtip wqrOCExNl7OgEbEQni/LzxSv8nmwjp0/o9At/pMvMxCOZGMx6/tIc5Wj8VjvYoCK m73ssgYgVjrxpZr/vVOhxZduawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCPpBqM yOcjP5ad2sXUtBDFyXf0MB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkCQyUuEk/VlCPVuGjCUAi6qoq77ODx8N7AicmcAz9oB33Z6YNsY7s Um23PQGrs3xM8RWbdi5FT1c9Txsp9LX5wNDe2wb+zFYyvL3HU9xhGJq8uBlM2cCR g81q2/zjpNFqSQXU32h9EkdoeEG3BMbPUJw1ztr3p3msuQ1rDK33YMHr6nTK5Bq1 l7UhrI8ohEK+rt2rzmF4j0uXn815KuYR0Esk27RAVJM+qR6UEy8I+AV+mM3JwQLC HclGRF5uU0dKdO8LDvLZlSEAw1ahF06Y8Fd5Xr6Vq/JmmZxzjilMUw/ZI3yIs6lC /3ucu+renNSME/4a39ez9Xzu3WreTgSk -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:33 2025 by rpki-client