$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: fs4fgWkyMRRn4H3a6DioNPE2YqNciNCNwIfW0LzBCzs= Subject key identifier: D7:BB:0A:04:FD:E9:45:EE:DA:F9:BE:F5:02:2C:09:C5:BD:1B:5A:7C Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 04:57:24 +0000 Manifest this update: Sat 23 Aug 2025 04:57:23 +0000 Manifest next update: Sat 30 Aug 2025 04:57:23 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: wDNyerqpjd8QWJZXmZVNATK6JM8S4nCN2SLPvs2tj8s=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: lCLpkvr+Mt+EalvdDtGgIkdudrmtSBSHV/CQh7RNEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Aug 23 04:57:23 2025 GMT Not After : Aug 30 04:57:23 2025 GMT Subject: CN=68a94a33-5648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:57:cd:3a:62:fb:b5:a5:37:19:96:6b:df: 1b:5a:81:58:55:46:d3:eb:03:13:2d:7a:b3:d7:3f: d8:49:93:37:f9:f7:1e:cd:b1:02:88:2a:64:68:32: 78:e5:39:12:77:c3:70:2e:67:b6:ab:f9:d7:02:1e: 76:22:fb:bf:c0:29:4a:ab:4c:79:15:dc:5c:79:c6: ba:29:d9:96:b1:04:65:37:d7:0c:b2:c2:34:c4:9a: 8b:9c:15:29:fa:92:80:87:39:90:f8:02:22:3f:64: 13:1b:3e:3a:49:18:ba:b2:f5:5e:58:da:9d:ab:88: 6d:f9:1a:f7:0f:b2:b9:df:37:46:f5:a9:23:46:62: 4b:87:d3:80:d5:c0:eb:05:88:7f:05:64:05:70:39: 55:ec:a8:7f:29:d4:35:e0:b5:e0:65:b9:ae:e5:38: 9a:0a:cc:91:d1:fa:a4:32:93:14:4b:ae:2b:cf:b8: 09:05:d0:f6:80:77:87:42:5e:48:6c:64:02:bc:e7: 34:67:22:f1:5b:2e:52:9f:55:5b:d6:47:42:38:2f: 44:e3:b1:8f:2c:6e:2e:37:df:e4:c1:d9:de:4b:84: a1:5c:2c:7f:82:4a:ac:f3:8d:fe:c6:c8:2a:3e:9e: a7:f5:7c:3d:ad:69:52:55:18:f3:95:7a:33:29:19: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:0A:04:FD:E9:45:EE:DA:F9:BE:F5:02:2C:09:C5:BD:1B:5A:7C X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:96:94:d1:f0:09:aa:1e:ea:1f:bf:3d:55:51:09:a3:06:74: 7e:85:c3:22:26:f5:0e:8c:ca:99:ca:55:3b:63:84:c3:d6:80: 9b:70:23:4b:2c:3d:06:8b:1b:fd:6f:2a:b6:3c:fd:be:51:4d: 07:53:4a:61:e0:08:db:5f:9e:a7:6b:e4:68:13:d5:a6:f2:12: 87:19:c8:09:43:f6:e4:64:6c:21:18:15:48:5b:67:81:39:82: e0:7a:4e:96:b2:bd:5f:b4:05:fd:91:9b:d5:79:ad:61:a0:ba: 3d:69:d4:cf:8f:a5:17:74:ba:1e:a4:f3:37:b6:8c:62:ed:bf: f4:eb:a7:05:c0:71:59:f8:cf:18:23:54:a2:71:9a:e3:55:a6: 4f:bd:5a:ec:8c:2b:60:5a:71:7c:15:64:f9:62:6a:5f:76:e7: 8d:b2:ef:f0:c0:3e:56:2e:ab:88:a0:3e:3b:9c:47:18:9d:a7: b6:8d:c4:7e:db:8b:29:f4:f2:5e:0c:da:53:c6:ac:f3:0a:2b: d0:26:6c:31:63:5b:a7:83:11:b7:96:5d:38:cf:bb:ac:6d:00: cf:03:72:ce:19:e5:cb:97:e1:ac:67:b8:c3:2d:bc:58:d5:07: 2a:ef:c5:d8:38:fe:e7:da:b4:d5:43:1f:c6:f1:2c:52:48:b4: 59:64:1c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwODIzMDQ1NzIzWhcNMjUwODMwMDQ1NzIzWjAYMRYwFAYD VQQDEw02OGE5NGEzMy01NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaNXzTpi+7WlNxmWa98bWoFYVUbT6wMTLXqz1z/YSZM3+fcezbECiCpkaDJ4 5TkSd8NwLme2q/nXAh52Ivu/wClKq0x5Fdxceca6KdmWsQRlN9cMssI0xJqLnBUp +pKAhzmQ+AIiP2QTGz46SRi6svVeWNqdq4ht+Rr3D7K53zdG9akjRmJLh9OA1cDr BYh/BWQFcDlV7Kh/KdQ14LXgZbmu5TiaCsyR0fqkMpMUS64rz7gJBdD2gHeHQl5I bGQCvOc0ZyLxWy5Sn1Vb1kdCOC9E47GPLG4uN9/kwdneS4ShXCx/gkqs843+xsgq Pp6n9Xw9rWlSVRjzlXozKRnrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe7CgT9 6UXu2vm+9QIsCcW9G1p8MB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATlpTR8AmqHuofvz1VUQmjBnR+hcMiJvUOjMqZylU7Y4TD1oCbcCNL LD0Gixv9byq2PP2+UU0HU0ph4AjbX56na+RoE9Wm8hKHGcgJQ/bkZGwhGBVIW2eB OYLgek6Wsr1ftAX9kZvVea1hoLo9adTPj6UXdLoepPM3toxi7b/066cFwHFZ+M8Y I1SicZrjVaZPvVrsjCtgWnF8FWT5YmpfdueNsu/wwD5WLquIoD47nEcYnae2jcR+ 24sp9PJeDNpTxqzzCivQJmwxY1ungxG3ll04z7usbQDPA3LOGeXLl+GsZ7jDLbxY 1Qcq78XYOP7n2rTVQx/G8SxSSLRZZBwJ -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:06 2025 by rpki-client