$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: 50CgdVfiJjls1WDAigfB3QE3YoRiYXJCh9Yud1E7izU= Subject key identifier: 45:98:BD:07:0F:00:5F:4B:BC:87:27:0A:83:69:70:40:BC:25:33:53 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01EF Signing time: Sat 23 Aug 2025 02:39:59 +0000 Manifest this update: Sat 23 Aug 2025 02:39:59 +0000 Manifest next update: Sat 30 Aug 2025 02:39:59 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: dtayKjWtpEey3EbtsHi1HkSrLCUQOAsYfhQw0b5amUw=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Aug 23 02:39:59 2025 GMT Not After : Aug 30 02:39:59 2025 GMT Subject: CN=68a929ff-3fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:9f:e5:9d:e4:bd:4d:0a:75:ff:09:b7:34: 0f:06:42:c3:92:e1:2d:c3:96:01:94:64:46:f3:19: 52:a3:0b:b3:1a:87:b5:ea:90:19:d8:f1:b3:2f:d2: 27:8e:82:21:50:12:7f:d1:7f:d8:47:d5:9a:1c:c7: b3:76:8a:da:4a:b4:a8:0f:8d:7d:0c:1d:69:19:25: d1:a1:47:52:4f:f2:ce:86:a0:06:bd:00:31:e0:93: 9f:21:f2:05:e6:49:29:ce:76:01:93:60:70:0f:07: 00:ed:89:84:a1:1b:75:2e:0f:e2:ca:8c:46:94:e3: c1:5a:73:8c:d8:72:ce:12:a8:14:95:a3:b8:9c:bc: 19:1e:62:94:b1:5e:b2:8e:59:0d:c3:4d:27:28:8e: d9:a5:5a:a2:29:16:1f:88:fe:69:17:af:46:38:93: b1:2a:e5:aa:06:88:c1:c6:f4:fc:7b:d7:bd:58:7a: fb:dd:98:bd:bc:bb:2c:15:50:31:23:13:d8:9a:67: 3e:b6:6b:55:f3:5e:c2:03:70:ec:79:14:f0:92:5e: 11:30:b0:92:eb:1e:0c:79:2b:6a:68:69:0f:c0:35: e1:0b:30:a5:d1:8a:ea:d6:f1:80:15:c7:5e:48:5c: 9a:5d:11:0c:ac:61:6c:29:4d:8f:66:a4:bd:71:66: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:BD:07:0F:00:5F:4B:BC:87:27:0A:83:69:70:40:BC:25:33:53 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:39:ee:38:65:ae:23:58:6a:6f:5c:f1:88:2a:a8:fa:9d: 25:67:f2:d5:e3:d4:b6:53:6a:b4:05:3a:1d:3e:6f:18:75:c4: 7a:21:5f:16:cf:f9:6c:da:71:e0:93:73:2e:5f:98:a7:57:70: eb:70:ff:57:92:4b:a7:d1:49:bc:6b:39:32:51:c8:12:27:b8: 96:0a:f1:92:ed:c8:0c:c9:9f:64:7d:29:39:6d:4a:e9:84:12: 7e:3f:0a:2e:68:8d:f9:1e:6b:09:23:57:c0:f5:e4:6a:01:06: 02:a3:1e:f7:97:f4:93:3d:61:77:ab:88:69:9b:fe:30:9d:78: 56:b9:b1:1f:16:21:02:bb:0e:84:ac:f5:61:31:cf:aa:bc:59: 26:c5:69:69:fe:8a:8f:2e:29:73:ed:de:74:c5:4d:6f:ce:7c: 9d:8c:61:43:6f:5a:67:9b:05:24:b7:50:95:08:12:a2:23:94: fe:98:b8:01:53:e3:d6:c0:38:83:d4:ea:9c:bc:73:bf:9c:c0: ae:fc:95:97:48:dc:9a:57:a2:e4:e3:ea:b3:23:ab:08:95:d6: b2:45:c3:58:f5:96:f1:7b:2f:52:34:c2:65:32:c3:e4:37:b4: 08:f2:80:07:c2:d0:9e:7e:37:6b:10:75:12:4c:5a:47:3a:c5: 2f:f2:f5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwODIzMDIzOTU5WhcNMjUwODMwMDIzOTU5WjAYMRYwFAYD VQQDEw02OGE5MjlmZi0zZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSmf5Z3kvU0Kdf8JtzQPBkLDkuEtw5YBlGRG8xlSowuzGoe16pAZ2PGzL9In joIhUBJ/0X/YR9WaHMezdoraSrSoD419DB1pGSXRoUdST/LOhqAGvQAx4JOfIfIF 5kkpznYBk2BwDwcA7YmEoRt1Lg/iyoxGlOPBWnOM2HLOEqgUlaO4nLwZHmKUsV6y jlkNw00nKI7ZpVqiKRYfiP5pF69GOJOxKuWqBojBxvT8e9e9WHr73Zi9vLssFVAx IxPYmmc+tmtV817CA3DseRTwkl4RMLCS6x4MeStqaGkPwDXhCzCl0Yrq1vGAFcde SFyaXREMrGFsKU2PZqS9cWaoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWYvQcP AF9LvIcnCoNpcEC8JTNTMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBchDnuOGWuI1hqb1zxiCqo+p0lZ/LV49S2U2q0BTodPm8YdcR6IV8W z/ls2nHgk3MuX5inV3DrcP9Xkkun0Um8azkyUcgSJ7iWCvGS7cgMyZ9kfSk5bUrp hBJ+PwouaI35HmsJI1fA9eRqAQYCox73l/STPWF3q4hpm/4wnXhWubEfFiECuw6E rPVhMc+qvFkmxWlp/oqPLilz7d50xU1vznydjGFDb1pnmwUkt1CVCBKiI5T+mLgB U+PWwDiD1OqcvHO/nMCu/JWXSNyaV6Lk4+qzI6sIldayRcNY9Zbxey9SNMJlMsPk N7QI8oAHwtCefjdrEHUSTFpHOsUv8vUM -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:47 2025 by rpki-client