$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: l4gNy21i+mFt1R6zFt2NuSNSk/aJZksDjOmZ4f926iQ= Subject key identifier: 73:26:93:80:79:1A:F1:47:3B:E9:96:13:B0:DA:81:7C:1F:47:2D:C2 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CE2 Signing time: Fri 22 Aug 2025 18:14:26 +0000 Manifest this update: Fri 22 Aug 2025 18:14:26 +0000 Manifest next update: Fri 29 Aug 2025 18:14:26 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: LbKCqxL7h+sc8yaSlUDiH3sprmG8KMmXExwMqAY2CLg=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: pjQH54VRYOq5PMku0jKMJ5PyMS22lF1mGoeoJ8lvLEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Aug 22 18:14:26 2025 GMT Not After : Aug 29 18:14:26 2025 GMT Subject: CN=68a8b382-5c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:26:f1:02:6d:bb:c2:76:56:57:ec:24:a8: c5:fa:0c:37:d0:2b:e6:1e:8c:a5:db:e4:ff:b3:4b: 2e:c0:54:9a:9b:95:af:3d:4f:ca:87:17:0d:a0:a6: 54:e0:2a:52:e5:4a:f8:79:3c:c7:36:56:91:dc:ce: 91:0d:f5:c8:7b:26:9c:d4:3e:5d:7c:9e:d1:9e:55: fb:3f:af:a4:cc:cf:29:19:1d:e5:03:cd:2f:a1:3a: 59:b9:b4:9d:6b:14:e0:1b:f0:8e:1c:bf:3e:1b:3d: 10:6e:e0:4a:be:f0:19:4e:05:36:78:9c:ca:54:46: 47:e2:1e:ed:90:96:e2:4c:46:07:92:db:46:16:a9: ec:05:a6:be:71:7b:6f:60:0a:50:96:bc:a3:ef:18: 06:04:35:46:b3:6a:55:58:b9:cd:69:9a:d1:f1:28: cd:45:a9:33:26:e6:aa:48:9d:a1:fc:ce:fb:3c:3a: eb:a2:c6:ea:ec:29:2d:35:7d:a6:6e:79:ed:27:e0: ba:d1:a1:28:87:4b:c2:ba:92:07:16:d2:37:8b:e5: 50:71:c4:ef:63:01:f0:1e:75:3b:f1:24:f0:1b:99: 10:35:e4:63:fe:63:2b:f1:37:81:77:19:66:60:af: 7b:7a:41:2a:37:77:54:4b:1d:76:8a:77:3d:f8:51: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:26:93:80:79:1A:F1:47:3B:E9:96:13:B0:DA:81:7C:1F:47:2D:C2 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ec:54:28:33:a6:3c:58:68:d1:ac:a5:75:ca:d1:d8:e4:1c: b7:7d:30:62:27:78:e6:7b:98:0e:80:bd:60:33:f9:68:c1:d5: fb:5d:95:4a:62:a8:24:67:ae:63:48:f4:fd:46:80:f4:a3:d3: 12:4a:3f:21:7f:4d:1f:79:eb:26:72:af:fd:b7:b4:1f:65:c7: 47:e9:2e:07:46:c6:2e:8e:fa:06:c9:48:3d:31:5c:c5:ab:0a: fa:ba:42:6e:3d:c7:cf:43:41:4a:d4:0e:1f:b5:3e:92:eb:ba: b0:82:48:ec:d2:3f:2f:3a:a5:62:a8:b4:fc:cd:8e:03:71:26: e2:eb:29:2b:d2:72:d2:8c:83:dc:06:15:36:3a:c2:03:1a:6b: 40:58:e5:88:a1:92:d2:3f:08:0e:17:f5:b2:b5:60:c2:5e:89: b1:20:a4:c3:71:f8:80:8a:d4:50:bf:88:d9:29:4c:6b:70:f3: 8b:2d:2c:e5:1c:3b:77:11:6a:27:07:4c:1c:cc:7f:f7:c9:1a: c2:0f:7e:2e:f4:17:46:2b:7e:8e:81:c8:40:78:c2:71:96:c6: c2:2a:35:ac:41:ff:27:4f:17:7f:c0:4a:85:1c:8e:fa:0d:c5: c4:e5:94:19:8c:ca:01:48:aa:99:e2:7b:45:9e:45:e2:7b:cf: e3:a8:2d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwODIyMTgxNDI2WhcNMjUwODI5MTgxNDI2WjAYMRYwFAYD VQQDEw02OGE4YjM4Mi01Yzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQYm8QJtu8J2VlfsJKjF+gw30CvmHoyl2+T/s0suwFSam5WvPU/KhxcNoKZU 4CpS5Ur4eTzHNlaR3M6RDfXIeyac1D5dfJ7RnlX7P6+kzM8pGR3lA80voTpZubSd axTgG/COHL8+Gz0QbuBKvvAZTgU2eJzKVEZH4h7tkJbiTEYHkttGFqnsBaa+cXtv YApQlryj7xgGBDVGs2pVWLnNaZrR8SjNRakzJuaqSJ2h/M77PDrrosbq7CktNX2m bnntJ+C60aEoh0vCupIHFtI3i+VQccTvYwHwHnU78STwG5kQNeRj/mMr8TeBdxlm YK97ekEqN3dUSx12inc9+FHV+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMmk4B5 GvFHO+mWE7DagXwfRy3CMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB7FQoM6Y8WGjRrKV1ytHY5By3fTBiJ3jme5gOgL1gM/lowdX7XZVK YqgkZ65jSPT9RoD0o9MSSj8hf00feesmcq/9t7QfZcdH6S4HRsYujvoGyUg9MVzF qwr6ukJuPcfPQ0FK1A4ftT6S67qwgkjs0j8vOqViqLT8zY4DcSbi6ykr0nLSjIPc BhU2OsIDGmtAWOWIoZLSPwgOF/WytWDCXomxIKTDcfiAitRQv4jZKUxrcPOLLSzl HDt3EWonB0wczH/3yRrCD34u9BdGK36OgchAeMJxlsbCKjWsQf8nTxd/wEqFHI76 DcXE5ZQZjMoBSKqZ4ntFnkXie8/jqC1E -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:16 2025 by rpki-client