$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: JRdflEiaBPZQn50V8ITuwkEnxWN034w/BD3VERVidEc= Subject key identifier: 29:E9:17:9B:AF:07:CF:24:BC:E4:B9:84:69:29:8A:1A:58:CB:91:E4 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 01CE Signing time: Sat 23 Aug 2025 02:57:07 +0000 Manifest this update: Sat 23 Aug 2025 02:57:06 +0000 Manifest next update: Sat 30 Aug 2025 02:57:06 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: qar44E6EiY1F8t6Ykqd7x3mEN6LrCMgRB5DlNqdSDE0=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 285R3oYGxnsmMAJjm1+eYdJApQO5EQQ/gOWcq+lr5pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Aug 23 02:57:06 2025 GMT Not After : Aug 30 02:57:06 2025 GMT Subject: CN=68a92e03-ed34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:f5:32:5d:c0:7a:78:73:c7:ff:05:2e:45: 24:f0:d2:65:71:f4:77:a6:46:5e:4a:b4:be:1a:91: e6:03:2f:43:da:e7:fd:3e:e1:1c:5d:d0:0e:4a:c5: e6:9e:b8:bd:92:57:f0:bb:07:b5:21:9b:58:fc:3f: d1:56:4d:2d:64:7f:4b:e6:6f:f6:5f:2a:b0:a7:97: 10:b7:6e:92:ba:9f:ab:22:2d:5c:a4:c3:fd:88:6f: da:2a:e9:25:22:c9:cf:85:1a:b0:c2:65:67:48:83: 11:c7:d6:9f:11:50:56:6b:ed:ae:65:1a:69:27:25: 9f:c2:ec:b5:0e:33:33:a4:61:4a:ad:51:5e:ef:36: ac:04:ba:f4:5a:db:e2:8d:e1:ab:57:64:27:c3:13: 83:02:40:9a:51:fa:f2:5e:78:74:ff:36:17:58:d7: 34:1a:56:42:94:5a:f3:01:b2:63:d6:c5:23:0b:37: 00:ac:4d:af:95:fd:26:fa:e7:c8:c4:a6:3a:a2:bd: a9:a7:c9:7e:c5:d5:87:95:fa:18:a3:69:7b:2c:a6: 48:68:be:47:84:a2:e6:28:bc:a4:0b:64:3c:ec:d9: 8f:5c:ea:dd:4d:db:b0:79:9d:55:40:82:f8:cc:23: 14:9a:f5:77:1e:ea:ab:6c:7b:d2:62:73:c1:ec:48: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E9:17:9B:AF:07:CF:24:BC:E4:B9:84:69:29:8A:1A:58:CB:91:E4 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d1:08:75:d4:4b:4f:89:7d:7c:af:27:9b:54:2a:31:44:e5: f8:60:96:63:b7:55:09:51:d7:01:6a:bf:05:b0:fb:df:03:1a: d1:a3:c3:0f:b9:58:ae:11:29:39:74:fe:c6:99:6a:b1:17:20: 7e:75:4b:36:59:13:ee:74:ed:2b:21:de:40:54:23:9f:21:35: e5:bc:0a:63:a4:b3:d9:8b:3e:1b:0f:cc:ec:2d:61:16:e1:6e: 2c:97:bc:e9:32:43:cb:71:e9:a0:c3:e7:df:c7:fe:3b:5f:17: a3:91:bf:49:55:f6:83:f1:a2:d4:d7:fc:ee:06:bc:84:21:04: f3:35:e0:78:f2:64:e7:7e:77:c8:72:60:01:28:0a:07:87:47: 14:7f:9c:37:88:d0:1c:ba:de:55:16:ac:36:98:90:7c:84:39: 35:40:08:a8:e7:19:df:bc:f5:ea:0c:c5:28:6a:ff:2d:1b:9d: 19:7a:09:c8:30:b6:67:9e:34:38:2a:52:98:00:ad:30:35:9e: 29:8c:44:93:ad:90:d0:4a:b2:83:34:71:99:fe:28:8b:cd:ca: 89:25:93:14:09:48:ad:65:2d:88:a0:a3:3c:fd:76:c5:29:70: 10:b4:f9:69:5e:6a:75:d5:a1:c2:94:68:80:51:c6:1d:07:bc: ba:9a:bc:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUwODIzMDI1NzA2WhcNMjUwODMwMDI1NzA2WjAYMRYwFAYD VQQDEw02OGE5MmUwMy1lZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvn1Ml3Aenhzx/8FLkUk8NJlcfR3pkZeSrS+GpHmAy9D2uf9PuEcXdAOSsXm nri9klfwuwe1IZtY/D/RVk0tZH9L5m/2Xyqwp5cQt26Sup+rIi1cpMP9iG/aKukl IsnPhRqwwmVnSIMRx9afEVBWa+2uZRppJyWfwuy1DjMzpGFKrVFe7zasBLr0Wtvi jeGrV2QnwxODAkCaUfryXnh0/zYXWNc0GlZClFrzAbJj1sUjCzcArE2vlf0m+ufI xKY6or2pp8l+xdWHlfoYo2l7LKZIaL5HhKLmKLykC2Q87NmPXOrdTduweZ1VQIL4 zCMUmvV3HuqrbHvSYnPB7EhGvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnpF5uv B88kvOS5hGkpihpYy5HkMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz0Qh11EtPiX18ryebVCoxROX4YJZjt1UJUdcBar8FsPvfAxrRo8MP uViuESk5dP7GmWqxFyB+dUs2WRPudO0rId5AVCOfITXlvApjpLPZiz4bD8zsLWEW 4W4sl7zpMkPLcemgw+ffx/47Xxejkb9JVfaD8aLU1/zuBryEIQTzNeB48mTnfnfI cmABKAoHh0cUf5w3iNAcut5VFqw2mJB8hDk1QAio5xnfvPXqDMUoav8tG50ZegnI MLZnnjQ4KlKYAK0wNZ4pjESTrZDQSrKDNHGZ/iiLzcqJJZMUCUitZS2IoKM8/XbF KXAQtPlpXmp11aHClGiAUcYdB7y6mryz -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:41 2025 by rpki-client