$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: uu+/ihBmErFAjoCpEL4KlGNocTVO6y4mLmbBwMFhJzA= Subject key identifier: 86:2A:5F:4E:44:EA:C5:D4:94:AD:CE:6A:38:DD:0F:30:26:0F:C7:3D Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:20:55 +0000 Manifest this update: Sat 23 Aug 2025 08:20:54 +0000 Manifest next update: Sat 30 Aug 2025 08:20:54 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: bYc8/pfS5mfRXK3CzVLJBQ+Fr3E5sj1KtLEkLfIFZUs=) 2: 78E109F471EE11F090B2AB18C4F9AE02.roa (hash: ysFQliYbv2mMjNpbLYcTPzRzF6e5HrJI3THvWyXjDxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Aug 23 08:20:54 2025 GMT Not After : Aug 30 08:20:54 2025 GMT Subject: CN=68a979e7-1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:0c:2b:42:8f:fe:0c:a0:45:ea:ea:56:33: 66:e6:3e:27:98:7b:61:af:3b:5e:05:a7:83:14:fb: b8:1e:24:98:0a:cd:b2:14:79:ee:8c:fe:1f:05:51: 80:9d:e2:fb:2c:58:59:d3:a8:cc:58:d6:d7:f8:04: db:e9:6f:2f:ed:1d:52:95:f3:6b:3f:63:01:ed:53: 59:5a:0e:48:07:a4:95:0d:2c:ce:43:dd:c7:d7:8f: 03:82:51:f4:d0:91:43:cb:4a:6f:d9:40:87:01:01: 54:db:4b:cb:19:77:ae:bd:cc:46:d2:bb:e2:5d:7d: 56:59:9e:87:c9:eb:c0:db:d2:f5:1d:9c:76:22:74: 56:c8:07:d3:81:77:4c:91:7a:d5:97:9b:9c:c3:94: 10:80:fe:19:46:4c:47:db:d6:48:47:6f:29:5b:0a: 55:26:e7:36:48:73:f2:d7:71:a5:78:21:6a:bf:81: 03:ea:ad:48:18:9a:28:39:6f:4d:2b:fe:74:33:38: a6:d9:7c:89:69:a8:90:43:c0:48:be:37:b9:21:06: 43:95:ee:4b:22:45:7d:23:35:fb:27:23:5b:25:51: 76:34:e5:17:06:7d:1d:23:bb:45:85:58:61:d4:10: 3f:07:80:d9:e3:43:50:fe:86:1c:4a:53:5c:87:0b: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:5F:4E:44:EA:C5:D4:94:AD:CE:6A:38:DD:0F:30:26:0F:C7:3D X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:b9:6d:d9:7b:d1:76:b5:ee:59:79:79:0f:7b:db:30:46: e1:f2:a4:42:1f:65:34:81:46:cd:fa:d2:82:81:c1:f8:a6:88: 78:9a:da:c1:97:88:29:e2:a8:24:52:83:6b:81:56:5b:27:7a: 49:8a:05:89:45:6c:e8:e4:cb:21:15:c5:96:3f:e5:62:9f:aa: 4e:4a:c5:ed:4f:07:6f:68:44:e4:cb:58:8a:52:2a:5c:89:29: 1b:e0:53:6a:f3:8c:80:a1:86:23:e5:00:2b:ec:4e:e6:e6:70: 41:01:f9:26:08:d3:02:64:44:20:34:b1:1f:94:c1:72:12:ca: bb:d6:0e:97:00:98:8c:2e:49:f0:eb:3f:48:27:8e:0b:a4:e5: 19:e7:6c:0b:61:e3:48:5e:9b:38:16:c3:b5:39:9f:ed:ae:7d: 52:1a:f3:38:a6:f0:f3:c2:31:51:48:85:07:b8:57:4f:46:d0: f2:c0:a5:a1:95:5f:92:7b:c9:c4:7a:79:df:51:11:e9:ba:0e: 75:a9:00:03:fc:5c:76:a7:9a:bb:c4:ec:0c:e2:35:73:24:0d: 84:a0:a4:18:27:6f:74:0d:71:91:e8:23:e2:ab:4a:7d:ce:71: 03:54:94:0f:5b:72:1d:dc:24:04:15:5f:91:8b:5a:0d:33:6e: 5f:18:77:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNTA4MjMwODIwNTRaFw0yNTA4MzAwODIwNTRaMBgxFjAUBgNV BAMTDTY4YTk3OWU3LTFiMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPbgwrQo/+DKBF6upWM2bmPieYe2GvO14Fp4MU+7geJJgKzbIUee6M/h8FUYCd 4vssWFnTqMxY1tf4BNvpby/tHVKV82s/YwHtU1laDkgHpJUNLM5D3cfXjwOCUfTQ kUPLSm/ZQIcBAVTbS8sZd669zEbSu+JdfVZZnofJ68Db0vUdnHYidFbIB9OBd0yR etWXm5zDlBCA/hlGTEfb1khHbylbClUm5zZIc/LXcaV4IWq/gQPqrUgYmig5b00r /nQzOKbZfIlpqJBDwEi+N7khBkOV7ksiRX0jNfsnI1slUXY05RcGfR0ju0WFWGHU ED8HgNnjQ1D+hhxKU1yHC/uDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhipfTkTq xdSUrc5qON0PMCYPxz0wHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+PuW3Ze9F2te5ZeXkPe9swRuHypEIfZTSBRs360oKBwfimiHia2sGX iCniqCRSg2uBVlsnekmKBYlFbOjkyyEVxZY/5WKfqk5Kxe1PB29oROTLWIpSKlyJ KRvgU2rzjIChhiPlACvsTubmcEEB+SYI0wJkRCA0sR+UwXISyrvWDpcAmIwuSfDr P0gnjguk5RnnbAth40hemzgWw7U5n+2ufVIa8zim8PPCMVFIhQe4V09G0PLApaGV X5J7ycR6ed9REem6DnWpAAP8XHanmrvE7AziNXMkDYSgpBgnb3QNcZHoI+KrSn3O cQNUlA9bch3cJAQVX5GLWg0zbl8Yd+o= -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:44 2025 by rpki-client