$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: cSWwev11k45TukW9lG4eG1jImc8IgGzQ1WzzTw8WyMY= Subject key identifier: 58:18:B1:27:58:FE:B8:05:A7:46:AE:06:47:FF:52:45:A2:11:49:40 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01E1 Signing time: Sat 19 Jul 2025 03:14:23 +0000 Manifest this update: Sat 19 Jul 2025 03:14:22 +0000 Manifest next update: Sat 26 Jul 2025 03:14:22 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: 5bKtaXuSfFTfeA5XWhNj2zoynjWWN2BdhRCy3b7ThUs=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Jul 19 03:14:22 2025 GMT Not After : Jul 26 03:14:22 2025 GMT Subject: CN=687b0d8e-9203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:24:ea:94:7b:56:64:e0:d2:d4:99:3f:ea: f8:0d:5e:81:c8:58:60:95:74:34:21:7d:89:e2:0b: 3c:63:4d:f5:0d:7b:49:70:8c:5a:21:67:a2:de:93: 2f:4d:1b:9d:fa:10:af:c8:ec:2a:84:7e:58:d7:5a: 9d:43:ac:5e:65:84:bd:a9:5e:d9:a7:6a:90:83:a7: 69:cb:53:63:6a:51:7d:c5:ff:f7:3d:59:84:bd:77: cb:77:63:76:09:24:64:93:4e:18:0b:55:48:07:13: 91:4f:d0:52:b3:d8:15:26:70:ba:f9:fc:c4:71:7b: b0:c0:52:ec:41:75:fa:e0:3b:a2:71:3f:5d:10:51: c7:37:1d:3e:05:21:c6:02:ac:97:31:1e:3d:60:89: c5:06:4f:0f:55:07:27:8f:7f:79:db:57:92:89:66: e5:bb:1d:54:8a:13:d6:49:3a:bb:ee:83:c0:c9:69: 03:1e:10:36:35:ac:5d:be:6a:85:37:7e:fd:67:71: db:9f:e4:db:f6:3b:f4:02:0f:51:72:6f:7c:b1:22: 3c:10:93:c8:b6:74:70:05:56:96:cd:95:3c:89:1c: 78:76:b9:a7:c4:93:88:e4:cf:b9:2b:c2:b8:b9:ad: 9a:32:53:46:b8:22:50:c7:77:36:ea:8f:83:20:9a: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:18:B1:27:58:FE:B8:05:A7:46:AE:06:47:FF:52:45:A2:11:49:40 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:13:80:b9:10:d7:6a:ad:1f:5a:11:da:7e:e0:94:6c:de:2a: a1:5b:55:82:70:b1:db:66:58:08:69:5f:24:6e:66:b9:f8:b9: 6e:ab:a7:33:c7:cf:fe:e9:2a:a7:3b:48:a8:0e:21:79:50:8b: ec:d5:21:76:09:1e:3a:d8:ae:ab:d5:8f:ef:a4:86:e7:70:b9: a0:c5:ba:ab:6d:9c:a2:3d:22:92:c4:a3:e9:43:7b:34:45:90: 09:4f:76:03:f0:31:12:1c:04:09:83:42:b3:0e:6a:15:97:51: 21:6d:74:53:f2:a8:88:93:c4:82:21:69:2f:8a:7a:5b:de:0b: 9b:fc:3d:dd:02:f2:b7:14:5c:9f:64:61:2a:bf:f5:72:2d:18: 65:b8:3c:34:77:7f:b2:b4:6b:b9:83:66:b6:9e:37:2a:36:9f: c6:f8:59:56:3f:e3:fc:86:43:5c:e0:6a:82:da:1c:ba:dd:7d: bb:fc:0d:54:58:94:bd:e2:49:68:87:6f:10:0b:bc:80:be:4a: f7:69:32:22:c6:06:98:5d:e6:3c:cf:de:cf:00:ad:bf:e9:be: 85:87:9e:c3:71:68:12:30:00:7e:51:54:e6:28:f9:b6:1c:cf: c5:f7:29:ff:c3:1c:e6:a6:2e:dc:e6:33:cb:2c:11:3c:ad:d0: 3e:40:90:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwNzE5MDMxNDIyWhcNMjUwNzI2MDMxNDIyWjAYMRYwFAYD VQQDEw02ODdiMGQ4ZS05MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjMk6pR7VmTg0tSZP+r4DV6ByFhglXQ0IX2J4gs8Y031DXtJcIxaIWei3pMv TRud+hCvyOwqhH5Y11qdQ6xeZYS9qV7Zp2qQg6dpy1NjalF9xf/3PVmEvXfLd2N2 CSRkk04YC1VIBxORT9BSs9gVJnC6+fzEcXuwwFLsQXX64DuicT9dEFHHNx0+BSHG AqyXMR49YInFBk8PVQcnj39521eSiWblux1UihPWSTq77oPAyWkDHhA2NaxdvmqF N379Z3Hbn+Tb9jv0Ag9Rcm98sSI8EJPItnRwBVaWzZU8iRx4drmnxJOI5M+5K8K4 ua2aMlNGuCJQx3c26o+DIJr2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgYsSdY /rgFp0auBkf/UkWiEUlAMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXE4C5ENdqrR9aEdp+4JRs3iqhW1WCcLHbZlgIaV8kbma5+Lluq6cz x8/+6SqnO0ioDiF5UIvs1SF2CR462K6r1Y/vpIbncLmgxbqrbZyiPSKSxKPpQ3s0 RZAJT3YD8DESHAQJg0KzDmoVl1EhbXRT8qiIk8SCIWkvinpb3gub/D3dAvK3FFyf ZGEqv/VyLRhluDw0d3+ytGu5g2a2njcqNp/G+FlWP+P8hkNc4GqC2hy63X27/A1U WJS94kloh28QC7yAvkr3aTIixgaYXeY8z97PAK2/6b6Fh57DcWgSMAB+UVTmKPm2 HM/F9yn/wxzmpi7c5jPLLBE8rdA+QJBD -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:25 2025 by rpki-client