$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: 7U9cwBQlFCXc+GKhD+Pd7WP7wdFdynQE77x5Bv7YOXs= Subject key identifier: DE:9E:5A:0F:BE:50:3C:12:C5:71:30:BA:0F:5D:8A:02:1B:E6:0A:C0 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 25 Signing time: Sat 19 Jul 2025 08:05:27 +0000 Manifest this update: Sat 19 Jul 2025 08:05:27 +0000 Manifest next update: Sat 26 Jul 2025 08:05:27 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: VpYybMidoX67hjFGb3xWnT/zwmG9Ks1XwQAPFR8dop0=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 4: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 7: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jul 19 08:05:27 2025 GMT Not After : Jul 26 08:05:27 2025 GMT Subject: CN=687b51c7-0ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:bb:c6:82:0b:fc:c0:9c:ce:ce:3a:07:fe: 18:68:84:95:f4:2c:b3:c4:44:dd:d0:86:7d:24:03: 65:8e:6c:f4:4e:19:5e:3c:6a:23:e2:c0:7d:a0:2b: 32:45:29:cd:12:6e:06:9b:11:28:16:09:83:bd:5d: 69:23:39:15:d1:37:12:45:d9:ce:26:20:ce:51:3b: 8e:0f:35:45:c3:56:0b:1e:36:6f:2e:81:cc:1b:11: 55:c3:9d:a6:55:08:af:03:f4:c5:39:40:a6:34:aa: e7:09:cf:54:c6:eb:d7:5e:7e:2c:ef:15:8a:60:19: 77:cb:de:c6:f8:31:56:8e:8a:e6:69:02:99:85:16: f9:26:ac:6e:1b:10:d3:ea:89:8d:a6:50:28:c6:7a: d8:05:7e:ef:e0:36:1a:68:b6:09:da:df:56:bc:65: 0c:83:29:38:7b:a7:34:57:80:2f:81:9e:38:9b:bd: 75:8d:4a:07:41:af:fc:60:7c:f5:a5:d5:5f:d1:a6: 4e:79:2f:39:2c:12:a5:d4:a4:86:76:89:3c:a1:7a: ad:89:1c:b9:08:fb:a6:3f:d0:0e:9e:a6:91:d6:be: cd:90:02:f3:bf:3d:e4:81:cb:2b:ce:aa:d0:12:9e: b1:41:2f:21:f2:89:98:9d:a3:00:4a:1a:b6:dc:ab: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:5A:0F:BE:50:3C:12:C5:71:30:BA:0F:5D:8A:02:1B:E6:0A:C0 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e1:22:ad:43:56:a4:ff:ef:cd:79:06:71:29:e0:8f:7d:33: 13:0a:dd:6c:90:df:a2:dc:ad:b4:fe:ca:d6:3f:99:73:7d:52: 8d:71:2d:38:d9:c1:a4:36:92:f8:15:fb:76:4f:17:0e:f8:27: 46:f7:92:de:7f:e3:00:33:75:27:bf:df:52:d7:30:a3:62:b9: a4:e0:ad:f9:cf:23:81:80:a6:fd:75:e8:c0:58:ce:93:2d:cd: 89:9a:43:aa:09:c5:6a:4b:d8:10:f7:78:a2:f8:47:8b:17:af: d6:ff:b5:3e:f0:3d:82:a3:99:e7:ef:32:41:86:71:7d:ae:e1: f4:11:c1:ab:4a:ec:03:ae:7a:b0:bb:18:5e:3b:c4:54:bd:e9: 16:1e:14:20:ed:44:0a:5f:2d:2d:b6:bd:ca:10:37:91:21:5e: cd:30:52:f6:0c:b3:82:be:9a:56:55:99:e1:9d:59:61:d2:3c: a7:a9:04:13:19:f1:28:1f:ba:df:ad:4a:cc:96:56:bf:5e:50: 06:32:fb:44:37:92:28:4a:d5:ea:58:ad:82:c1:94:5f:a4:31: 2c:ae:93:b8:55:2c:0c:4d:f6:1a:fd:5b:6a:8c:60:d2:46:6b: 04:e0:66:f4:f1:b8:2c:3b:77:64:0e:71:b5:28:cc:d3:de:97: 9c:90:d3:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA3MTkwODA1MjdaFw0yNTA3MjYwODA1MjdaMBgxFjAUBgNV BAMTDTY4N2I1MWM3LTBmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxB7vGggv8wJzOzjoH/hhohJX0LLPERN3Qhn0kA2WObPROGV48aiPiwH2gKzJF Kc0SbgabESgWCYO9XWkjORXRNxJF2c4mIM5RO44PNUXDVgseNm8ugcwbEVXDnaZV CK8D9MU5QKY0qucJz1TG69defizvFYpgGXfL3sb4MVaOiuZpApmFFvkmrG4bENPq iY2mUCjGetgFfu/gNhpotgna31a8ZQyDKTh7pzRXgC+BnjibvXWNSgdBr/xgfPWl 1V/Rpk55LzksEqXUpIZ2iTyheq2JHLkI+6Y/0A6eppHWvs2QAvO/PeSByyvOqtAS nrFBLyHyiZidowBKGrbcq2EVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3p5aD75Q PBLFcTC6D12KAhvmCsAwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLhIq1DVqT/7815BnEp4I99MxMK3WyQ36LcrbT+ytY/mXN9Uo1xLTjZ waQ2kvgV+3ZPFw74J0b3kt5/4wAzdSe/31LXMKNiuaTgrfnPI4GApv116MBYzpMt zYmaQ6oJxWpL2BD3eKL4R4sXr9b/tT7wPYKjmefvMkGGcX2u4fQRwatK7AOuerC7 GF47xFS96RYeFCDtRApfLS22vcoQN5EhXs0wUvYMs4K+mlZVmeGdWWHSPKepBBMZ 8Sgfut+tSsyWVr9eUAYy+0Q3kihK1epYrYLBlF+kMSyuk7hVLAxN9hr9W2qMYNJG awTgZvTxuCw7d2QOcbUozNPel5yQ04o= -----END CERTIFICATE-----Generated at Sun Jul 20 22:34:02 2025 by rpki-client