$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: 269I2LIawj1HIV2hLR4HGeJ8WZXeggpMT169w0HnaWc= Subject key identifier: 14:8B:77:E7:74:6F:7B:8B:0A:93:51:E3:B7:B8:37:15:6D:14:C0:D4 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 03ED Signing time: Sat 19 Jul 2025 00:55:21 +0000 Manifest this update: Sat 19 Jul 2025 00:55:20 +0000 Manifest next update: Sat 26 Jul 2025 00:55:20 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: +UOAmeVgagptxLV12JpfiKM9EdWijf+pnsKraQKArsk=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Jul 19 00:55:20 2025 GMT Not After : Jul 26 00:55:20 2025 GMT Subject: CN=687aecf8-33fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:01:34:da:f5:72:20:13:08:a3:0c:0a:ad: c3:5a:8a:06:2e:5b:6b:90:92:fa:fc:14:b8:13:92: 01:7d:c3:f3:56:10:64:1e:0e:82:96:51:08:d4:08: 51:34:e3:d7:da:f6:aa:20:e5:73:31:50:3b:cf:c7: ac:fa:f0:f0:2b:ce:db:6b:71:12:d3:4b:93:a7:4e: 2b:9c:ce:f4:71:fe:63:db:6f:ac:2d:62:00:bb:ed: 29:3a:39:40:51:e2:88:76:25:78:2c:3f:1d:d8:78: af:25:03:2e:0a:33:36:22:70:bd:8c:a2:16:bb:8a: 1d:5b:cc:c2:88:1e:0f:6f:dc:07:1d:76:7a:bf:e0: 12:02:6d:71:f1:3b:50:66:da:d0:4c:20:f6:56:dd: 8a:11:84:94:f9:33:8f:11:cd:01:de:64:9d:77:0b: 96:24:7c:a2:d7:82:43:90:42:ff:e9:2a:57:26:de: 9b:df:92:a7:48:dc:b8:9a:f2:bd:79:7c:52:ed:e9: 79:f3:3f:8e:45:9a:a0:db:80:2a:81:6b:83:6b:34: 7e:7f:f9:04:fc:36:7a:40:a0:f5:2e:a3:99:ac:b5: d8:f6:55:ff:55:5f:93:b5:fa:c3:f3:32:7b:9f:06: 5e:cf:1f:ab:04:16:a1:99:d0:13:7f:48:93:6f:10: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:77:E7:74:6F:7B:8B:0A:93:51:E3:B7:B8:37:15:6D:14:C0:D4 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:5f:ac:3b:ee:aa:32:af:1f:9c:56:03:3d:6e:d3:20:c0: 00:72:09:02:ec:d6:12:83:15:dc:ad:96:f6:51:be:c5:00:17: d6:89:fa:0b:a1:bb:1d:4e:2d:b2:b7:7b:71:73:78:d6:e8:b1: 66:c3:7c:25:8c:4e:c7:4c:c9:95:95:62:1e:86:74:74:f5:b4: 96:ae:a2:43:b1:b1:9d:f5:55:df:af:a3:57:ca:a3:ef:44:18: 60:5e:5c:58:94:89:e1:5e:08:e5:18:f0:de:84:61:51:8f:e8: 85:21:ef:9a:c7:ca:da:65:df:32:9c:be:6d:5c:8f:fb:05:aa: 7c:72:ec:d1:51:8a:ab:8f:ea:be:5c:bc:60:e4:00:55:76:cf: 1d:43:6a:a8:08:42:c2:18:fb:58:fd:3c:0d:de:40:52:3d:b9: 00:c7:3c:50:db:83:36:65:de:81:4d:9f:5f:af:22:b4:2b:14: 28:33:bc:53:e1:14:30:93:cd:82:d3:d0:f0:60:0b:63:d1:72: 2c:e4:67:51:ea:9c:45:34:6a:11:ef:62:75:00:d8:5d:56:5d: e7:5e:c7:22:a0:d2:a2:01:b0:98:33:d0:ec:b0:f7:8d:9c:fb: 0f:d7:04:e9:e5:76:b1:81:b3:38:14:c6:f5:d0:24:14:31:01: 71:12:ef:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUwNzE5MDA1NTIwWhcNMjUwNzI2MDA1NTIwWjAYMRYwFAYD VQQDEw02ODdhZWNmOC0zM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4QBNNr1ciATCKMMCq3DWooGLltrkJL6/BS4E5IBfcPzVhBkHg6CllEI1AhR NOPX2vaqIOVzMVA7z8es+vDwK87ba3ES00uTp04rnM70cf5j22+sLWIAu+0pOjlA UeKIdiV4LD8d2HivJQMuCjM2InC9jKIWu4odW8zCiB4Pb9wHHXZ6v+ASAm1x8TtQ ZtrQTCD2Vt2KEYSU+TOPEc0B3mSddwuWJHyi14JDkEL/6SpXJt6b35KnSNy4mvK9 eXxS7el58z+ORZqg24AqgWuDazR+f/kE/DZ6QKD1LqOZrLXY9lX/VV+TtfrD8zJ7 nwZezx+rBBahmdATf0iTbxA/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSLd+d0 b3uLCpNR47e4NxVtFMDUMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBflF+sO+6qMq8fnFYDPW7TIMAAcgkC7NYSgxXcrZb2Ub7FABfWifoL obsdTi2yt3txc3jW6LFmw3wljE7HTMmVlWIehnR09bSWrqJDsbGd9VXfr6NXyqPv RBhgXlxYlInhXgjlGPDehGFRj+iFIe+ax8raZd8ynL5tXI/7Bap8cuzRUYqrj+q+ XLxg5ABVds8dQ2qoCELCGPtY/TwN3kBSPbkAxzxQ24M2Zd6BTZ9fryK0KxQoM7xT 4RQwk82C09DwYAtj0XIs5GdR6pxFNGoR72J1ANhdVl3nXscioNKiAbCYM9DssPeN nPsP1wTp5XaxgbM4FMb10CQUMQFxEu9i -----END CERTIFICATE-----Generated at Sun Jul 20 06:40:37 2025 by rpki-client