$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: 8goGdIsQCKAgZ0cSfRXRPsYOZtseozem8dFjJx654L0= Subject key identifier: 7A:B2:22:3D:90:FC:02:B0:B2:5F:0A:A5:56:D5:76:64:78:C1:E0:F4 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 107B Signing time: Sun 20 Jul 2025 17:23:12 +0000 Manifest this update: Sun 20 Jul 2025 17:23:11 +0000 Manifest next update: Sun 27 Jul 2025 17:23:11 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: OebK107uzf74lmUqZWOCWFaH9O2+f0FPBF+/AG9Q9gQ=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Jul 20 17:23:11 2025 GMT Not After : Jul 27 17:23:11 2025 GMT Subject: CN=687d25ff-c52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:0a:ff:05:8f:c4:99:79:96:61:1f:01:43: ec:a9:44:45:4d:3a:eb:07:70:16:c6:c8:01:3c:69: e7:ac:f4:f2:96:22:19:4a:be:d3:3a:1a:09:87:64: 0a:83:fb:31:b4:ec:08:b3:dd:a9:50:a2:d8:97:4d: ae:bc:0a:77:73:25:f3:1a:11:31:cd:3c:67:e7:40: 36:2c:5a:5a:fc:8a:2c:a0:5e:f3:95:3e:16:5b:33: 74:37:47:d1:cb:1c:98:71:f8:e2:29:c2:8a:9a:49: 5f:09:3d:1d:df:d4:a1:e5:8b:a5:cb:34:41:f2:82: 4f:a6:7f:5e:fd:49:e3:40:a2:14:fe:cf:78:b0:67: 77:8a:25:05:98:e4:9f:40:e5:76:a5:57:be:06:3c: de:99:97:5b:70:04:f8:c6:09:45:4e:aa:7f:35:81: 8b:bb:e9:be:e8:b7:90:4c:4d:57:c8:6b:cc:33:c7: 9a:f0:6b:cd:9b:b5:dd:47:90:4b:1e:78:15:ec:a4: 3b:48:33:2b:87:3f:c9:8d:4e:04:30:88:0e:a8:48: dd:7e:71:0c:b9:98:69:a0:3e:7e:5a:97:93:fb:d4: 3f:1e:d4:1f:0f:67:b8:60:ba:57:74:bd:65:89:48: 2e:8b:8f:71:d2:46:88:40:e2:23:70:2b:33:d9:a9: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:22:3D:90:FC:02:B0:B2:5F:0A:A5:56:D5:76:64:78:C1:E0:F4 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:98:5b:4a:00:d6:1f:be:d7:76:6e:a2:d8:d9:37:61:e4: 53:8a:2b:b7:2c:5a:e2:74:f5:eb:c7:a9:97:3d:92:b4:d5:d6: 52:8a:b5:83:ce:aa:08:89:b0:81:cf:04:a3:85:3e:50:eb:9f: 3a:81:f2:cc:48:66:3d:97:fe:1e:a2:a7:79:c7:d6:9a:62:d8: f8:97:30:44:7a:52:ea:0a:e2:21:06:58:40:81:6d:73:42:34: bb:e4:0c:53:71:57:6a:cc:de:fc:38:db:a5:e6:66:34:bf:5d: 51:77:df:6b:c4:b9:58:bc:55:84:15:5d:29:c7:02:dd:12:da: 3d:57:d7:d3:ba:51:9a:95:9b:2f:33:8e:50:e9:4d:09:1e:d7: af:fe:89:35:8d:01:9a:16:e1:9a:9f:49:8a:0e:c4:e5:e0:00: 8a:2b:e4:9f:57:fe:3b:62:6b:89:4f:18:89:99:09:f6:60:cf: 94:de:9d:0c:69:d1:c0:fc:b6:0b:6c:88:70:4c:6f:db:33:c1: c6:f6:85:29:81:c3:aa:cf:c8:23:8b:43:44:6b:aa:50:e8:c6: 87:7a:35:d5:d4:9f:cc:67:ce:5c:3a:2a:31:be:eb:9b:9e:e0: 30:be:0a:30:2a:e9:a1:5a:42:34:a9:2e:10:4b:95:f0:bf:ed: 28:99:46:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwNzIwMTcyMzExWhcNMjUwNzI3MTcyMzExWjAYMRYwFAYD VQQDEw02ODdkMjVmZi1jNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYAK/wWPxJl5lmEfAUPsqURFTTrrB3AWxsgBPGnnrPTyliIZSr7TOhoJh2QK g/sxtOwIs92pUKLYl02uvAp3cyXzGhExzTxn50A2LFpa/IosoF7zlT4WWzN0N0fR yxyYcfjiKcKKmklfCT0d39Sh5YulyzRB8oJPpn9e/UnjQKIU/s94sGd3iiUFmOSf QOV2pVe+BjzemZdbcAT4xglFTqp/NYGLu+m+6LeQTE1XyGvMM8ea8GvNm7XdR5BL HngV7KQ7SDMrhz/JjU4EMIgOqEjdfnEMuZhpoD5+WpeT+9Q/HtQfD2e4YLpXdL1l iUgui49x0kaIQOIjcCsz2an89QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqyIj2Q /AKwsl8KpVbVdmR4weD0MB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtTZhbSgDWH77Xdm6i2Nk3YeRTiiu3LFridPXrx6mXPZK01dZSirWD zqoIibCBzwSjhT5Q6586gfLMSGY9l/4eoqd5x9aaYtj4lzBEelLqCuIhBlhAgW1z QjS75AxTcVdqzN78ONul5mY0v11Rd99rxLlYvFWEFV0pxwLdEto9V9fTulGalZsv M45Q6U0JHtev/ok1jQGaFuGan0mKDsTl4ACKK+SfV/47YmuJTxiJmQn2YM+U3p0M adHA/LYLbIhwTG/bM8HG9oUpgcOqz8gji0NEa6pQ6MaHejXV1J/MZ85cOioxvuub nuAwvgowKumhWkI0qS4QS5Xwv+0omUZz -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:04 2025 by rpki-client