$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: sR2u1EENsWTA1HRCYoabVDZg+VIm4I4JMSEVRZj2s7Q= Subject key identifier: 2B:EE:D4:70:97:4E:B6:16:64:4F:F9:DC:0D:D4:75:1F:53:08:36:ED Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: 011D Signing time: Sat 19 Jul 2025 05:01:28 +0000 Manifest this update: Sat 19 Jul 2025 05:01:28 +0000 Manifest next update: Sat 26 Jul 2025 05:01:28 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: xOKJMH0p5IPjut4biZQuN/qpJ5afC2kMHTIfUOusgtI=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Validity Not Before: Jul 19 05:01:28 2025 GMT Not After : Jul 26 05:01:28 2025 GMT Subject: CN=687b26a8-48ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:b4:9c:d2:74:0a:8a:65:19:f0:d2:ce:55: 7d:c3:22:e0:38:39:b1:ff:5c:22:52:bd:aa:8c:54: 4b:41:e0:60:e7:a5:29:92:4d:e3:69:f9:2a:08:b0: cd:0c:4d:f6:b5:c3:ff:a1:7e:17:1c:c0:4d:fe:a0: 49:0a:82:b8:14:9d:2f:34:e1:7d:54:ce:97:29:6e: af:c1:99:d2:af:82:08:74:16:de:a5:24:9d:0a:fd: 31:67:41:6a:f3:08:9d:58:81:a5:43:f8:12:a5:18: 58:c4:87:c7:7b:c2:e8:fe:19:68:7e:9b:20:55:d3: 2a:90:21:fd:0e:ba:b9:20:d2:4a:5e:db:9b:8c:0a: 8c:88:39:f9:55:49:32:56:c5:21:4e:b3:8f:c5:19: 4b:ce:4d:51:e3:af:21:88:5c:c8:47:ba:fe:72:06: 3f:a7:8d:44:f2:09:19:f2:ba:46:9f:83:c6:d5:9b: a9:ef:c3:bc:84:f4:0f:b8:40:1e:8c:90:83:2d:ab: 95:22:51:f4:3b:35:61:72:ca:ad:32:39:37:d5:c7: aa:bf:28:b1:6b:1f:c4:8c:be:67:3d:15:2f:d6:4a: 0a:d0:dd:66:69:17:3d:b8:31:e1:1a:b2:8b:b4:5b: 61:08:d7:9f:d2:9e:fd:37:ef:ea:93:5b:83:44:78: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EE:D4:70:97:4E:B6:16:64:4F:F9:DC:0D:D4:75:1F:53:08:36:ED X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:32:9b:73:68:ca:c3:8f:75:8c:18:14:df:78:35:a7:4a: 0a:0d:4f:2a:1a:98:59:7b:d3:28:19:75:40:52:8f:fc:47:bf: fc:64:0f:03:d0:23:65:45:6c:ec:ba:03:3a:53:3b:af:bc:98: df:8f:f7:eb:05:45:27:11:4d:ba:80:3a:57:ae:92:e2:e0:49: 9f:c8:f2:9d:59:14:e6:57:df:05:1a:96:12:df:67:e2:a9:e9: 91:83:22:c4:e0:ad:40:ce:c7:c1:9a:04:7a:3a:4a:e4:73:a6: 1d:14:82:52:84:19:67:c6:4f:8f:de:d3:a7:fd:c2:82:92:38: ac:77:1c:1e:de:42:70:f6:02:2a:e3:b8:05:75:1e:a6:97:4a: bc:67:92:9e:cb:4e:ee:51:36:a1:0b:08:20:f8:ba:91:6f:ec: db:da:2e:ea:dd:d9:7b:2d:9b:87:29:df:4c:4d:b4:aa:7b:d0: ec:97:30:c7:89:86:95:42:63:fd:6e:ec:63:c8:e6:3f:ba:b9: be:8a:3f:1a:10:4d:4b:27:28:a7:66:c0:d8:de:f9:1b:f4:63: fe:81:01:ad:2d:f8:de:26:49:b9:2d:e9:68:b9:a2:7f:49:88: 24:4c:1d:66:aa:20:f9:97:b7:ed:fb:e8:3c:ee:29:43:8d:c8: a6:9f:f9:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1 RTZEQjJCRDEwHhcNMjUwNzE5MDUwMTI4WhcNMjUwNzI2MDUwMTI4WjAYMRYwFAYD VQQDEw02ODdiMjZhOC00OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kW0nNJ0CoplGfDSzlV9wyLgODmx/1wiUr2qjFRLQeBg56Upkk3jafkqCLDN DE32tcP/oX4XHMBN/qBJCoK4FJ0vNOF9VM6XKW6vwZnSr4IIdBbepSSdCv0xZ0Fq 8widWIGlQ/gSpRhYxIfHe8Lo/hlofpsgVdMqkCH9Drq5INJKXtubjAqMiDn5VUky VsUhTrOPxRlLzk1R468hiFzIR7r+cgY/p41E8gkZ8rpGn4PG1Zup78O8hPQPuEAe jJCDLauVIlH0OzVhcsqtMjk31ceqvyixax/EjL5nPRUv1koK0N1maRc9uDHhGrKL tFthCNef0p79N+/qk1uDRHgzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvu1HCX TrYWZE/53A3UdR9TCDbtMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1 QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2IDKbc2jKw491jBgU33g1p0oKDU8qGphZe9MoGXVAUo/8R7/8ZA8D 0CNlRWzsugM6UzuvvJjfj/frBUUnEU26gDpXrpLi4EmfyPKdWRTmV98FGpYS32fi qemRgyLE4K1AzsfBmgR6Okrkc6YdFIJShBlnxk+P3tOn/cKCkjisdxwe3kJw9gIq 47gFdR6ml0q8Z5Key07uUTahCwgg+LqRb+zb2i7q3dl7LZuHKd9MTbSqe9DslzDH iYaVQmP9buxjyOY/urm+ij8aEE1LJyinZsDY3vkb9GP+gQGtLfjeJkm5LelouaJ/ SYgkTB1mqiD5l7ft++g87ilDjcimn/nt -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:12 2025 by rpki-client