$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json) Hash identifier: 4lCpL0qMjRIXfaSJFlDrYgxHafjCJ6ByEsukZR7JOJg= Subject key identifier: C1:E4:B7:28:63:98:36:29:16:69:D3:2A:16:02:83:08:68:E9:DA:69 Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft Manifest number: A5 Signing time: Mon 21 Jul 2025 06:24:36 +0000 Manifest this update: Mon 21 Jul 2025 06:24:35 +0000 Manifest next update: Mon 28 Jul 2025 06:24:35 +0000 Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: Q/NIXHYpWl4TVrSQo+p7P+96iJz3MPiGmkoZXLYIHDY=) 2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=) 3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Validity Not Before: Jul 21 06:24:35 2025 GMT Not After : Jul 28 06:24:35 2025 GMT Subject: CN=687ddd23-b146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:5b:56:34:24:ca:f2:fb:70:60:f7:de:3f: b0:8c:3f:e7:91:86:e8:ed:7c:7d:1d:de:9b:c3:d5: 7a:2c:1e:79:6d:a2:07:fb:f1:f3:b6:55:d4:9e:e4: e8:a1:ce:7d:0f:7c:e4:37:c1:0e:87:cc:c8:5d:27: 37:e8:c9:9a:66:33:65:20:ab:0a:be:9c:89:28:49: 91:3b:fc:10:cd:d4:65:a6:7c:80:a9:54:a6:d6:21: af:1e:c4:24:d5:4a:8b:2c:c1:9b:70:d0:a6:7b:ca: d5:24:d8:01:62:70:19:ca:cb:bf:51:8f:1d:db:23: 48:01:f9:c7:25:8d:d3:af:99:11:6a:66:3c:ca:a9: 79:06:c2:2b:4c:95:18:01:7f:0a:bd:c8:07:c2:70: 59:af:8d:eb:5f:8c:ed:d9:c9:5b:4f:9e:c6:29:5a: bd:51:e3:d4:69:ba:aa:c1:c5:ec:45:c9:f6:f5:b9: e8:49:b9:6d:a6:15:49:91:97:e9:4b:c0:6e:16:6e: 08:9c:19:fb:d5:57:e3:89:fa:70:1d:f5:97:ef:14: f5:b3:d9:f0:63:ee:84:05:0c:88:f7:a3:ed:aa:46: f1:3c:d2:47:b4:c5:25:0e:83:83:cc:b6:1d:29:bc: c6:40:4c:7f:83:91:d5:85:77:8b:e7:f6:66:56:c7: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:B7:28:63:98:36:29:16:69:D3:2A:16:02:83:08:68:E9:DA:69 X509v3 Authority Key Identifier: keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:07:99:53:f6:7a:c1:9c:a7:a4:e8:08:b1:f7:f9:f1:48:7d: 95:ef:d2:8e:17:2e:2b:7b:d0:98:c4:b9:e0:7e:46:6b:c9:0f: 17:2c:c9:fb:6e:83:33:60:13:41:7d:1c:1c:cb:cf:ef:59:95: 71:c7:9c:9c:b9:0d:1b:6f:f3:59:eb:0b:0d:6b:09:1c:e4:05: ec:12:3e:dd:9e:c5:75:1e:af:9f:52:d3:0b:a6:8e:33:6d:ef: 7d:64:7a:86:78:60:f8:9f:d5:c7:68:cf:9d:4d:53:b2:49:7b: 3f:0b:33:f0:4f:a1:55:5e:f5:3c:10:40:9b:42:f2:5f:a4:06: 7b:de:87:25:03:31:14:87:d4:90:93:a9:e6:b6:c9:3f:f8:59: 36:f5:77:6b:35:c5:20:0b:78:51:54:69:e7:5b:ed:22:83:55: 35:c6:60:f7:d2:34:9b:fd:ff:ec:2b:25:d9:3a:90:5d:b7:a3: 14:8f:6e:ba:4b:62:3e:90:ee:d4:05:25:37:d3:dd:6f:eb:61: c1:28:61:32:ef:23:39:66:ad:df:10:3a:93:7f:ba:3f:2e:86: 74:7e:63:8e:67:02:bb:76:17:d9:73:bc:28:5b:81:b1:f1:d2: 12:81:fa:de:f4:41:e6:48:d0:e9:3b:db:e5:3c:f6:9e:19:9b: 68:54:ed:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE4RTIxMTAvBgNVBAUTKDBDMDUyNDNCN0VGNTU2MTFFNDBBNERCQkY3RkU3RTkx MjA5MkE2NTIwHhcNMjUwNzIxMDYyNDM1WhcNMjUwNzI4MDYyNDM1WjAYMRYwFAYD VQQDEw02ODdkZGQyMy1iMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmVbVjQkyvL7cGD33j+wjD/nkYbo7Xx9Hd6bw9V6LB55baIH+/HztlXUnuTo oc59D3zkN8EOh8zIXSc36MmaZjNlIKsKvpyJKEmRO/wQzdRlpnyAqVSm1iGvHsQk 1UqLLMGbcNCme8rVJNgBYnAZysu/UY8d2yNIAfnHJY3Tr5kRamY8yql5BsIrTJUY AX8KvcgHwnBZr43rX4zt2clbT57GKVq9UePUabqqwcXsRcn29bnoSbltphVJkZfp S8BuFm4InBn71VfjifpwHfWX7xT1s9nwY+6EBQyI96PtqkbxPNJHtMUlDoODzLYd KbzGQEx/g5HVhXeL5/ZmVsfY0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHktyhj mDYpFmnTKhYCgwho6dppMB8GA1UdIwQYMBaAFAwFJDt+9VYR5ApNu/f+fpEgkqZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QThFMi9BNDUxRDk4NDZG MkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZoSGtDazI3OV81LWtTQ1Nw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3BsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QThFMi9BNDUxRDk4NDZGMkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZo SGtDazI3OV81LWtTQ1NwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrB5lT9nrBnKek6Aix9/nxSH2V79KOFy4re9CYxLngfkZryQ8XLMn7 boMzYBNBfRwcy8/vWZVxx5ycuQ0bb/NZ6wsNawkc5AXsEj7dnsV1Hq+fUtMLpo4z be99ZHqGeGD4n9XHaM+dTVOySXs/CzPwT6FVXvU8EECbQvJfpAZ73oclAzEUh9SQ k6nmtsk/+Fk29XdrNcUgC3hRVGnnW+0ig1U1xmD30jSb/f/sKyXZOpBdt6MUj266 S2I+kO7UBSU3091v62HBKGEy7yM5Zq3fEDqTf7o/LoZ0fmOOZwK7dhfZc7woW4Gx 8dISgfre9EHmSNDpO9vlPPaeGZtoVO08 -----END CERTIFICATE-----Generated at Wed Jul 23 02:22:10 2025 by rpki-client