$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: 1txrESsRIjJc95B2tncM+YB7pfpvcz6LY2HIELE/6tE= Subject key identifier: 26:09:80:3D:E6:42:AF:D2:57:02:BF:9B:8D:C6:05:08:CB:0E:6A:62 Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 0159 Signing time: Mon 21 Jul 2025 04:08:29 +0000 Manifest this update: Mon 21 Jul 2025 04:08:28 +0000 Manifest next update: Mon 28 Jul 2025 04:08:28 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: aJ7Xgw4mgQxkf3/iYbbIVKZN1mEWUgduognNRmh4hz4=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: iUnEHsfjN1jchtBZnX9gEs2PWdWpqrF2oKCzEFQT8+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Jul 21 04:08:28 2025 GMT Not After : Jul 28 04:08:28 2025 GMT Subject: CN=687dbd3c-6c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:f8:4f:bc:2f:34:f6:a3:9f:6e:91:1f:44: 44:58:27:bc:bd:21:1f:39:a9:68:0c:55:0e:49:aa: be:7d:91:3b:a3:b6:0a:95:7f:38:ec:55:db:f1:f5: 04:37:3d:19:bb:f6:e8:20:63:82:9c:40:90:5a:42: f8:14:48:31:09:47:e8:98:40:54:d7:f1:a3:79:c0: c3:46:c9:f4:83:f3:d1:1e:5d:91:11:9a:06:d9:01: 07:47:7a:b8:1e:1c:f5:71:7d:ab:4d:fc:8c:0c:db: 82:8d:6f:44:11:f5:4d:1b:8f:50:81:80:c5:d4:0a: 90:9a:7d:fe:51:e8:63:f1:77:f4:2b:82:ff:40:a2: 68:77:92:48:15:48:33:c8:57:29:16:b0:26:5a:01: c4:0e:1f:41:8e:52:07:5a:aa:51:f3:bc:5e:9d:e8: 07:97:f7:f8:83:cb:19:fd:91:39:a6:dc:3d:1c:1d: bd:26:71:c9:c4:40:16:f6:31:64:5f:40:6a:6c:4f: b7:42:d4:4e:63:e4:e2:a8:35:e2:3a:c8:ce:1c:5e: 3b:83:a5:c0:39:19:7b:c7:34:c2:71:3e:17:2f:e2: f1:fe:40:d1:9b:ff:36:06:72:ae:ee:e8:5d:87:3c: 7b:a9:30:e4:f6:42:71:8b:05:ad:d1:a7:4a:8f:26: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:09:80:3D:E6:42:AF:D2:57:02:BF:9B:8D:C6:05:08:CB:0E:6A:62 X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:82:74:4f:70:05:7c:ca:12:a3:23:c4:dc:f0:9c:56:46:df: d3:ac:f9:19:55:5a:d1:9f:83:34:69:31:2a:03:c5:4b:6c:6c: c1:d5:91:9b:e0:75:bd:38:e0:89:46:b8:ca:5a:62:9c:95:bc: 02:c2:7b:64:a5:25:57:89:75:1e:4a:6a:8a:e6:6d:33:28:a9: a0:94:28:2e:d0:02:20:f0:58:55:3c:44:28:46:7d:db:e6:0f: 21:9a:46:71:f8:2f:dc:4c:33:e3:1b:10:53:ec:99:89:23:93: 0c:6c:0d:27:f7:cc:14:0b:4b:7e:1f:11:22:34:62:76:17:f5: d6:92:02:71:79:65:04:80:7f:09:0a:4c:0d:a6:43:ce:e2:2f: b8:c7:4f:c2:85:78:01:60:d7:09:07:66:0f:9e:62:ca:10:80: 84:53:97:bf:1c:69:08:ec:08:f4:8a:11:ba:65:d3:95:b2:a8: ca:fe:0a:a8:73:6c:53:3c:1f:ea:7c:49:c7:46:fe:4c:03:0c: b5:a8:52:0e:62:90:12:bc:65:55:79:7f:e6:79:4f:fc:31:16: f9:f7:88:26:4f:ac:38:78:52:e9:e7:93:2d:22:3c:ce:ce:8c: 8d:31:24:65:dc:6b:27:ef:d5:6e:c5:d6:d3:cf:57:da:69:0e: 03:6f:f0:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUwNzIxMDQwODI4WhcNMjUwNzI4MDQwODI4WjAYMRYwFAYD VQQDEw02ODdkYmQzYy02YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfv4T7wvNPajn26RH0REWCe8vSEfOaloDFUOSaq+fZE7o7YKlX847FXb8fUE Nz0Zu/boIGOCnECQWkL4FEgxCUfomEBU1/GjecDDRsn0g/PRHl2REZoG2QEHR3q4 Hhz1cX2rTfyMDNuCjW9EEfVNG49QgYDF1AqQmn3+Uehj8Xf0K4L/QKJod5JIFUgz yFcpFrAmWgHEDh9BjlIHWqpR87xenegHl/f4g8sZ/ZE5ptw9HB29JnHJxEAW9jFk X0BqbE+3QtROY+TiqDXiOsjOHF47g6XAORl7xzTCcT4XL+Lx/kDRm/82BnKu7uhd hzx7qTDk9kJxiwWt0adKjyY/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYJgD3m Qq/SVwK/m43GBQjLDmpiMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZgnRPcAV8yhKjI8Tc8JxWRt/TrPkZVVrRn4M0aTEqA8VLbGzB1ZGb 4HW9OOCJRrjKWmKclbwCwntkpSVXiXUeSmqK5m0zKKmglCgu0AIg8FhVPEQoRn3b 5g8hmkZx+C/cTDPjGxBT7JmJI5MMbA0n98wUC0t+HxEiNGJ2F/XWkgJxeWUEgH8J CkwNpkPO4i+4x0/ChXgBYNcJB2YPnmLKEICEU5e/HGkI7Aj0ihG6ZdOVsqjK/gqo c2xTPB/qfEnHRv5MAwy1qFIOYpASvGVVeX/meU/8MRb594gmT6w4eFLp55MtIjzO zoyNMSRl3Gsn79VuxdbTz1faaQ4Db/CD -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:23 2025 by rpki-client