$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: tKDZYAjqMtgiLgQHZoIQkL/dNwJxMrANw4DgqQLInt0= Subject key identifier: 98:38:68:83:A8:4D:34:5B:DE:71:53:EA:58:C4:D2:9D:4B:0B:9C:29 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 177C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1758 Signing time: Fri 18 Jul 2025 16:43:47 +0000 Manifest this update: Fri 18 Jul 2025 16:43:47 +0000 Manifest next update: Fri 25 Jul 2025 16:43:47 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: SCGczXft66r5zYE9ai3E91PzbhABSbVqmZtRcbY2kGw=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6012 (0x177c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Jul 18 16:43:47 2025 GMT Not After : Jul 25 16:43:47 2025 GMT Subject: CN=687a79c3-f128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:e7:38:9f:29:c1:3d:e2:58:03:40:1c:dd: a8:fc:7a:43:07:18:53:c2:eb:08:22:35:ff:c0:40: ba:2a:5d:f9:ee:b0:15:72:d6:ac:ba:3d:10:31:f9: f4:ae:ca:a9:28:7c:cd:01:c8:86:b6:dd:40:a5:86: 50:4a:43:d4:50:9f:92:ef:23:05:e0:9a:0a:4c:59: b1:de:18:db:67:d3:f0:75:2d:88:57:63:ee:9a:be: ac:72:0d:eb:02:9f:9e:4b:12:55:37:a9:ac:54:a8: 97:78:95:b9:43:a9:2f:ad:6d:f9:f3:1e:9a:c8:ee: 4d:e7:9c:15:7d:a2:40:46:80:96:4a:33:a5:61:22: 75:4b:b5:70:4e:01:db:ff:02:1b:ec:00:77:3d:31: f3:56:99:2e:32:93:11:f1:a8:92:59:ac:d0:16:fb: 0b:fd:b1:99:59:f1:1d:f2:47:0c:34:fb:b4:8c:8e: 55:b6:0d:8f:ee:4b:b7:6a:78:7a:f1:b7:8c:c9:12: b4:fd:61:99:eb:69:69:7b:28:95:8a:68:3e:4c:dc: ea:d3:17:bc:0c:7f:a5:3d:03:37:a2:1e:ad:23:29: 06:8a:4e:27:61:4b:d6:e8:5d:b5:dc:23:59:89:3f: 94:9a:54:d5:1e:d1:6e:04:d2:ec:e5:52:06:62:cd: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:68:83:A8:4D:34:5B:DE:71:53:EA:58:C4:D2:9D:4B:0B:9C:29 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:89:66:8a:15:04:0b:f7:ca:12:ab:87:77:09:4c:50:02:f5: bb:41:89:63:69:c3:22:04:56:5a:7c:9d:5f:d4:d4:b5:85:6f: 2c:44:77:53:08:e6:1a:38:18:1f:a8:66:9a:2e:66:9e:c0:0c: 9d:20:f0:5c:ba:70:d0:87:63:e1:af:7f:7f:55:53:0a:ed:8f: ac:88:13:5b:39:60:c9:b8:73:cc:cc:ff:cf:74:fa:5a:42:76: ab:ea:82:95:7f:56:83:b6:b3:cd:6b:cc:08:01:8e:aa:ac:20: 41:44:e0:49:6b:8d:aa:cb:ee:72:60:98:d2:e0:4c:43:c2:e6: d6:a8:2b:71:f7:d8:81:a9:e5:f4:66:89:c4:5f:21:ed:f5:21: c8:da:05:ea:27:e9:a8:1c:31:f0:05:17:41:99:49:c6:35:6b: 50:58:71:ec:2f:44:7a:57:15:8a:73:c9:66:bb:b5:45:bd:50: d4:b1:ba:2c:78:c0:42:d2:fd:6f:71:29:df:f8:2c:07:dc:b3: 9b:ee:ef:ba:81:ab:67:22:86:ac:f1:f7:79:f9:8d:b2:7a:f6: 85:15:4e:41:d2:fc:d0:ec:53:ff:6f:29:e2:e5:26:0e:b3:31: 07:35:23:47:49:d4:4d:14:ec:1d:ee:74:4b:0f:ce:65:3a:a3: 38:3d:2e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwNzE4MTY0MzQ3WhcNMjUwNzI1MTY0MzQ3WjAYMRYwFAYD VQQDEw02ODdhNzljMy1mMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZPnOJ8pwT3iWANAHN2o/HpDBxhTwusIIjX/wEC6Kl357rAVctasuj0QMfn0 rsqpKHzNAciGtt1ApYZQSkPUUJ+S7yMF4JoKTFmx3hjbZ9PwdS2IV2Pumr6scg3r Ap+eSxJVN6msVKiXeJW5Q6kvrW358x6ayO5N55wVfaJARoCWSjOlYSJ1S7VwTgHb /wIb7AB3PTHzVpkuMpMR8aiSWazQFvsL/bGZWfEd8kcMNPu0jI5Vtg2P7ku3anh6 8beMyRK0/WGZ62lpeyiVimg+TNzq0xe8DH+lPQM3oh6tIykGik4nYUvW6F213CNZ iT+UmlTVHtFuBNLs5VIGYs3/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg4aIOo TTRb3nFT6ljE0p1LC5wpMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUiWaKFQQL98oSq4d3CUxQAvW7QYljacMiBFZafJ1f1NS1hW8sRHdT COYaOBgfqGaaLmaewAydIPBcunDQh2Phr39/VVMK7Y+siBNbOWDJuHPMzP/PdPpa Qnar6oKVf1aDtrPNa8wIAY6qrCBBROBJa42qy+5yYJjS4ExDwubWqCtx99iBqeX0 ZonEXyHt9SHI2gXqJ+moHDHwBRdBmUnGNWtQWHHsL0R6VxWKc8lmu7VFvVDUsbos eMBC0v1vcSnf+CwH3LOb7u+6gatnIoas8fd5+Y2yevaFFU5B0vzQ7FP/byni5SYO szEHNSNHSdRNFOwd7nRLD85lOqM4PS7w -----END CERTIFICATE-----Generated at Sun Jul 20 10:01:42 2025 by rpki-client