$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: 8lEdO3K8gOZwRPCzx6bCo8fks/LfqLWWFOEWNv6SckU= Subject key identifier: CE:C4:E7:3C:67:CA:C7:89:14:C3:37:F2:A6:AA:E2:B8:93:6B:20:60 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 34A5 Signing time: Sun 20 Jul 2025 14:48:32 +0000 Manifest this update: Sun 20 Jul 2025 14:48:31 +0000 Manifest next update: Sun 27 Jul 2025 14:48:31 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: msWmzO6rWo4+TPOSJbwC/hrx63fo9Nwk5RpjBadQwW0=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Jul 20 14:48:31 2025 GMT Not After : Jul 27 14:48:31 2025 GMT Subject: CN=687d01bf-be24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:3c:1b:cd:c3:f8:78:6b:9d:41:dc:55:ab: 8b:b3:ba:ce:69:bd:b9:8f:c7:34:f8:1d:f6:b2:73: 44:90:5f:72:05:58:aa:38:a3:b0:46:96:79:89:ee: ee:24:03:e9:4b:31:26:f6:fd:2a:d0:41:cb:e1:e2: 95:af:cb:22:be:90:f7:15:c2:66:59:f0:46:3d:f9: 7a:d0:fa:23:45:90:50:89:f5:a3:0c:c9:75:b8:72: bb:ed:fb:8d:72:47:c6:2b:a3:d2:9d:61:2d:cb:92: a4:a6:72:0a:9b:5f:98:c7:71:ca:40:4f:17:98:f2: 42:2e:28:e0:d1:10:6f:fe:06:b8:da:b6:d8:ff:7c: ca:ea:0a:d7:54:9c:e8:87:87:8b:0d:5f:50:94:8d: 80:89:bd:5b:83:d9:d2:1a:a8:c7:15:ab:61:5d:90: 1e:8c:53:37:4a:72:4f:85:2a:fa:4e:bb:c3:bb:63: ff:ac:02:d9:d2:96:07:3f:b6:9c:98:a5:3c:3a:4a: 12:e4:fc:fd:af:ea:25:70:99:a0:d3:67:59:97:63: 8b:11:41:6c:83:c0:ff:98:4f:0f:91:ea:9d:12:0a: 2e:27:ca:08:31:53:5f:95:f2:4b:ef:8d:86:35:4d: c9:e4:b9:25:16:72:72:35:62:cd:35:4a:de:6d:80: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C4:E7:3C:67:CA:C7:89:14:C3:37:F2:A6:AA:E2:B8:93:6B:20:60 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:07:4d:85:aa:b2:95:a0:0a:c7:23:f0:c2:99:23:96:7b:41: 65:ec:cf:2b:ea:41:72:3c:a0:52:59:eb:92:85:4b:7b:3b:17: 71:47:79:4f:4a:c9:91:03:5c:19:07:60:f7:85:37:08:c5:ef: 35:e2:3b:f3:a5:f6:7d:79:d7:77:8b:4b:92:48:27:cd:4a:6b: 59:4b:bf:6d:1c:a3:7a:58:54:73:19:e1:e5:e6:26:e4:ce:b0: da:0e:82:a5:1b:ad:2f:a3:aa:63:e3:ce:cc:08:f3:12:2a:65: 73:12:7a:cf:c7:b0:de:a9:7b:be:2a:79:ef:b7:53:eb:4e:58: d7:4b:05:25:67:d9:99:c9:c1:57:64:37:d4:fe:49:25:36:a7: 0a:15:73:87:fd:f8:af:36:1d:e6:5f:4b:ae:dd:61:77:7b:5f: 53:c3:f6:62:6c:cd:e8:d4:c3:fa:09:30:e0:e7:7a:9b:24:4a: 41:04:9b:dd:68:b9:1d:5e:1c:bb:90:81:94:98:ab:0a:60:4b: 23:d0:96:87:d7:7b:0b:90:1d:b6:1c:dc:5d:53:45:b7:03:e9: 74:07:a1:00:02:07:8c:54:f0:5f:0e:9d:bb:08:7f:52:70:17: d6:6e:1a:3f:58:88:36:92:10:62:08:db:71:fd:91:d0:a4:bc: 87:17:9b:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwNzIwMTQ0ODMxWhcNMjUwNzI3MTQ0ODMxWjAYMRYwFAYD VQQDEw02ODdkMDFiZi1iZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12A8G83D+HhrnUHcVauLs7rOab25j8c0+B32snNEkF9yBViqOKOwRpZ5ie7u JAPpSzEm9v0q0EHL4eKVr8sivpD3FcJmWfBGPfl60PojRZBQifWjDMl1uHK77fuN ckfGK6PSnWEty5KkpnIKm1+Yx3HKQE8XmPJCLijg0RBv/ga42rbY/3zK6grXVJzo h4eLDV9QlI2Aib1bg9nSGqjHFathXZAejFM3SnJPhSr6TrvDu2P/rALZ0pYHP7ac mKU8OkoS5Pz9r+olcJmg02dZl2OLEUFsg8D/mE8PkeqdEgouJ8oIMVNflfJL742G NU3J5LklFnJyNWLNNUrebYDWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7E5zxn yseJFMM38qaq4riTayBgMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMB02FqrKVoArHI/DCmSOWe0Fl7M8r6kFyPKBSWeuShUt7OxdxR3lP SsmRA1wZB2D3hTcIxe814jvzpfZ9edd3i0uSSCfNSmtZS79tHKN6WFRzGeHl5ibk zrDaDoKlG60vo6pj487MCPMSKmVzEnrPx7DeqXu+Knnvt1PrTljXSwUlZ9mZycFX ZDfU/kklNqcKFXOH/fivNh3mX0uu3WF3e19Tw/ZibM3o1MP6CTDg53qbJEpBBJvd aLkdXhy7kIGUmKsKYEsj0JaH13sLkB22HNxdU0W3A+l0B6EAAgeMVPBfDp27CH9S cBfWbho/WIg2khBiCNtx/ZHQpLyHF5vc -----END CERTIFICATE-----Generated at Mon Jul 21 07:03:24 2025 by rpki-client