$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: Vm7V3ujrj0sK0sc7K52n0DaQjcB67Kn3AGhTr5BdlyQ= Subject key identifier: AD:5E:2C:2C:87:FD:E2:B1:1A:02:6B:01:B7:0F:95:F8:70:A3:57:9C Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 0107 Signing time: Sat 19 Jul 2025 05:13:49 +0000 Manifest this update: Sat 19 Jul 2025 05:13:49 +0000 Manifest next update: Sat 26 Jul 2025 05:13:49 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: PhRA1ICO302pRu0JRHT6g/gz7e7Egr21/U7pNZWUGVA=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Jul 19 05:13:49 2025 GMT Not After : Jul 26 05:13:49 2025 GMT Subject: CN=687b298d-3d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:36:8b:75:fc:f1:fa:01:4a:4b:1a:77:1c: a1:2a:a6:bc:63:dd:d0:0e:e3:8e:88:fe:2f:b6:fc: 5c:9e:69:cb:98:1d:47:fe:58:b4:10:b2:41:49:de: 98:e8:44:c3:27:22:9f:4a:8e:5d:e9:c9:fe:3f:fd: a8:36:d4:77:41:a5:d5:73:53:b8:55:c3:0b:90:bf: 97:3d:3c:e8:85:b7:f0:cc:94:96:ea:95:b8:d6:08: 84:0f:e6:eb:b6:c3:2e:c6:6b:cf:a1:36:60:2b:9a: c1:ad:02:b7:c2:69:c6:aa:08:f5:e8:3e:2f:2e:5d: 7d:fc:7f:c0:3b:5f:b2:10:60:81:bd:99:0f:33:c7: 5d:9f:f7:a1:d5:c0:d4:02:58:a2:01:7d:35:72:18: 2f:e4:90:6d:a7:3f:c8:79:69:a0:18:15:0b:f4:35: 7f:0e:e5:bd:8e:8e:7f:6f:19:b3:ce:32:0b:f7:a2: d9:ad:7d:d0:08:7c:c4:e1:e0:0f:67:9e:a8:5f:5d: ac:5a:c0:96:16:eb:b8:70:52:0d:18:25:ad:c8:b8: 87:af:1e:f6:05:c1:a0:c7:04:67:20:66:c8:30:4a: 92:ba:1e:0b:2c:d4:97:37:bb:bf:9c:41:24:18:30: 22:da:c8:c7:39:61:a0:b4:56:41:84:ea:69:6c:d7: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5E:2C:2C:87:FD:E2:B1:1A:02:6B:01:B7:0F:95:F8:70:A3:57:9C X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:78:e8:d7:9b:38:72:36:a6:dd:bc:a9:04:6b:6e:27:47:34: f0:82:6d:41:ab:0f:bf:2d:ae:65:a3:02:79:2b:54:8b:5f:88: a3:3d:00:4f:60:04:a8:03:b6:7f:11:e4:da:80:4d:9b:c5:e8: d7:5e:2d:c1:4f:a2:32:86:94:5e:44:94:94:5a:53:e2:93:7f: f0:0d:78:8e:04:43:39:77:11:00:ad:70:0b:d0:b6:b6:c4:dd: 0d:a1:c7:d3:d5:a3:e9:46:f0:ca:30:4d:03:1a:fb:dd:de:b9: 94:c9:81:f7:cc:f3:45:33:ac:3a:95:78:fd:04:89:e7:7a:64: 98:24:b9:e7:7d:eb:c3:44:ce:1f:33:05:20:aa:b0:01:26:45: b9:d4:0c:bf:51:2d:44:a4:25:2c:1f:2e:19:3c:fa:25:26:b4: 36:5d:e5:90:05:33:b0:8a:95:b9:08:25:c8:3c:29:10:7e:cd: 11:00:03:7b:f5:07:e7:84:f7:6f:9a:8e:c0:00:4f:36:8a:6f: 1d:73:65:e3:db:24:85:1c:50:30:d5:46:97:81:a6:a1:a2:42: 93:49:a1:a8:6f:01:c6:28:82:f7:7b:de:5f:a4:1b:51:5b:73: 03:51:2c:d6:c1:6e:d9:76:8b:e6:c9:fd:0b:2c:4d:e5:8e:35: d9:b3:87:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNzE5MDUxMzQ5WhcNMjUwNzI2MDUxMzQ5WjAYMRYwFAYD VQQDEw02ODdiMjk4ZC0zZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5k2i3X88foBSksadxyhKqa8Y93QDuOOiP4vtvxcnmnLmB1H/li0ELJBSd6Y 6ETDJyKfSo5d6cn+P/2oNtR3QaXVc1O4VcMLkL+XPTzohbfwzJSW6pW41giED+br tsMuxmvPoTZgK5rBrQK3wmnGqgj16D4vLl19/H/AO1+yEGCBvZkPM8ddn/eh1cDU AliiAX01chgv5JBtpz/IeWmgGBUL9DV/DuW9jo5/bxmzzjIL96LZrX3QCHzE4eAP Z56oX12sWsCWFuu4cFINGCWtyLiHrx72BcGgxwRnIGbIMEqSuh4LLNSXN7u/nEEk GDAi2sjHOWGgtFZBhOppbNcPgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1eLCyH /eKxGgJrAbcPlfhwo1ecMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBleOjXmzhyNqbdvKkEa24nRzTwgm1Bqw+/La5lowJ5K1SLX4ijPQBP YASoA7Z/EeTagE2bxejXXi3BT6IyhpReRJSUWlPik3/wDXiOBEM5dxEArXAL0La2 xN0NocfT1aPpRvDKME0DGvvd3rmUyYH3zPNFM6w6lXj9BInnemSYJLnnfevDRM4f MwUgqrABJkW51Ay/US1EpCUsHy4ZPPolJrQ2XeWQBTOwipW5CCXIPCkQfs0RAAN7 9QfnhPdvmo7AAE82im8dc2Xj2ySFHFAw1UaXgaahokKTSaGobwHGKIL3e95fpBtR W3MDUSzWwW7Zdovmyf0LLE3ljjXZs4fD -----END CERTIFICATE-----Generated at Sun Jul 20 02:07:03 2025 by rpki-client