$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: HjL/zBBV1ZSbVdMwYTIHPjTYUI+wSW2fsGtOH1YBeXU= Subject key identifier: D7:D3:E9:85:32:F8:43:DC:E9:21:AB:F3:D6:35:B3:11:A1:31:29:DA Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0C55 Signing time: Sun 20 Jul 2025 18:34:21 +0000 Manifest this update: Sun 20 Jul 2025 18:34:21 +0000 Manifest next update: Sun 27 Jul 2025 18:34:21 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: Pn8XuBi2Hznj3GcvzdM8sBkJma7+nnKl/4ZMLhY3Cig=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Jul 20 18:34:21 2025 GMT Not After : Jul 27 18:34:21 2025 GMT Subject: CN=687d36ad-d318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:73:18:5d:0e:76:d1:d1:7f:91:9c:9d:09: 36:83:1f:25:64:0a:93:5e:26:4b:0a:44:f5:e7:50: f0:73:44:09:76:61:58:1c:cb:b3:23:b3:a9:42:15: a1:66:ba:54:b2:3d:18:58:70:5f:c0:7a:3c:e4:94: c1:d5:4f:da:1c:cd:3a:48:94:ff:81:df:20:57:dd: bb:c7:3a:3c:07:23:29:54:21:78:1a:ab:6c:c6:e1: f7:cf:90:e7:f8:e9:c4:27:dc:d7:d0:ad:f9:96:4a: 3e:24:7e:ca:ce:48:e2:18:22:9b:53:db:d4:80:87: 91:81:88:aa:0c:92:3c:0a:09:16:fa:14:88:d2:ae: 7e:8a:54:07:2c:a3:98:8d:0d:d5:7d:d5:e4:2c:58: 54:b5:44:df:87:06:5b:23:9a:b3:f4:b9:4a:4b:d0: 30:78:d0:58:ec:43:f6:85:32:5e:d9:68:18:d1:49: 65:e5:b7:4a:bb:de:30:05:b8:4c:4e:b0:66:14:f7: 56:5a:16:ea:70:ae:04:14:da:83:50:ca:b6:d9:27: e6:2e:42:08:c1:12:7a:80:ee:a7:30:9d:1b:c6:e6: 20:07:27:3b:e8:6b:76:a1:77:19:c9:6c:9c:89:47: a5:f0:a4:c5:5b:05:5e:b4:4d:b2:b9:ed:ea:06:45: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D3:E9:85:32:F8:43:DC:E9:21:AB:F3:D6:35:B3:11:A1:31:29:DA X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3a:f7:f1:82:55:b9:af:45:d7:32:a8:e6:fd:d3:b8:be:47: ca:57:f3:2e:ef:b6:7a:d7:b5:a6:33:60:b0:c7:c9:05:ea:c8: 08:0d:16:4b:22:df:d7:d9:ed:9c:61:b9:c7:93:14:37:45:67: 78:c4:25:4c:ab:c4:a2:57:b9:ff:e3:f4:64:d7:03:01:2b:fd: e7:61:ce:01:a7:06:de:15:93:f0:4a:aa:2b:60:77:be:af:62: d4:ec:8d:e9:50:13:66:75:46:16:19:ed:20:21:01:e5:de:05: 76:21:70:d2:9e:d9:d4:ed:76:e5:b0:b6:29:0d:31:d5:f1:78: 72:dd:44:cb:d2:ea:34:e5:1c:d3:91:b6:ac:32:d9:c8:31:1b: ba:76:dd:8e:d8:6e:3f:a1:cd:b1:d4:49:7a:e3:44:05:fb:20: ec:81:ad:8b:31:3c:96:2a:50:ed:d7:1b:7d:56:8c:6e:95:21: 0d:a3:27:c4:13:6d:c7:a0:45:be:e9:8f:9d:72:9e:89:ee:7b: c2:f4:1c:29:02:e5:88:8b:34:8c:0e:37:e4:99:43:cc:fb:f3: e4:29:a9:c9:9b:92:d2:5a:10:30:44:d7:7c:99:62:61:20:92: 7b:cb:a5:56:7a:5b:a9:a5:19:62:90:18:b0:55:80:1e:30:4d: 10:a4:03:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUwNzIwMTgzNDIxWhcNMjUwNzI3MTgzNDIxWjAYMRYwFAYD VQQDEw02ODdkMzZhZC1kMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iBzGF0OdtHRf5GcnQk2gx8lZAqTXiZLCkT151Dwc0QJdmFYHMuzI7OpQhWh ZrpUsj0YWHBfwHo85JTB1U/aHM06SJT/gd8gV927xzo8ByMpVCF4GqtsxuH3z5Dn +OnEJ9zX0K35lko+JH7KzkjiGCKbU9vUgIeRgYiqDJI8CgkW+hSI0q5+ilQHLKOY jQ3VfdXkLFhUtUTfhwZbI5qz9LlKS9AweNBY7EP2hTJe2WgY0Ull5bdKu94wBbhM TrBmFPdWWhbqcK4EFNqDUMq22SfmLkIIwRJ6gO6nMJ0bxuYgByc76Gt2oXcZyWyc iUel8KTFWwVetE2yue3qBkVN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfT6YUy +EPc6SGr89Y1sxGhMSnaMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtOvfxglW5r0XXMqjm/dO4vkfKV/Mu77Z617WmM2Cwx8kF6sgIDRZL It/X2e2cYbnHkxQ3RWd4xCVMq8SiV7n/4/Rk1wMBK/3nYc4BpwbeFZPwSqorYHe+ r2LU7I3pUBNmdUYWGe0gIQHl3gV2IXDSntnU7XblsLYpDTHV8Xhy3UTL0uo05RzT kbasMtnIMRu6dt2O2G4/oc2x1El640QF+yDsga2LMTyWKlDt1xt9VoxulSENoyfE E23HoEW+6Y+dcp6J7nvC9BwpAuWIizSMDjfkmUPM+/PkKanJm5LSWhAwRNd8mWJh IJJ7y6VWeluppRlikBiwVYAeME0QpAO+ -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:10 2025 by rpki-client