$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: IusxvA811/oACPKmgjPnNPlUd0HXp1+EB8Eyl3eb+FY= Subject key identifier: 8E:51:69:1F:7A:72:AD:2E:64:49:81:1F:39:B9:FC:CD:61:BC:7D:76 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01FA Signing time: Fri 05 Sep 2025 03:06:22 +0000 Manifest this update: Fri 05 Sep 2025 03:06:22 +0000 Manifest next update: Fri 12 Sep 2025 03:06:22 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: 4VYvGCGHDVrZgs7s6QN3ChGmUWVMgYwlQIWNHaA2mFQ=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Sep 5 03:06:22 2025 GMT Not After : Sep 12 03:06:22 2025 GMT Subject: CN=68ba53ae-a5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:a7:63:7b:d3:4e:ea:31:fb:31:60:6c:3f: 90:f1:c2:d2:8e:ec:40:ae:60:f6:fa:6d:a5:a5:5f: bd:1a:93:39:96:64:e5:e6:85:eb:95:ed:dd:7b:6c: 9c:e7:61:43:ee:9e:47:af:05:c4:ae:f2:6d:6e:97: a4:0e:b8:75:7e:ac:e4:26:99:7c:e1:62:c3:e1:e7: c6:8f:5c:78:79:b3:dd:02:cb:0f:a6:f0:9b:07:16: 7f:1c:e8:52:7e:d1:06:ce:29:ba:c1:66:72:b8:d8: 34:07:e4:a9:5d:89:da:38:27:73:aa:89:4d:e6:88: e7:de:58:52:88:e7:99:fa:96:0d:ad:8b:97:5b:2d: 2f:a0:8e:05:90:34:d1:d5:06:5e:17:09:ec:07:19: fa:09:b7:94:6d:45:b4:92:5f:43:30:90:d5:ea:77: 13:7a:0b:28:a8:20:ac:c9:1e:75:ab:d3:39:58:8f: d4:bc:57:b7:5e:96:6f:95:4c:99:44:60:2e:41:58: fa:fc:52:51:7e:49:eb:bd:6a:e6:ed:8f:ee:63:ec: 8f:53:fe:42:fa:57:9c:d8:f0:bc:b6:87:5b:d1:f3: 46:07:29:10:bf:3b:4d:8b:f4:b9:f6:d7:a0:d5:2d: 43:4e:e0:97:4e:eb:76:25:9b:22:5d:52:b1:7b:81: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:51:69:1F:7A:72:AD:2E:64:49:81:1F:39:B9:FC:CD:61:BC:7D:76 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:2c:f8:9f:3e:dd:cb:9c:52:13:17:ab:6f:fc:93:c2:62:d2: 7b:54:83:f7:c8:e4:02:7e:15:0f:3f:1a:68:9f:7b:8a:44:05: 04:97:bc:aa:88:4c:c8:aa:c4:ba:ba:f7:03:2a:35:4d:98:bf: 30:aa:03:03:61:44:2b:59:fc:49:66:53:e6:4a:74:a7:2d:8f: 0d:6f:ec:dd:1d:b0:20:2c:17:e6:27:e1:88:50:05:32:57:60: 13:33:fc:9d:56:2e:26:d1:02:ed:8b:a2:fb:cb:dd:f0:ca:88: fd:18:9d:0d:62:01:7a:cd:d0:5c:a9:b5:34:f7:64:95:fb:2d: 32:ce:73:79:7e:74:cb:78:4d:22:c1:21:36:93:53:4f:d3:db: f4:f2:46:4b:ca:db:24:4a:c0:78:88:1a:a1:53:17:3a:31:af: 9f:fc:cb:7e:d2:2e:d1:78:74:f2:97:d1:df:ee:32:43:67:5b: ba:ce:ee:f6:7c:03:c6:cf:01:1a:3f:58:4d:25:68:5d:d4:9d: ae:ad:d8:90:19:ae:29:b7:fc:29:03:41:7a:21:3e:0a:3f:bb: f1:71:91:96:d7:7e:90:09:1e:a3:b5:f1:72:21:96:ea:c4:7e: c6:4a:f7:3d:6e:b4:11:66:70:59:a5:05:22:32:bb:79:61:17: 48:17:ae:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwOTA1MDMwNjIyWhcNMjUwOTEyMDMwNjIyWjAYMRYwFAYD VQQDEw02OGJhNTNhZS1hNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zynY3vTTuox+zFgbD+Q8cLSjuxArmD2+m2lpV+9GpM5lmTl5oXrle3de2yc 52FD7p5HrwXErvJtbpekDrh1fqzkJpl84WLD4efGj1x4ebPdAssPpvCbBxZ/HOhS ftEGzim6wWZyuNg0B+SpXYnaOCdzqolN5ojn3lhSiOeZ+pYNrYuXWy0voI4FkDTR 1QZeFwnsBxn6CbeUbUW0kl9DMJDV6ncTegsoqCCsyR51q9M5WI/UvFe3XpZvlUyZ RGAuQVj6/FJRfknrvWrm7Y/uY+yPU/5C+lec2PC8todb0fNGBykQvztNi/S59teg 1S1DTuCXTut2JZsiXVKxe4HS0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5RaR96 cq0uZEmBHzm5/M1hvH12MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7LPifPt3LnFITF6tv/JPCYtJ7VIP3yOQCfhUPPxpon3uKRAUEl7yq iEzIqsS6uvcDKjVNmL8wqgMDYUQrWfxJZlPmSnSnLY8Nb+zdHbAgLBfmJ+GIUAUy V2ATM/ydVi4m0QLti6L7y93wyoj9GJ0NYgF6zdBcqbU092SV+y0yznN5fnTLeE0i wSE2k1NP09v08kZLytskSsB4iBqhUxc6Ma+f/Mt+0i7ReHTyl9Hf7jJDZ1u6zu72 fAPGzwEaP1hNJWhd1J2urdiQGa4pt/wpA0F6IT4KP7vxcZGW136QCR6jtfFyIZbq xH7GSvc9brQRZnBZpQUiMrt5YRdIF67i -----END CERTIFICATE-----Generated at Sat Sep 6 11:47:27 2025 by rpki-client