$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: LxuUqdWTbQUWQj4mjQTk4m4oRLD/eKrr/PBpRu5jP04= Subject key identifier: 25:97:8A:68:C0:DA:61:FA:6E:74:5D:4D:5D:0C:5D:A1:92:E3:28:81 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 01FB Signing time: Fri 19 Sep 2025 02:58:59 +0000 Manifest this update: Fri 19 Sep 2025 02:58:58 +0000 Manifest next update: Fri 26 Sep 2025 02:58:58 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: Qg8BjHrVzhbnd2CmJIlwSFo6oxgcLfCEyCkllb9OyN4=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: W0QjuNMkR2tH07pxncoFfLsVRRNFM7JZ6iVRcm37NHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Sep 19 02:58:58 2025 GMT Not After : Sep 26 02:58:58 2025 GMT Subject: CN=68ccc6f3-f097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:66:c7:65:cb:ee:f4:85:68:a9:47:6e:45: 38:98:85:55:51:68:25:b3:af:f4:2d:b2:01:e8:69: 71:9d:5c:78:22:ee:17:a6:ea:b2:0f:ae:53:79:c3: 26:02:2e:23:68:8d:c8:db:6e:a2:f8:7d:ea:ea:0f: 7e:2c:35:b7:8e:7c:fa:34:7f:e5:79:4b:0b:1b:92: 61:cd:62:bf:59:8a:78:35:8e:18:50:32:89:2f:40: 96:e3:82:06:3a:8b:2b:16:a0:1f:42:0e:f5:c9:df: 2b:98:ae:4a:4e:1e:d7:1f:f0:f3:3f:59:bc:05:82: 86:cc:43:00:02:29:0c:99:5b:ad:c7:de:d8:2a:9c: fc:c1:44:e9:9c:52:66:f4:bd:e2:c7:d6:28:92:05: 45:70:b0:49:cc:76:ca:a9:55:a4:3b:bc:00:65:94: 12:17:3f:a2:d9:da:1e:08:9a:07:0a:fe:ca:97:3a: 66:1b:4f:77:c9:9a:52:15:e0:60:9f:77:5d:07:f3: 18:2f:ea:e7:83:f1:73:41:05:52:3c:77:51:a9:44: fb:23:40:74:ea:7d:9c:11:9f:33:68:f9:73:bd:b3: 44:c3:9a:ae:10:fd:eb:04:f2:d1:10:d9:89:2f:43: 5d:26:b6:88:95:ad:b3:e0:0c:be:6a:a9:b8:84:bd: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:97:8A:68:C0:DA:61:FA:6E:74:5D:4D:5D:0C:5D:A1:92:E3:28:81 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:f3:80:d4:43:19:e5:34:0a:b1:d5:12:cd:ed:2a:7d:bb:0b: 0d:90:4d:3b:d7:9a:83:06:01:5c:52:ec:46:e1:94:9c:2a:e0: d5:2a:7c:df:73:4e:e9:1b:28:4d:37:f2:25:00:e3:06:ca:c9: be:1e:a5:ba:31:8f:64:2f:28:3e:98:a8:41:0b:04:99:7e:91: 65:24:1c:e4:f5:c6:02:58:c3:54:c1:47:5e:f2:be:be:ce:d6: b4:cf:84:32:e5:ae:25:32:cf:15:5d:c4:5b:3c:9e:1c:7d:9c: 90:46:18:48:76:02:dd:e1:7d:91:b1:1c:01:7e:e0:9c:40:03: ef:d7:55:48:00:31:96:3a:f5:d1:41:d1:56:b6:87:91:6b:2f: b9:09:82:23:36:71:45:71:b9:31:2a:c3:3b:f5:ac:b4:b1:7a: 3a:55:f2:e2:37:33:47:d3:6e:8c:a7:4b:41:90:3f:b1:fc:71: 02:9a:06:af:55:d1:33:dd:a0:d2:b0:12:50:3c:59:84:86:51: 1a:a0:2b:7c:c6:9a:bb:dc:38:ba:aa:97:ff:97:08:0b:10:25: 26:55:75:7c:2f:78:7d:8f:ee:47:09:db:c8:10:4d:b8:57:7e: 8b:ed:86:ce:85:45:1e:f5:da:b8:26:d1:40:8b:ad:53:83:ec: fa:49:82:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUwOTE5MDI1ODU4WhcNMjUwOTI2MDI1ODU4WjAYMRYwFAYD VQQDEw02OGNjYzZmMy1mMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51pmx2XL7vSFaKlHbkU4mIVVUWgls6/0LbIB6GlxnVx4Iu4XpuqyD65TecMm Ai4jaI3I226i+H3q6g9+LDW3jnz6NH/leUsLG5JhzWK/WYp4NY4YUDKJL0CW44IG OosrFqAfQg71yd8rmK5KTh7XH/DzP1m8BYKGzEMAAikMmVutx97YKpz8wUTpnFJm 9L3ix9YokgVFcLBJzHbKqVWkO7wAZZQSFz+i2doeCJoHCv7KlzpmG093yZpSFeBg n3ddB/MYL+rng/FzQQVSPHdRqUT7I0B06n2cEZ8zaPlzvbNEw5quEP3rBPLRENmJ L0NdJraIla2z4Ay+aqm4hL3IIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWXimjA 2mH6bnRdTV0MXaGS4yiBMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR84DUQxnlNAqx1RLN7Sp9uwsNkE0715qDBgFcUuxG4ZScKuDVKnzf c07pGyhNN/IlAOMGysm+HqW6MY9kLyg+mKhBCwSZfpFlJBzk9cYCWMNUwUde8r6+ zta0z4Qy5a4lMs8VXcRbPJ4cfZyQRhhIdgLd4X2RsRwBfuCcQAPv11VIADGWOvXR QdFWtoeRay+5CYIjNnFFcbkxKsM79ay0sXo6VfLiNzNH026Mp0tBkD+x/HECmgav VdEz3aDSsBJQPFmEhlEaoCt8xpq73Di6qpf/lwgLECUmVXV8L3h9j+5HCdvIEE24 V36L7YbOhUUe9dq4JtFAi61Tg+z6SYII -----END CERTIFICATE-----Generated at Fri Sep 19 05:16:36 2025 by rpki-client