$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: zu+VW1roNMpeleoo2dk21iN1zK0Rp6UavUkiRgZsJGc= Subject key identifier: 0D:D1:CF:95:7F:E6:49:8B:2A:C4:E5:AE:18:A2:44:7D:26:70:E5:88 Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: A4 Signing time: Wed 17 Sep 2025 06:57:36 +0000 Manifest this update: Wed 17 Sep 2025 06:57:35 +0000 Manifest next update: Wed 24 Sep 2025 06:57:35 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: nVyIe+o0qgHJfSEfL6Y2cKr4QmrBvZUfZeewuXGZ+sY=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: vRtRviaQ6XNpWyRhEwggmiLTt0iFQyzvKucYtEN77kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Sep 17 06:57:35 2025 GMT Not After : Sep 24 06:57:35 2025 GMT Subject: CN=68ca5be0-6407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:fa:89:d9:4d:f1:33:e4:08:a8:7c:d0:9a: 89:a8:55:08:82:41:e9:1b:0f:24:a9:68:b1:a6:e6: 99:cb:6f:ac:ec:4e:09:d8:76:75:b6:43:40:ac:f5: 34:8e:2f:a1:89:a0:0e:74:8d:13:c0:84:8a:ff:fd: 45:a2:d4:a5:25:ee:d4:46:f5:31:3f:65:23:66:20: 49:86:df:f5:95:2c:75:39:19:c5:98:5d:55:5a:76: b1:db:eb:f5:80:e2:d0:1b:99:b7:f9:71:fc:ee:b2: 47:75:50:9f:49:62:76:8b:0a:1d:14:09:80:d9:69: 8c:52:eb:de:13:49:7f:81:db:76:16:a4:b2:ac:b2: 1a:d8:54:2c:80:2f:af:dd:03:9f:5a:03:35:b2:b7: 9d:92:77:c2:54:d0:9a:03:8b:9a:77:71:52:48:ef: f2:74:57:5b:a6:c4:0f:9b:c1:33:21:35:c4:d7:f2: 31:70:cf:49:04:1c:88:43:39:41:68:f3:96:5d:16: a2:b0:d5:d1:f2:3d:18:a1:c2:4f:24:42:ec:ad:2e: 82:ed:f1:62:8d:cb:67:bb:7f:cb:e1:2e:ad:38:40: fe:e7:30:fc:2e:81:4a:75:5c:d7:92:de:3d:dc:f2: af:cb:2e:0c:e0:98:de:ca:74:c8:ec:5b:b2:37:c3: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:CF:95:7F:E6:49:8B:2A:C4:E5:AE:18:A2:44:7D:26:70:E5:88 X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:cd:3b:f1:13:85:ff:a7:21:bb:bb:7a:29:f3:68:fd:3e: da:28:55:f4:f8:25:05:1a:fc:52:87:7c:6a:0c:9e:2b:49:ad: 64:72:16:b3:e0:18:6d:97:84:aa:d1:e6:d6:60:e0:9e:7d:d4: a5:f4:94:60:3f:a6:c6:17:54:1b:3a:5b:a1:ca:a0:fa:9b:f5: 08:d7:c0:2f:70:4c:0c:f5:da:fb:96:02:51:4b:e1:b3:80:40: 54:d9:69:4b:eb:e9:26:81:7b:a3:a6:d3:2b:88:0d:81:ec:33: 12:7d:37:e9:07:19:14:f2:e2:84:fe:18:a2:b3:2a:4c:5a:7e: 52:3c:38:5a:f0:90:00:c1:d1:d2:09:1b:8a:31:85:89:95:d2: c5:5b:99:9e:c6:32:89:ee:95:d0:df:f7:c5:d8:5c:9b:1a:2a: e2:93:24:07:04:d4:a7:52:34:53:b3:bf:99:61:c5:37:6b:57: 80:9c:39:e2:08:68:fd:22:cd:de:23:6f:c8:e3:6d:98:6d:f4: b8:81:db:5d:eb:c8:78:2b:fa:4e:b1:02:a1:2c:6e:25:45:5e: e9:fd:6f:78:05:ab:54:34:4c:e4:bf:37:7a:f1:02:e9:21:02: 4f:8d:22:6f:be:77:5a:fb:d3:6e:e8:24:1a:e6:e6:98:5e:77: 41:e5:f9:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MzkxMTAvBgNVBAUTKDBDMUJDRTAyNEI0M0ZEREE4N0YzOTYxNUQ5OTRCQTM3 MDYyNDZDNTAwHhcNMjUwOTE3MDY1NzM1WhcNMjUwOTI0MDY1NzM1WjAYMRYwFAYD VQQDEw02OGNhNWJlMC02NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjv6idlN8TPkCKh80JqJqFUIgkHpGw8kqWixpuaZy2+s7E4J2HZ1tkNArPU0 ji+hiaAOdI0TwISK//1FotSlJe7URvUxP2UjZiBJht/1lSx1ORnFmF1VWnax2+v1 gOLQG5m3+XH87rJHdVCfSWJ2iwodFAmA2WmMUuveE0l/gdt2FqSyrLIa2FQsgC+v 3QOfWgM1sredknfCVNCaA4uad3FSSO/ydFdbpsQPm8EzITXE1/IxcM9JBByIQzlB aPOWXRaisNXR8j0YocJPJELsrS6C7fFijctnu3/L4S6tOED+5zD8LoFKdVzXkt49 3PKvyy4M4JjeynTI7FuyN8NDyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3Rz5V/ 5kmLKsTlrhiiRH0mcOWIMB8GA1UdIwQYMBaAFAwbzgJLQ/3ah/OWFdmUujcGJGxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTczOS9DOTVEMzk3QzlG NTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9kcUg4NVlWMlpTNk53WWti RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTczOS9DOTVEMzk3QzlGNTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9k cUg4NVlWMlpTNk53WWtiRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByOs078ROF/6chu7t6KfNo/T7aKFX0+CUFGvxSh3xqDJ4rSa1kchaz 4Bhtl4Sq0ebWYOCefdSl9JRgP6bGF1QbOluhyqD6m/UI18AvcEwM9dr7lgJRS+Gz gEBU2WlL6+kmgXujptMriA2B7DMSfTfpBxkU8uKE/hiisypMWn5SPDha8JAAwdHS CRuKMYWJldLFW5mexjKJ7pXQ3/fF2FybGirikyQHBNSnUjRTs7+ZYcU3a1eAnDni CGj9Is3eI2/I422YbfS4gdtd68h4K/pOsQKhLG4lRV7p/W94BatUNEzkvzd68QLp IQJPjSJvvnda+9Nu6CQa5uaYXndB5fnE -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:51 2025 by rpki-client