$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: pAxx+AhVOBVJfQsESvo4SUdjfIXq89XytDF/d9AKZ/Y= Subject key identifier: 77:2A:1D:73:B8:41:F6:66:BF:28:6B:CE:A4:4A:F2:98:EC:6B:DE:3A Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0233 Signing time: Wed 17 Sep 2025 02:32:08 +0000 Manifest this update: Wed 17 Sep 2025 02:32:08 +0000 Manifest next update: Wed 24 Sep 2025 02:32:08 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: nMLB0hCoMuiK9DFfHtLuAf5LUpBJatzL3rx74yBTfMY=) 2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: ICqDWqIBMrxZ5863INyqF5h5cmSlZ8OH5+rodgjND+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Sep 17 02:32:08 2025 GMT Not After : Sep 24 02:32:08 2025 GMT Subject: CN=68ca1da8-67e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:b0:31:67:13:a0:e6:1e:93:40:a2:cb:23: c2:72:b3:52:b9:60:8a:a1:fd:b2:c7:c8:7c:79:79: 5c:ba:e6:7a:f3:f3:23:52:1d:15:bb:20:52:48:6c: ef:52:33:e6:67:19:be:48:00:ef:7e:65:63:71:3c: 02:e9:91:32:dd:07:25:9a:f4:f8:67:9c:4f:21:b3: 7e:22:51:27:6f:63:38:40:f0:0a:17:4f:1b:fd:23: 37:79:42:a8:38:c9:2d:da:4f:84:c6:12:3a:07:1d: d7:71:28:2b:c4:47:fc:a6:de:2d:85:f7:1f:d9:08: 61:6a:c5:dd:25:37:29:29:b7:91:2d:fc:d3:19:c7: b5:8e:34:58:58:fb:78:ae:6c:a8:c8:92:8e:40:8d: 68:c4:b6:03:8a:3f:2c:70:b4:cf:a4:a2:fe:c5:7f: eb:60:95:f9:3d:dd:b7:9e:c9:f6:41:d2:e8:10:48: 13:85:36:b4:6c:d9:4b:a8:19:b2:f4:17:d1:47:2f: 9a:e7:0b:42:b7:e8:54:94:c8:17:49:9e:61:86:19: 8a:15:29:3f:16:65:c3:55:3e:26:f4:4d:04:2e:e2: 14:c1:24:de:d6:60:e1:bc:82:ff:b0:ce:9f:3f:6a: 9e:0c:3c:a3:49:9c:79:1b:ac:1a:3e:9a:e4:f2:8c: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2A:1D:73:B8:41:F6:66:BF:28:6B:CE:A4:4A:F2:98:EC:6B:DE:3A X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:63:80:7f:6e:78:a0:e9:66:23:06:09:f3:7e:49:2c:a3:57: c6:67:b1:99:f0:a6:63:67:90:cf:8e:ae:df:29:05:da:86:47: df:12:7f:88:26:c4:ee:ba:ea:9c:e5:7d:96:e6:a4:be:0b:4f: 5e:01:fd:01:91:a3:bd:d3:24:21:1a:ae:b0:51:ae:5e:3d:25: e1:da:5d:48:4c:ff:9a:84:c7:a8:52:ca:2e:a3:50:82:50:9c: bb:27:dc:4d:95:37:b1:0b:e6:08:b3:ea:3c:2f:1b:40:13:c0: 6f:e9:aa:c8:52:33:21:b6:92:97:81:84:8b:75:9c:e4:a7:1b: 41:bf:73:cf:ef:e0:b8:26:32:4e:e1:e9:fa:48:0f:07:fe:06: 29:3e:d9:84:80:d4:3b:88:8e:ae:a9:ed:92:59:53:ad:32:89: 54:b7:8f:96:9f:57:d7:47:e1:34:8b:bc:d9:b1:e0:fb:24:65: ab:82:0d:5b:86:78:0a:6b:e7:ce:b8:f8:06:e4:61:18:e9:51: 61:af:5d:a9:cc:7e:01:77:5e:1f:79:26:3b:54:61:b1:26:0c: fa:c2:56:02:f4:60:5e:b4:fc:d2:46:15:67:48:12:a2:44:93: 9a:b5:bd:e9:3a:8c:4d:24:bd:3f:f5:68:45:54:70:f4:6c:9f: c7:7e:e9:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwOTE3MDIzMjA4WhcNMjUwOTI0MDIzMjA4WjAYMRYwFAYD VQQDEw02OGNhMWRhOC02N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv2wMWcToOYek0CiyyPCcrNSuWCKof2yx8h8eXlcuuZ68/MjUh0VuyBSSGzv UjPmZxm+SADvfmVjcTwC6ZEy3QclmvT4Z5xPIbN+IlEnb2M4QPAKF08b/SM3eUKo OMkt2k+ExhI6Bx3XcSgrxEf8pt4thfcf2QhhasXdJTcpKbeRLfzTGce1jjRYWPt4 rmyoyJKOQI1oxLYDij8scLTPpKL+xX/rYJX5Pd23nsn2QdLoEEgThTa0bNlLqBmy 9BfRRy+a5wtCt+hUlMgXSZ5hhhmKFSk/FmXDVT4m9E0ELuIUwSTe1mDhvIL/sM6f P2qeDDyjSZx5G6waPprk8oxNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcqHXO4 QfZmvyhrzqRK8pjsa946MB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Y4B/bnig6WYjBgnzfkkso1fGZ7GZ8KZjZ5DPjq7fKQXahkffEn+I JsTuuuqc5X2W5qS+C09eAf0BkaO90yQhGq6wUa5ePSXh2l1ITP+ahMeoUsouo1CC UJy7J9xNlTexC+YIs+o8LxtAE8Bv6arIUjMhtpKXgYSLdZzkpxtBv3PP7+C4JjJO 4en6SA8H/gYpPtmEgNQ7iI6uqe2SWVOtMolUt4+Wn1fXR+E0i7zZseD7JGWrgg1b hngKa+fOuPgG5GEY6VFhr12pzH4Bd14feSY7VGGxJgz6wlYC9GBetPzSRhVnSBKi RJOatb3pOoxNJL0/9WhFVHD0bJ/HfukU -----END CERTIFICATE-----Generated at Thu Sep 18 05:45:35 2025 by rpki-client