$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: Bgw3iGIzUJfY8iG2JbRiVjFzX8HUmPxVGULmu5yB45E= Subject key identifier: 47:CF:00:5E:28:83:1F:68:BF:DF:59:7A:AB:20:29:0A:AA:E8:C1:1E Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 3E Signing time: Fri 05 Sep 2025 08:01:17 +0000 Manifest this update: Fri 05 Sep 2025 08:01:17 +0000 Manifest next update: Fri 12 Sep 2025 08:01:17 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: +QEYVP1o4aIinEJ3alLV5A6sFwjJdFnXONTf731S1u8=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 4: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 7: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Sep 5 08:01:17 2025 GMT Not After : Sep 12 08:01:17 2025 GMT Subject: CN=68ba98cd-d936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:13:a1:e7:13:75:af:90:89:b0:28:2a:81: 43:84:ed:65:4b:0f:89:c0:0b:4d:fb:17:33:a3:a0: 5e:c6:a3:d2:50:b8:93:e9:c9:89:46:d0:81:98:7f: a8:91:45:9c:dd:81:54:aa:61:53:fc:ec:9d:87:42: 7a:25:bf:61:09:3f:50:ad:62:9c:0f:08:9f:01:60: 80:09:e0:b2:97:2a:f7:88:8e:23:09:27:e3:d7:ac: e6:25:d4:38:c0:c1:bb:88:30:be:4a:97:f7:79:a4: 9b:e1:bd:d6:bf:47:10:88:c8:c8:4f:e6:3c:66:c6: 32:61:fb:4a:c8:83:96:0e:ac:aa:3e:98:fa:53:97: e3:19:f7:dc:3b:43:3b:a8:af:e1:61:ea:7c:cc:54: 8d:b1:48:57:b4:a9:f0:64:9c:41:49:de:d8:84:a3: 0c:6b:fe:29:f2:ca:f5:17:55:51:4d:e7:40:81:4b: ad:6f:08:07:9f:ae:d3:29:b4:33:cb:c8:46:d5:80: b9:da:c5:22:2b:70:70:19:a6:73:05:5c:6f:63:93: 39:77:e6:6f:dd:55:0d:ae:84:ce:0b:68:81:8c:d0: b9:40:d7:d3:3b:a6:32:6a:d6:23:ec:4b:d2:ba:82: b9:5e:61:01:8c:7c:e7:b9:37:b1:d4:a0:73:0f:5f: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:00:5E:28:83:1F:68:BF:DF:59:7A:AB:20:29:0A:AA:E8:C1:1E X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:8e:e7:29:d2:1b:a6:65:15:1e:65:a4:fd:4b:d2:43:a9: c8:e9:2f:90:5b:dd:43:94:9c:7a:d4:0e:14:3f:ff:fb:82:9c: 17:98:8b:95:7f:4a:6a:80:c2:bb:21:51:c9:19:e2:43:e3:bf: fd:97:bf:5b:e8:17:c5:2a:74:c7:50:80:93:23:a9:2f:fd:63: d0:1a:9a:2e:4b:1d:4a:bf:0d:55:e7:92:e5:de:63:b2:f8:bc: 4f:a8:76:c6:7b:67:77:91:0f:ab:6e:92:01:1e:25:1d:8f:27: 52:ee:fd:7d:c6:ee:5b:63:24:9c:0f:5e:3e:da:b3:d0:82:6d: a2:a7:96:74:8d:cb:99:37:79:69:fd:55:11:50:3a:99:ed:01: dc:58:ec:f9:30:ce:d7:9c:8b:6f:0a:e2:fa:97:f9:ac:e8:f9: d0:31:26:09:43:df:c3:77:2e:6b:b6:75:58:75:a1:d9:6e:4d: bc:fe:74:dc:13:a8:71:91:51:06:c6:f6:bd:dc:90:0f:d1:d8: 9b:54:ae:87:e5:12:8e:51:16:e4:54:a5:7f:52:2f:af:51:0f: e7:8a:ee:4e:e9:e9:42:8e:3c:6d:78:03:c2:d8:e9:73:41:28: 25:fd:b8:cf:0b:e2:08:2e:62:bb:a5:b1:ec:73:ef:6f:5f:88: 57:0f:d2:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA5MDUwODAxMTdaFw0yNTA5MTIwODAxMTdaMBgxFjAUBgNV BAMTDTY4YmE5OGNkLWQ5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmeROh5xN1r5CJsCgqgUOE7WVLD4nAC037FzOjoF7Go9JQuJPpyYlG0IGYf6iR RZzdgVSqYVP87J2HQnolv2EJP1CtYpwPCJ8BYIAJ4LKXKveIjiMJJ+PXrOYl1DjA wbuIML5Kl/d5pJvhvda/RxCIyMhP5jxmxjJh+0rIg5YOrKo+mPpTl+MZ99w7Qzuo r+Fh6nzMVI2xSFe0qfBknEFJ3tiEowxr/inyyvUXVVFN50CBS61vCAefrtMptDPL yEbVgLnaxSIrcHAZpnMFXG9jkzl35m/dVQ2uhM4LaIGM0LlA19M7pjJq1iPsS9K6 grleYQGMfOe5N7HUoHMPX2W/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR88AXiiD H2i/31l6qyApCqrowR4wHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGxjucp0humZRUeZaT9S9JDqcjpL5Bb3UOUnHrUDhQ///uCnBeYi5V/ SmqAwrshUckZ4kPjv/2Xv1voF8UqdMdQgJMjqS/9Y9Aami5LHUq/DVXnkuXeY7L4 vE+odsZ7Z3eRD6tukgEeJR2PJ1Lu/X3G7ltjJJwPXj7as9CCbaKnlnSNy5k3eWn9 VRFQOpntAdxY7Pkwzteci28K4vqX+azo+dAxJglD38N3Lmu2dVh1odluTbz+dNwT qHGRUQbG9r3ckA/R2JtUroflEo5RFuRUpX9SL69RD+eK7k7p6UKOPG14A8LY6XNB KCX9uM8L4gguYrulsexz729fiFcP0p8= -----END CERTIFICATE-----Generated at Fri Sep 5 11:28:17 2025 by rpki-client