$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: NeCFaCIdJmr1EhAJz9nvbOB4uVhL/ANs7INDhdtAHso= Subject key identifier: 47:22:4D:66:1B:20:6E:AC:A5:3A:C1:8E:8D:95:96:CA:35:CE:78:33 Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0362 Signing time: Tue 09 Sep 2025 01:02:31 +0000 Manifest this update: Tue 09 Sep 2025 01:02:30 +0000 Manifest next update: Tue 16 Sep 2025 01:02:30 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: /Q4Lzf7okcoHZhpDRUJ9cWsY/9udUnuBhaGhPXexD1I=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Sep 9 01:02:30 2025 GMT Not After : Sep 16 01:02:30 2025 GMT Subject: CN=68bf7ca6-e9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:53:c5:35:58:a6:dd:ae:af:90:07:85:a4: 9f:03:3c:fc:9c:61:e7:c8:b4:b7:e1:28:87:12:69: 13:72:2a:a7:63:83:fb:55:4b:61:df:3a:37:f9:3c: cf:84:6a:fa:9d:9d:39:6b:ae:7a:65:68:57:8a:8f: 99:87:69:d2:5c:69:92:9b:a2:b9:b5:ce:65:71:68: 83:46:44:3f:46:a2:53:f4:c6:14:e5:d5:a4:bc:09: 56:3d:bf:29:a4:70:6e:8a:71:66:82:4c:79:2b:0d: 4c:3d:81:74:89:75:10:0b:68:93:82:5b:be:0c:f3: ab:0b:30:96:65:50:c8:fe:7e:11:ac:5e:00:67:58: ae:02:01:43:f6:16:a2:79:a0:95:b6:82:53:cb:d7: 27:79:40:9b:df:3b:86:da:7f:05:ac:d1:3c:db:86: 11:28:b1:fa:b9:8e:ff:36:6e:ac:67:04:16:37:75: 13:e7:4b:d7:58:92:f4:17:cc:38:01:3a:da:dc:fb: 75:ff:31:4b:cf:fe:58:29:06:a8:d5:1f:3c:a0:59: 89:9b:9f:c7:43:e4:7a:bf:fa:da:68:d5:8c:84:96: 51:8a:d7:2b:2e:93:7f:63:cf:f9:66:a9:60:84:26: 1e:4a:f4:2a:2d:ad:c3:bf:82:40:fc:b5:d3:a0:78: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:4D:66:1B:20:6E:AC:A5:3A:C1:8E:8D:95:96:CA:35:CE:78:33 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:62:60:bd:52:68:0e:2b:b6:15:ed:e8:5a:2c:e4:c5:48: 80:19:b9:97:a6:66:52:c1:9a:8e:95:b0:ae:20:c4:74:20:77: 40:b8:e0:8b:f9:56:8f:2e:97:c3:f4:d5:7b:52:d6:a1:ec:88: 51:16:28:6d:f9:ba:39:fb:c0:d5:46:46:9a:34:65:21:7c:f5: cb:24:38:4d:87:5f:71:1e:25:d3:c6:c9:98:db:cf:2e:a4:b5: dc:09:65:5f:f9:ec:ed:c0:69:cd:ea:16:0a:c3:1c:80:a7:1e: a7:b6:87:81:9b:c9:36:7a:cf:67:79:1d:90:ca:70:17:b6:9e: a9:94:2f:18:6e:83:ed:43:f2:4f:ec:4f:bf:b2:b6:52:c2:83: 1e:f8:6b:b8:4b:bc:08:eb:68:84:af:ee:c5:a3:88:4d:a0:42: ee:57:69:ca:17:28:28:d5:2f:39:c6:89:3a:ca:42:2d:d0:0e: 8c:55:79:64:30:ed:fa:aa:59:b4:54:a4:73:18:42:5a:3e:9c: c4:41:39:1c:5d:ca:82:59:6a:7a:f5:b6:f8:e9:ff:6b:b2:7b: 3a:a8:85:2b:bc:c0:5c:24:4b:01:b1:bc:46:54:5f:4f:5b:90: 62:a1:ea:46:1d:23:af:ce:27:63:33:37:94:68:ef:87:d9:fa: 6c:6a:ce:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwOTA5MDEwMjMwWhcNMjUwOTE2MDEwMjMwWjAYMRYwFAYD VQQDEw02OGJmN2NhNi1lOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5NTxTVYpt2ur5AHhaSfAzz8nGHnyLS34SiHEmkTciqnY4P7VUth3zo3+TzP hGr6nZ05a656ZWhXio+Zh2nSXGmSm6K5tc5lcWiDRkQ/RqJT9MYU5dWkvAlWPb8p pHBuinFmgkx5Kw1MPYF0iXUQC2iTglu+DPOrCzCWZVDI/n4RrF4AZ1iuAgFD9hai eaCVtoJTy9cneUCb3zuG2n8FrNE824YRKLH6uY7/Nm6sZwQWN3UT50vXWJL0F8w4 ATra3Pt1/zFLz/5YKQao1R88oFmJm5/HQ+R6v/raaNWMhJZRitcrLpN/Y8/5Zqlg hCYeSvQqLa3Dv4JA/LXToHgt3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEciTWYb IG6spTrBjo2Vlso1zngzMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABaGJgvVJoDiu2Fe3oWizkxUiAGbmXpmZSwZqOlbCuIMR0IHdAuOCL +VaPLpfD9NV7Utah7IhRFiht+bo5+8DVRkaaNGUhfPXLJDhNh19xHiXTxsmY288u pLXcCWVf+eztwGnN6hYKwxyApx6ntoeBm8k2es9neR2QynAXtp6plC8YboPtQ/JP 7E+/srZSwoMe+Gu4S7wI62iEr+7Fo4hNoELuV2nKFygo1S85xok6ykIt0A6MVXlk MO36qlm0VKRzGEJaPpzEQTkcXcqCWWp69bb46f9rsns6qIUrvMBcJEsBsbxGVF9P W5BioepGHSOvzidjMzeUaO+H2fpsas64 -----END CERTIFICATE-----Generated at Tue Sep 9 18:27:37 2025 by rpki-client