$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: jSWTT0JriYRfTg+2azwpg+KE+zyL/GIj3tBJdQgTxOQ= Subject key identifier: 16:97:9E:34:F5:58:DD:4E:FB:BC:BE:EC:0C:F7:AC:A3:DE:04:FA:04 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 34C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 34BC Signing time: Sun 24 Aug 2025 15:13:53 +0000 Manifest this update: Sun 24 Aug 2025 15:13:52 +0000 Manifest next update: Sun 31 Aug 2025 15:13:52 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: +wnRIK6AnO55UAR57kSdlMQhevzbgKRUgNwL3Jv9Q98=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13510 (0x34c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Aug 24 15:13:52 2025 GMT Not After : Aug 31 15:13:52 2025 GMT Subject: CN=68ab2c30-6c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:c0:9c:68:81:ff:4d:79:c9:56:c0:27:9f: 67:26:f1:6f:62:03:c3:05:a6:c5:79:ba:94:65:5f: ea:7a:72:e2:71:e3:bb:6c:47:fe:44:68:5c:86:0e: 90:15:5f:51:bf:15:a5:92:5e:4e:07:20:53:4d:b0: 6d:9b:a3:ca:0f:b2:e7:9f:78:63:15:6f:36:90:1b: 53:a7:8b:e6:54:e6:95:68:9e:55:83:aa:84:50:65: 4f:a3:21:2f:8e:6d:04:9c:4c:05:34:12:61:3f:de: 9e:85:cf:10:2c:54:ae:d8:0d:dd:a8:da:1d:09:22: 04:26:ec:f0:ee:5d:ef:4a:24:d0:4e:93:2f:8e:b4: 1c:15:88:1b:8d:cc:41:58:a3:79:49:07:48:bb:bd: 53:a1:cf:db:cb:50:7e:68:7e:5e:bc:ce:3f:c2:99: f0:3d:e2:29:d4:cf:2b:f9:79:31:c9:54:49:98:70: 93:08:50:6b:d7:5f:eb:c0:d4:99:7e:78:cd:ab:8a: 82:e6:d9:b3:50:5a:9f:b5:c8:03:be:8b:0f:f3:88: f9:18:77:3b:a3:13:ce:24:cf:cc:4c:78:08:c7:f1: 5b:0d:63:bc:75:a1:85:f7:4f:c0:9e:0d:5c:7f:fa: 98:d7:82:ca:e3:f4:1a:7b:99:17:d5:20:88:a7:48: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:9E:34:F5:58:DD:4E:FB:BC:BE:EC:0C:F7:AC:A3:DE:04:FA:04 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:0d:9f:da:bb:2b:a9:79:22:f5:aa:68:50:83:08:a6:bc:62: 0b:82:62:1d:24:14:56:95:b1:a9:ab:59:5f:92:85:09:8e:f5: 0e:a1:9a:35:7d:fc:a2:76:e1:69:d1:1d:be:db:67:83:ad:8e: 2a:66:88:c6:3a:9a:5b:16:2c:e0:9c:1c:ae:b6:d8:38:b0:b1: 02:22:17:d2:9e:b8:92:fc:fd:19:3b:b8:74:62:fa:c7:67:07: ff:31:28:9c:2b:5e:f2:27:f9:8c:02:63:de:83:9c:ad:be:03: 6d:00:0d:21:1c:49:fa:51:96:ac:3e:7d:5f:ff:31:17:73:05: 78:b5:62:47:11:13:04:b5:e1:6a:d0:a8:4e:d7:6d:c2:3c:67: db:3a:28:5e:cd:1b:54:34:a4:11:8e:32:6f:57:fb:5c:79:92: d6:a3:8a:8b:8c:88:0f:af:c8:47:27:d7:7c:3a:49:c7:e5:de: 2d:46:34:5a:34:72:99:24:3d:69:18:a6:9c:8b:e3:24:63:62: 39:e5:0b:b1:19:f1:f4:04:e2:a2:44:92:d3:25:33:ec:68:01: d1:b5:29:55:a7:18:91:af:c1:37:59:f1:69:a6:37:df:0f:be: 87:90:3d:e2:38:fa:26:8b:89:ec:6f:8c:55:d3:33:4d:13:bf: 7a:8f:4a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjUwODI0MTUxMzUyWhcNMjUwODMxMTUxMzUyWjAYMRYwFAYD VQQDEw02OGFiMmMzMC02YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B7AnGiB/015yVbAJ59nJvFvYgPDBabFebqUZV/qenLiceO7bEf+RGhchg6Q FV9RvxWlkl5OByBTTbBtm6PKD7Lnn3hjFW82kBtTp4vmVOaVaJ5Vg6qEUGVPoyEv jm0EnEwFNBJhP96ehc8QLFSu2A3dqNodCSIEJuzw7l3vSiTQTpMvjrQcFYgbjcxB WKN5SQdIu71Toc/by1B+aH5evM4/wpnwPeIp1M8r+XkxyVRJmHCTCFBr11/rwNSZ fnjNq4qC5tmzUFqftcgDvosP84j5GHc7oxPOJM/MTHgIx/FbDWO8daGF90/Ang1c f/qY14LK4/Qae5kX1SCIp0jFIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaXnjT1 WN1O+7y+7Az3rKPeBPoEMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDDZ/auyupeSL1qmhQgwimvGILgmIdJBRWlbGpq1lfkoUJjvUOoZo1 ffyiduFp0R2+22eDrY4qZojGOppbFizgnByuttg4sLECIhfSnriS/P0ZO7h0YvrH Zwf/MSicK17yJ/mMAmPeg5ytvgNtAA0hHEn6UZasPn1f/zEXcwV4tWJHERMEteFq 0KhO123CPGfbOihezRtUNKQRjjJvV/tceZLWo4qLjIgPr8hHJ9d8OknH5d4tRjRa NHKZJD1pGKaci+MkY2I55QuxGfH0BOKiRJLTJTPsaAHRtSlVpxiRr8E3WfFppjff D76HkD3iOPomi4nsb4xV0zNNE796j0rL -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:49 2025 by rpki-client