$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: cozm137XUz3HhW0gn6ocxMjZKkB4DNFu/nJzOg7u9Cg= Subject key identifier: 9B:F2:39:3E:10:56:3D:4E:FF:03:0A:A3:1B:29:76:8A:2F:D8:E0:0F Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 0505 Signing time: Fri 01 Aug 2025 00:47:15 +0000 Manifest this update: Fri 01 Aug 2025 00:47:15 +0000 Manifest next update: Fri 08 Aug 2025 00:47:15 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: 7fDi2bEuCSY2WZspjTafLu02ch637jJvX1Qpkg0MPTU=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Aug 1 00:47:15 2025 GMT Not After : Aug 8 00:47:15 2025 GMT Subject: CN=688c0e93-4f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:e8:07:50:91:67:1d:e0:ab:74:30:4f:b4: 5d:17:18:16:b4:91:91:5e:8c:2b:c0:5d:be:fe:2b: 6c:85:ce:f9:7c:6c:f8:9c:d2:b0:05:bc:86:3a:40: 9b:84:59:b4:52:ef:0f:62:9f:31:2c:1b:bb:20:7d: 70:d3:94:70:5b:a2:e3:da:3e:25:41:34:5a:f2:fc: 72:a8:10:7e:79:e4:af:85:f6:45:38:68:59:c6:57: dd:63:fa:1d:17:b7:83:3c:c6:b0:b4:08:f5:16:a0: 85:5e:64:e4:73:ee:64:98:6a:a4:29:30:26:1d:16: f5:61:1f:77:09:6e:ae:57:6a:f4:82:2b:3b:71:19: 8d:90:0a:7a:84:37:1e:29:52:3b:5a:25:1e:0d:e5: 50:37:a9:16:3b:92:8c:4c:11:08:c9:72:b1:f2:5e: 37:15:4e:75:56:f7:53:f1:cd:33:b0:a9:2a:b1:97: e0:73:37:f0:b3:ff:6e:1c:1a:5d:52:37:7b:1a:14: 81:ba:e2:14:80:a5:ae:80:e3:2c:30:41:63:64:40: 30:7c:20:d0:22:ad:74:89:2d:e5:b3:b8:e2:ac:e5: e2:92:7a:e9:ec:57:38:78:89:f1:8c:94:13:14:b4: 9f:e1:d6:ed:ca:c2:6f:38:c0:49:e3:2b:c4:b5:6b: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:39:3E:10:56:3D:4E:FF:03:0A:A3:1B:29:76:8A:2F:D8:E0:0F X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fd:1c:89:31:07:e9:ca:a6:49:8f:44:cc:ef:04:e5:ce:02: bd:7a:58:9a:a4:30:30:76:0f:0c:f2:57:9a:17:2c:7c:c1:f1: 13:d9:d2:d8:16:85:ae:fb:a7:f3:41:47:6d:48:22:9c:8b:9e: b4:36:5e:bd:b6:09:12:9e:22:31:7c:79:11:d6:49:2f:d9:1a: cb:a4:d5:84:89:f6:0a:32:3e:9c:0f:3b:18:72:59:8b:19:44: 5d:5f:25:15:35:41:a7:b6:e3:cd:bc:88:c4:91:6a:48:35:be: 1e:84:a4:be:d1:71:ee:f8:05:a1:99:79:70:c2:d3:b2:12:a4: 61:c2:96:f4:bc:80:5b:ea:95:1f:99:c7:79:15:59:6c:29:e9: 19:77:db:93:93:2e:1b:1d:ea:ec:10:4b:c8:cc:2c:ba:3a:08: 4d:08:3d:83:ea:fa:28:36:96:a3:08:b8:03:86:e5:36:c6:45: ea:2b:2b:dd:d7:de:d7:b8:19:c2:8c:dd:50:c6:5d:24:3a:b4: 0e:d7:1d:ec:3d:28:e4:fd:5c:25:06:a9:d9:02:c0:43:5b:a6: 82:ab:5d:72:da:59:6f:4b:7c:45:8a:28:5e:9a:c9:eb:00:0c: 17:07:1f:9b:66:27:03:e4:b9:c9:75:69:d2:0f:99:32:ea:b5: 12:0c:14:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwODAxMDA0NzE1WhcNMjUwODA4MDA0NzE1WjAYMRYwFAYD VQQDEw02ODhjMGU5My00ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv/oB1CRZx3gq3QwT7RdFxgWtJGRXowrwF2+/itshc75fGz4nNKwBbyGOkCb hFm0Uu8PYp8xLBu7IH1w05RwW6Lj2j4lQTRa8vxyqBB+eeSvhfZFOGhZxlfdY/od F7eDPMawtAj1FqCFXmTkc+5kmGqkKTAmHRb1YR93CW6uV2r0gis7cRmNkAp6hDce KVI7WiUeDeVQN6kWO5KMTBEIyXKx8l43FU51VvdT8c0zsKkqsZfgczfws/9uHBpd Ujd7GhSBuuIUgKWugOMsMEFjZEAwfCDQIq10iS3ls7jirOXiknrp7Fc4eInxjJQT FLSf4dbtysJvOMBJ4yvEtWug1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvyOT4Q Vj1O/wMKoxspdoov2OAPMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/RyJMQfpyqZJj0TM7wTlzgK9eliapDAwdg8M8leaFyx8wfET2dLY FoWu+6fzQUdtSCKci560Nl69tgkSniIxfHkR1kkv2RrLpNWEifYKMj6cDzsYclmL GURdXyUVNUGntuPNvIjEkWpINb4ehKS+0XHu+AWhmXlwwtOyEqRhwpb0vIBb6pUf mcd5FVlsKekZd9uTky4bHersEEvIzCy6OghNCD2D6vooNpajCLgDhuU2xkXqKyvd 197XuBnCjN1Qxl0kOrQO1x3sPSjk/VwlBqnZAsBDW6aCq11y2llvS3xFiihemsnr AAwXBx+bZicD5LnJdWnSD5ky6rUSDBRf -----END CERTIFICATE-----Generated at Sat Aug 2 05:36:57 2025 by rpki-client