$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: 5shLD6qlBBdciXXOgZW6GUOF2wtYznktj86JFGZ2Tjc= Subject key identifier: 36:02:49:33:2B:5B:0E:07:B8:34:85:C1:45:DC:7D:93:9E:D4:AD:59 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 051E Signing time: Thu 18 Sep 2025 23:54:51 +0000 Manifest this update: Thu 18 Sep 2025 23:54:51 +0000 Manifest next update: Thu 25 Sep 2025 23:54:51 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: DGHtuRjwobMqaVCd6RfspeVy/+KKIiF0h1sIhBgLj5o=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Sep 18 23:54:51 2025 GMT Not After : Sep 25 23:54:51 2025 GMT Subject: CN=68cc9bcb-0793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:8e:42:8c:2e:bf:fe:97:5f:d8:a8:89:5e: be:17:cc:c4:74:66:c9:a5:eb:1c:32:25:00:23:87: 49:0a:c5:3b:78:d1:98:7f:35:73:46:de:c7:aa:ee: 0f:dd:f1:ea:b1:25:41:1b:6b:65:5e:a0:1a:68:66: 3d:9d:be:79:4d:67:de:a5:1b:32:12:40:cb:81:96: 41:30:48:53:60:2d:bf:6d:79:94:86:cc:a0:0e:0a: 0d:6f:58:56:59:1f:c7:64:1e:47:78:6d:0a:8c:10: 91:43:3a:f0:4d:f3:d0:a4:aa:5d:4e:c8:b9:61:e4: 25:08:a8:3f:2f:68:b0:0c:0a:ed:f4:07:01:41:e6: eb:ac:4a:f5:ae:e7:dd:76:2f:23:c0:bc:4b:96:98: d6:ea:b9:ac:1d:aa:60:3d:d2:f4:3f:a9:a4:6b:b4: ba:03:2e:2c:62:61:4d:ed:a6:a9:bb:9b:2c:b1:f8: 1f:26:02:5b:f8:3f:78:72:65:99:44:3d:bc:7e:f3: 15:27:e1:3e:95:de:18:86:8e:58:73:f5:d8:09:b6: 32:ef:15:28:ef:7a:16:28:76:d1:d4:98:43:2b:1c: d0:c4:84:c4:e0:86:b9:c6:ba:d8:68:98:41:33:b9: 29:87:63:06:c6:ac:04:ec:08:53:15:b6:55:ac:33: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:02:49:33:2B:5B:0E:07:B8:34:85:C1:45:DC:7D:93:9E:D4:AD:59 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:70:9c:d1:a5:ea:bb:c6:a5:72:e9:bf:cd:50:78:c2:99:eb: 62:1e:e2:ff:75:a2:da:0e:a2:07:15:99:2c:f8:34:19:29:92: 50:80:3a:2f:16:26:6a:ac:d2:03:4a:cd:04:cd:46:58:76:34: 22:46:3b:bc:58:36:08:91:65:1d:90:ac:15:d8:2d:e3:83:b2: e3:ad:5e:00:64:24:58:9f:8a:4f:84:e1:99:d9:c6:6e:f8:f6: 04:c6:f9:20:f6:b7:c9:7f:49:17:df:82:11:8f:e8:82:84:43: 7b:9d:cb:1d:79:1a:f2:64:c9:04:11:e3:e5:07:8b:36:9f:0f: ff:5a:94:61:a9:08:3e:4e:a9:8d:2a:eb:b4:a3:75:9d:97:b1: 24:ec:cb:cf:93:2a:fd:d7:16:7f:6a:47:2b:1a:3f:cf:04:9b: 37:0a:13:20:d9:37:59:ad:95:85:9d:ef:1c:d2:ab:79:52:2b: bd:b5:ef:2a:d2:91:4a:1e:50:75:60:11:31:87:10:cf:da:b8: b5:67:cc:2e:bc:b4:f3:10:98:4d:eb:8a:ce:7d:22:7f:47:56: 85:2e:b0:01:9d:74:6d:fa:36:bb:ce:f5:ed:dc:4e:76:27:10: ed:db:73:56:ca:0a:1a:8a:bf:0f:ee:3e:79:29:80:0a:bf:b7: 75:9b:a7:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwOTE4MjM1NDUxWhcNMjUwOTI1MjM1NDUxWjAYMRYwFAYD VQQDEw02OGNjOWJjYi0wNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMWOQowuv/6XX9ioiV6+F8zEdGbJpescMiUAI4dJCsU7eNGYfzVzRt7Hqu4P 3fHqsSVBG2tlXqAaaGY9nb55TWfepRsyEkDLgZZBMEhTYC2/bXmUhsygDgoNb1hW WR/HZB5HeG0KjBCRQzrwTfPQpKpdTsi5YeQlCKg/L2iwDArt9AcBQebrrEr1rufd di8jwLxLlpjW6rmsHapgPdL0P6mka7S6Ay4sYmFN7aapu5sssfgfJgJb+D94cmWZ RD28fvMVJ+E+ld4Yho5Yc/XYCbYy7xUo73oWKHbR1JhDKxzQxITE4Ia5xrrYaJhB M7kph2MGxqwE7AhTFbZVrDNM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYCSTMr Ww4HuDSFwUXcfZOe1K1ZMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAecJzRpeq7xqVy6b/NUHjCmetiHuL/daLaDqIHFZks+DQZKZJQgDov FiZqrNIDSs0EzUZYdjQiRju8WDYIkWUdkKwV2C3jg7LjrV4AZCRYn4pPhOGZ2cZu +PYExvkg9rfJf0kX34IRj+iChEN7ncsdeRryZMkEEePlB4s2nw//WpRhqQg+TqmN Kuu0o3Wdl7Ek7MvPkyr91xZ/akcrGj/PBJs3ChMg2TdZrZWFne8c0qt5Uiu9te8q 0pFKHlB1YBExhxDP2ri1Z8wuvLTzEJhN64rOfSJ/R1aFLrABnXRt+ja7zvXt3E52 JxDt23NWygoair8P7j55KYAKv7d1m6dz -----END CERTIFICATE-----Generated at Fri Sep 19 07:46:17 2025 by rpki-client