$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: s90mqJJJs7J4qmZnclXXxIOi9lJm4rhlx8nFC5s2xmM= Subject key identifier: 34:59:FE:18:B4:2B:6C:64:44:A5:7D:31:7F:B3:A8:6D:44:40:3B:B6 Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 0704 Signing time: Sun 14 Sep 2025 22:13:06 +0000 Manifest this update: Sun 14 Sep 2025 22:13:05 +0000 Manifest next update: Sun 21 Sep 2025 22:13:05 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: cgUkd0IJu2hp+hB+AOEInr6LKdDMlpbQ/OIVEK83BPM=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: nGQeEW39Od+vQgXs87Jbi/bqrVd4uaNCNXUbjbZuGDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: Sep 14 22:13:05 2025 GMT Not After : Sep 21 22:13:05 2025 GMT Subject: CN=68c73df2-d7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:96:44:9e:2f:c9:80:f6:8a:ae:7f:0a:75: 00:cc:06:40:c2:a3:cb:8d:be:10:19:1e:56:89:7f: 8f:52:44:ef:0f:e9:bd:67:32:67:8b:f8:ff:2c:c0: b6:1f:ea:05:23:d5:bf:04:0c:1a:f3:cb:15:b8:71: e7:74:33:3c:47:3d:b2:36:e4:b1:5d:06:1f:68:99: 9a:75:a9:2d:16:9f:91:59:24:1c:bb:cc:25:e7:ec: 3e:6d:da:2a:4f:d3:21:b2:31:db:02:ba:5a:9a:3d: 76:b5:96:2f:a1:d8:25:6a:fb:8e:1f:53:4f:c1:50: 47:32:4a:a1:dc:89:9b:5f:c2:88:55:c3:e1:43:3a: df:5c:f1:4c:16:ec:78:e9:ee:40:5b:32:33:4b:47: d3:11:dc:41:03:9c:e3:a6:a9:64:55:f0:60:4b:99: e6:42:e2:30:da:7c:72:f7:36:ae:c1:af:66:79:20: 71:1d:9f:a0:77:fd:92:4e:cd:a3:4b:32:19:78:93: 6c:77:5d:48:ed:c5:cd:7e:de:ed:15:22:7a:81:70: f4:cb:7c:d2:01:30:7c:43:bd:c4:0f:45:92:52:aa: 8b:4b:ca:20:84:28:ab:1c:d3:8f:3e:d2:65:0e:34: dc:c2:c0:50:35:43:8d:0b:04:19:dc:40:71:74:16: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:FE:18:B4:2B:6C:64:44:A5:7D:31:7F:B3:A8:6D:44:40:3B:B6 X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4f:0f:d2:77:28:c6:8f:d0:47:c4:a0:dc:1a:a3:8f:97:90: f6:92:a4:a6:49:6f:35:d9:fc:1b:bf:ba:7e:3c:32:4f:59:20: 25:88:1d:cd:9a:3e:8b:54:e4:50:06:b2:22:47:e9:24:79:50: fa:65:7c:ca:5f:85:2e:ff:56:0b:6e:43:ee:48:08:95:80:be: 17:1e:ae:a9:a3:51:0b:bd:4d:5b:1b:73:4a:2f:d7:31:4f:d5: 50:8f:f0:a9:27:de:bc:ac:b4:1c:5e:be:88:34:26:d4:1c:d2: e2:6e:08:17:32:e9:89:a2:db:81:4a:ce:da:7f:4c:4c:fb:44: a0:c0:24:4c:fc:24:f9:00:4c:ad:66:9e:6e:0c:3e:19:28:19: 8e:0b:7e:59:ea:e5:3a:4e:8b:d4:94:b8:d0:ea:15:b7:53:86: fc:bf:1e:bf:ae:17:e6:57:8e:91:88:dc:6b:32:3f:5c:d9:af: 9a:26:d5:7a:cb:6d:ec:34:0c:20:d3:28:8a:07:64:ab:65:d6: df:18:0a:08:81:6c:6d:2f:51:9d:d2:17:0a:28:b9:0b:77:ff: 44:87:b6:bd:cd:4f:86:3b:71:51:1b:90:54:40:35:6c:c7:77: 4b:70:9f:77:5e:1c:ce:43:cf:15:ba:08:3e:b1:2b:08:8a:2a: 67:d5:31:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjUwOTE0MjIxMzA1WhcNMjUwOTIxMjIxMzA1WjAYMRYwFAYD VQQDEw02OGM3M2RmMi1kN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg+WRJ4vyYD2iq5/CnUAzAZAwqPLjb4QGR5WiX+PUkTvD+m9ZzJni/j/LMC2 H+oFI9W/BAwa88sVuHHndDM8Rz2yNuSxXQYfaJmadaktFp+RWSQcu8wl5+w+bdoq T9MhsjHbArpamj12tZYvodglavuOH1NPwVBHMkqh3ImbX8KIVcPhQzrfXPFMFux4 6e5AWzIzS0fTEdxBA5zjpqlkVfBgS5nmQuIw2nxy9zauwa9meSBxHZ+gd/2STs2j SzIZeJNsd11I7cXNft7tFSJ6gXD0y3zSATB8Q73ED0WSUqqLS8oghCirHNOPPtJl DjTcwsBQNUONCwQZ3EBxdBZMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRZ/hi0 K2xkRKV9MX+zqG1EQDu2MB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXTw/SdyjGj9BHxKDcGqOPl5D2kqSmSW812fwbv7p+PDJPWSAliB3N mj6LVORQBrIiR+kkeVD6ZXzKX4Uu/1YLbkPuSAiVgL4XHq6po1ELvU1bG3NKL9cx T9VQj/CpJ968rLQcXr6INCbUHNLibggXMumJotuBSs7af0xM+0SgwCRM/CT5AEyt Zp5uDD4ZKBmOC35Z6uU6TovUlLjQ6hW3U4b8vx6/rhfmV46RiNxrMj9c2a+aJtV6 y23sNAwg0yiKB2SrZdbfGAoIgWxtL1Gd0hcKKLkLd/9Eh7a9zU+GO3FRG5BUQDVs x3dLcJ93XhzOQ88Vugg+sSsIiipn1TEj -----END CERTIFICATE-----Generated at Tue Sep 16 07:45:03 2025 by rpki-client