$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: eJiz1/INQU8C3aIBfG/KQ8u/UuwkiSFWKcPQE+T9Au8= Subject key identifier: F2:D9:2D:C5:79:35:B7:DE:64:C8:CC:DD:8B:F0:34:E2:0F:2B:66:78 Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0C1A Signing time: Sat 26 Jul 2025 18:48:42 +0000 Manifest this update: Sat 26 Jul 2025 18:48:41 +0000 Manifest next update: Sat 02 Aug 2025 18:48:41 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: J9kqt231Vqt92unuJXweYhz33E00f5CEzJzO6Bu+Y5U=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 18:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Jul 26 18:48:41 2025 GMT Not After : Aug 2 18:48:41 2025 GMT Subject: CN=6885230a-2a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:0a:94:df:3e:2d:09:30:b7:9c:0b:af:f9: 55:32:04:12:b4:06:5c:f2:1b:16:a6:c9:1e:e0:0c: 71:3b:8b:90:ea:01:84:ec:0b:8d:fc:d1:82:e3:46: 93:05:33:8e:f1:70:10:92:ab:5f:16:63:39:5e:3d: e9:32:06:63:98:38:f1:b7:a2:81:74:3f:7e:de:c7: 2f:33:f7:b8:b4:bb:8d:7a:38:a1:29:72:41:12:24: c9:df:3e:15:af:5b:0c:65:19:44:8e:00:b8:d0:e6: 8f:6f:8a:b3:4e:2d:40:a7:1a:4a:ac:72:50:3d:46: 45:9a:54:e1:d0:4d:cb:60:91:97:0c:d5:e7:a1:52: 05:18:d7:d0:85:97:ec:bd:7b:39:18:5e:8d:7a:b1: eb:aa:bf:79:59:e4:7f:4f:f1:d6:4f:2b:a1:4a:43: ab:6e:4e:94:19:d1:e6:43:f6:c0:46:9b:c8:46:16: fb:10:56:05:d5:f0:17:db:16:56:16:f5:3f:44:52: 97:72:45:11:ef:6f:a6:96:62:48:59:af:5d:70:fc: a5:8e:5d:04:45:db:04:35:07:00:77:42:88:11:d0: 65:5c:15:90:be:96:fc:83:7a:da:c4:fd:a7:74:cd: b8:47:ea:b7:46:66:75:df:dc:b7:83:4d:5a:d5:60: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D9:2D:C5:79:35:B7:DE:64:C8:CC:DD:8B:F0:34:E2:0F:2B:66:78 X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:44:fc:ef:12:06:63:a6:06:d3:c9:8a:8a:3e:04:f0:30:7f: 72:4e:73:c1:45:1a:1a:aa:b3:fc:61:2c:6c:eb:7c:27:fd:a2: bb:bf:0b:89:b6:dc:5e:ce:d9:7f:f1:72:68:16:3b:21:cc:ab: 25:6c:12:7c:47:02:4d:2c:ab:34:c5:9b:5b:40:8d:93:9b:14: 66:47:5b:84:c7:58:b3:6a:d5:87:d3:58:51:c4:64:68:f7:16: 59:c1:77:97:ec:9f:f3:70:03:0d:18:6a:06:fb:69:9b:4a:64: a3:5e:01:63:08:78:7c:ac:90:20:ec:38:2d:92:bb:5c:ca:ad: 73:5f:e5:31:d0:20:2f:6a:c3:3f:89:63:c9:57:53:32:d7:90: 4c:fe:04:31:01:79:5a:fe:c2:19:21:60:08:02:73:af:cf:34: 1b:4a:c5:98:1f:1e:3a:ed:7e:68:94:72:e7:64:d0:6d:0f:e1: f1:f4:68:e2:0d:5c:6f:68:ba:ed:36:38:31:b8:d0:98:3e:28: fd:69:0a:35:88:e1:2a:00:84:f3:82:62:88:0a:af:0d:c2:0c: b7:e9:5f:65:5f:00:bb:38:e2:e4:b3:d2:3c:20:35:56:9a:39: a5:f1:13:01:db:d6:78:d1:27:3e:a6:63:52:67:2c:2f:9c:ff: eb:d6:3b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwNzI2MTg0ODQxWhcNMjUwODAyMTg0ODQxWjAYMRYwFAYD VQQDEw02ODg1MjMwYS0yYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEgKlN8+LQkwt5wLr/lVMgQStAZc8hsWpske4AxxO4uQ6gGE7AuN/NGC40aT BTOO8XAQkqtfFmM5Xj3pMgZjmDjxt6KBdD9+3scvM/e4tLuNejihKXJBEiTJ3z4V r1sMZRlEjgC40OaPb4qzTi1ApxpKrHJQPUZFmlTh0E3LYJGXDNXnoVIFGNfQhZfs vXs5GF6NerHrqr95WeR/T/HWTyuhSkOrbk6UGdHmQ/bARpvIRhb7EFYF1fAX2xZW FvU/RFKXckUR72+mlmJIWa9dcPyljl0ERdsENQcAd0KIEdBlXBWQvpb8g3raxP2n dM24R+q3RmZ139y3g01a1WAEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLZLcV5 NbfeZMjM3YvwNOIPK2Z4MB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiRPzvEgZjpgbTyYqKPgTwMH9yTnPBRRoaqrP8YSxs63wn/aK7vwuJ ttxeztl/8XJoFjshzKslbBJ8RwJNLKs0xZtbQI2TmxRmR1uEx1izatWH01hRxGRo 9xZZwXeX7J/zcAMNGGoG+2mbSmSjXgFjCHh8rJAg7Dgtkrtcyq1zX+Ux0CAvasM/ iWPJV1My15BM/gQxAXla/sIZIWAIAnOvzzQbSsWYHx467X5olHLnZNBtD+Hx9Gji DVxvaLrtNjgxuNCYPij9aQo1iOEqAITzgmKICq8Nwgy36V9lXwC7OOLks9I8IDVW mjml8RMB29Z40Sc+pmNSZywvnP/r1jvz -----END CERTIFICATE-----Generated at Sun Jul 27 07:46:39 2025 by rpki-client