$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: ndfvkLMLaqF7mxWqsE2lWouUt+FsrbLBceALqWJMo98= Subject key identifier: 00:F7:D0:2B:B3:A8:73:71:AF:7E:27:25:44:42:A6:98:06:1E:F5:CC Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 03AC Signing time: Fri 05 Sep 2025 01:05:12 +0000 Manifest this update: Fri 05 Sep 2025 01:05:11 +0000 Manifest next update: Fri 12 Sep 2025 01:05:11 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: BY13O//QCvzdOUkX3MaTZEMCbhcZROCPT7j0E5G5V0Y=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Sep 5 01:05:11 2025 GMT Not After : Sep 12 01:05:11 2025 GMT Subject: CN=68ba3748-cc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:f1:7e:67:f0:0d:75:89:7d:d1:78:c8:d4: 79:b5:b5:b4:a3:85:56:85:62:3f:42:4f:dd:f1:94: 0c:7f:f3:21:85:c4:f4:28:89:07:2d:7a:e3:ff:1f: 31:61:57:f7:7a:27:7d:a2:82:67:4e:7b:19:b6:3c: ae:31:cd:91:c6:6e:a3:51:f5:7e:fb:23:16:d1:8f: 85:f0:5a:a5:aa:22:f7:51:b9:b2:7b:a9:42:7f:18: 2f:55:bc:0a:f0:db:bb:43:1a:fb:81:00:78:d3:79: bd:fc:94:68:bf:5a:57:c1:77:f0:0a:09:73:b4:2b: 7a:59:f4:b8:60:56:42:c9:e4:7c:ec:78:be:d2:93: 47:b1:f0:02:7c:ee:1c:d6:12:fb:9c:2f:88:0f:f7: 37:e3:3c:b8:59:9e:c7:6b:0e:ce:2e:d3:ee:f3:13: 32:85:a9:a9:34:5c:d4:8b:f2:7f:0b:10:ed:b1:ac: 42:cc:d9:49:47:5f:8f:5e:4e:91:3b:b0:60:ad:22: 06:12:18:45:b0:1a:f0:04:e3:63:27:f4:78:a8:b0: a7:1a:48:2d:fa:67:30:6b:93:0c:8f:95:c8:45:b5: a3:cf:fe:50:a8:cc:9b:a3:f6:a7:59:a8:29:36:98: cb:80:9c:bc:b9:14:18:eb:a9:af:19:da:c5:dc:e8: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F7:D0:2B:B3:A8:73:71:AF:7E:27:25:44:42:A6:98:06:1E:F5:CC X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ab:d4:67:e8:93:8c:dc:bc:b3:eb:dd:d9:02:9a:0e:13:fa: 3f:51:d3:94:e9:ef:23:62:19:a5:00:ad:6f:a2:39:1c:c9:53: 92:65:cb:66:f9:a6:b3:53:47:ac:3c:97:9d:f4:51:ac:a9:bf: 35:0e:8d:96:ad:6e:cc:0c:a6:94:98:22:db:1f:f4:ce:7f:f2: 66:9b:be:ee:26:bc:38:cc:9e:96:d1:d3:a1:d7:3a:af:56:6d: 56:8f:ea:eb:38:9e:c7:39:66:bc:b3:a7:0e:32:22:a0:41:89: 9b:c8:10:90:02:8a:a9:ec:b3:5a:92:8e:32:f0:9c:be:ac:76: 73:f6:54:54:e2:19:cb:61:33:d0:56:e5:fc:b7:48:ad:2f:c7: bd:39:6e:95:90:24:c5:54:db:a3:2d:68:1d:a9:70:6c:ac:dc: 52:4d:31:d7:75:9e:59:88:f7:da:ba:1c:85:e3:25:e4:8a:08: 27:ea:37:a4:99:68:4d:f0:b2:13:03:70:9b:ae:55:16:72:95: c3:8a:c4:c7:03:8a:64:ea:b2:12:59:68:07:11:eb:21:4c:59: 3d:bf:d2:62:ca:09:f9:85:ba:d9:94:48:0e:37:de:b0:46:4c: bf:0c:0f:7e:1b:75:68:a0:cb:d5:2f:66:c8:05:f8:e2:2f:c6: dc:3e:cc:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwOTA1MDEwNTExWhcNMjUwOTEyMDEwNTExWjAYMRYwFAYD VQQDEw02OGJhMzc0OC1jYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR3xfmfwDXWJfdF4yNR5tbW0o4VWhWI/Qk/d8ZQMf/MhhcT0KIkHLXrj/x8x YVf3eid9ooJnTnsZtjyuMc2Rxm6jUfV++yMW0Y+F8FqlqiL3Ubmye6lCfxgvVbwK 8Nu7Qxr7gQB403m9/JRov1pXwXfwCglztCt6WfS4YFZCyeR87Hi+0pNHsfACfO4c 1hL7nC+ID/c34zy4WZ7Haw7OLtPu8xMyhampNFzUi/J/CxDtsaxCzNlJR1+PXk6R O7BgrSIGEhhFsBrwBONjJ/R4qLCnGkgt+mcwa5MMj5XIRbWjz/5QqMybo/anWagp NpjLgJy8uRQY66mvGdrF3Oh2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD30Cuz qHNxr34nJURCppgGHvXMMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmq9Rn6JOM3Lyz693ZApoOE/o/UdOU6e8jYhmlAK1vojkcyVOSZctm +aazU0esPJed9FGsqb81Do2WrW7MDKaUmCLbH/TOf/Jmm77uJrw4zJ6W0dOh1zqv Vm1Wj+rrOJ7HOWa8s6cOMiKgQYmbyBCQAoqp7LNako4y8Jy+rHZz9lRU4hnLYTPQ VuX8t0itL8e9OW6VkCTFVNujLWgdqXBsrNxSTTHXdZ5ZiPfauhyF4yXkiggn6jek mWhN8LITA3CbrlUWcpXDisTHA4pk6rISWWgHEeshTFk9v9Jiygn5hbrZlEgON96w Rky/DA9+G3VooMvVL2bIBfjiL8bcPszp -----END CERTIFICATE-----Generated at Sat Sep 6 15:29:20 2025 by rpki-client