$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json) Hash identifier: biTrlbPjfARIBfL3uAl89k/Zxon2pCXS/ig/gAuUXxA= Subject key identifier: B0:27:6C:94:38:23:57:D8:5D:00:B8:68:51:3D:5D:63:6B:FE:94:F6 Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft Manifest number: 0191 Signing time: Wed 17 Sep 2025 04:01:27 +0000 Manifest this update: Wed 17 Sep 2025 04:01:27 +0000 Manifest next update: Wed 24 Sep 2025 04:01:27 +0000 Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: kUItnTzOI9YTO/vjBEv7bbM4STH0ZSpPbs2GKBvO3tQ=) 2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: FoAylNmdesRHU3oexctbCd7CtqneWbl6QUSlHnFcNTI=) 3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=) 4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Validity Not Before: Sep 17 04:01:27 2025 GMT Not After : Sep 24 04:01:27 2025 GMT Subject: CN=68ca3297-a237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:16:e6:56:e4:f5:89:ca:0f:ff:6c:c6:a5: 64:ca:97:3b:5d:b8:9e:a5:19:3e:7e:16:fc:21:99: fc:43:36:07:9b:63:36:ec:50:14:49:5a:02:70:09: 34:9a:33:88:70:6b:5f:c3:91:6b:48:88:e0:7b:ef: af:76:0e:78:33:cb:ea:ab:40:1c:e5:5b:06:e4:99: be:eb:b1:1a:eb:40:ac:0b:95:85:84:ba:80:c7:9a: fe:32:7f:34:a9:7b:64:51:f1:61:10:b3:af:34:1c: fd:e0:a8:fb:f6:96:ec:63:4b:ff:fc:bb:aa:7b:8b: 9b:e5:0b:dd:5c:79:30:98:45:ba:b0:e2:bf:14:1b: 7e:48:33:8a:6a:0a:cf:20:b1:ce:67:1d:70:f9:10: 58:7a:07:6d:fe:c5:2c:22:33:76:51:0b:0f:22:3e: 55:11:49:d9:b6:36:8d:21:81:b5:7f:6c:a3:2a:8e: 2b:10:b3:80:c6:13:e3:e2:3e:ef:45:64:ea:e9:c2: de:23:d6:c7:72:a9:e5:e5:f9:b4:a6:41:76:50:66: cc:d2:d8:60:89:f8:6e:d0:b3:f5:48:cc:3a:3d:fe: b4:d1:45:a9:4c:88:1e:15:2a:4e:8a:d9:52:20:83: fe:76:58:0d:16:ea:81:90:00:df:66:6e:ce:9c:77: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:27:6C:94:38:23:57:D8:5D:00:B8:68:51:3D:5D:63:6B:FE:94:F6 X509v3 Authority Key Identifier: keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9b:6e:f0:d7:e0:52:98:3e:f9:59:4e:2d:0c:97:1d:b4:6e: ad:19:6d:03:95:5d:c1:74:b8:bc:2a:97:e3:69:d2:6f:bd:39: c8:3c:10:78:49:1d:40:7a:d6:47:cc:33:d2:3c:54:08:c9:b9: a3:02:b7:31:cd:cf:cb:9c:14:f6:71:2d:f8:93:74:7e:e8:09: 28:0f:89:31:fb:35:55:24:dd:fa:f4:37:6b:cc:ac:46:b8:8e: 71:a3:c0:64:88:69:b8:8e:b6:bf:ab:a4:e7:d2:89:5e:e6:05: ed:5b:21:e5:47:51:33:81:78:cd:ea:c6:ba:28:b0:8a:10:42: 95:3d:60:e2:9f:b1:7a:a1:67:4e:b1:ee:a4:d9:d7:df:a2:b9: aa:67:48:c1:0c:cd:23:ee:80:52:86:e2:0b:66:4b:02:f9:6b: e2:f6:b1:1c:9a:34:ab:3d:ea:e0:5e:23:18:02:64:31:9f:19: bd:6d:cd:ff:ed:e4:39:32:e7:2c:f8:2b:50:8a:d9:20:58:95: a9:7b:10:2b:90:5b:96:f4:81:88:ed:cd:cb:7b:eb:74:6c:76: 2b:cb:f7:b7:dd:48:93:5c:5c:32:29:ba:ee:23:60:a9:30:34: ca:8c:4f:40:0b:38:40:3b:15:e1:19:5d:55:14:10:9e:9a:64: 9c:d4:c5:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy QTFGMDA5MkQwHhcNMjUwOTE3MDQwMTI3WhcNMjUwOTI0MDQwMTI3WjAYMRYwFAYD VQQDEw02OGNhMzI5Ny1hMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL8W5lbk9YnKD/9sxqVkypc7XbiepRk+fhb8IZn8QzYHm2M27FAUSVoCcAk0 mjOIcGtfw5FrSIjge++vdg54M8vqq0Ac5VsG5Jm+67Ea60CsC5WFhLqAx5r+Mn80 qXtkUfFhELOvNBz94Kj79pbsY0v//Luqe4ub5QvdXHkwmEW6sOK/FBt+SDOKagrP ILHOZx1w+RBYegdt/sUsIjN2UQsPIj5VEUnZtjaNIYG1f2yjKo4rELOAxhPj4j7v RWTq6cLeI9bHcqnl5fm0pkF2UGbM0thgifhu0LP1SMw6Pf600UWpTIgeFSpOitlS IIP+dlgNFuqBkADfZm7OnHcIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAnbJQ4 I1fYXQC4aFE9XWNr/pT2MB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv dG9CU1dzUWZwODRxSHdDUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbm27w1+BSmD75WU4tDJcdtG6tGW0DlV3BdLi8KpfjadJvvTnIPBB4 SR1AetZHzDPSPFQIybmjArcxzc/LnBT2cS34k3R+6AkoD4kx+zVVJN369DdrzKxG uI5xo8BkiGm4jra/q6Tn0ole5gXtWyHlR1EzgXjN6sa6KLCKEEKVPWDin7F6oWdO se6k2dfformqZ0jBDM0j7oBShuILZksC+Wvi9rEcmjSrPergXiMYAmQxnxm9bc3/ 7eQ5Mucs+CtQitkgWJWpexArkFuW9IGI7c3Le+t0bHYry/e33UiTXFwyKbruI2Cp MDTKjE9ACzhAOxXhGV1VFBCemmSc1MW6 -----END CERTIFICATE-----Generated at Fri Sep 19 03:55:23 2025 by rpki-client