$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: o6eppohBFWm3XKaKquM6C72PcHN26aTvleTaOPek670= Subject key identifier: 80:24:A6:D4:37:B8:DD:20:0E:1F:97:D2:4D:1E:2D:72:07:B4:DA:F3 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 34BB Signing time: Fri 22 Aug 2025 14:17:14 +0000 Manifest this update: Fri 22 Aug 2025 14:17:14 +0000 Manifest next update: Fri 29 Aug 2025 14:17:14 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: 0QCsFcBdGDTbW3Qdq4z0OqdeobefELg60RftGtS+QiA=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Aug 22 14:17:14 2025 GMT Not After : Aug 29 14:17:14 2025 GMT Subject: CN=68a87bea-0ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:12:73:1e:ae:fc:28:20:67:93:dc:73:16: 53:23:f0:80:b5:e6:7a:84:c7:9b:e3:ab:68:f4:f6: 76:d5:53:4b:c5:dd:5d:06:40:b4:96:c5:19:fd:45: b2:36:55:53:97:8c:7a:0a:3d:45:f6:34:3f:b8:27: a6:5a:5c:cc:a9:62:63:47:9d:8f:db:c4:5a:91:29: 07:ad:e4:03:9c:12:ce:7c:59:7f:24:bc:76:4f:f4: 9f:94:3b:e6:96:71:97:6f:ba:3b:00:1f:05:11:24: c2:69:0c:7a:a7:b0:dd:c7:98:5a:08:74:68:69:79: b3:5b:30:e4:f1:de:19:f1:07:12:95:b8:b9:e7:c4: c4:81:c6:74:5d:80:de:2f:9e:a6:d3:fd:62:da:b3: 2c:1f:1d:0d:1f:15:88:f1:b2:f0:d8:f2:2d:69:c4: e1:70:5b:8b:e0:70:87:a5:0e:ce:e9:5f:c0:b5:e3: fe:87:25:7d:95:dc:02:62:ac:59:27:1a:bd:3f:38: c7:bf:20:1e:8e:19:3d:2d:cf:15:ac:d5:fc:7a:89: 16:0c:10:69:f9:b9:0f:e2:3a:9a:4a:0b:5d:2b:15: e6:1d:ff:99:21:a5:72:ed:44:da:98:01:b8:c7:61: 98:87:c3:d1:8a:d4:c1:8e:65:bc:13:1f:fc:a1:96: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:A6:D4:37:B8:DD:20:0E:1F:97:D2:4D:1E:2D:72:07:B4:DA:F3 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:70:ee:7d:03:27:33:1f:d3:a4:fe:da:ee:a8:40:84:99:ae: 8c:08:17:73:01:c8:7c:7e:dd:c9:21:4a:f9:92:1f:bf:42:4b: 7c:bc:ac:a0:95:fb:7e:49:de:c8:ae:33:05:80:58:28:b1:f2: 73:1b:a5:d0:48:3b:44:aa:29:a7:24:bd:31:21:7e:36:7f:a4: 45:13:7f:bb:ae:ad:cd:54:ce:81:73:90:86:e7:4d:37:2c:89: 5e:b6:2a:53:3f:24:6e:2b:82:51:ee:37:8c:07:ea:96:a7:89: 9b:a9:78:1d:58:db:02:80:a0:af:12:55:41:ee:3a:59:ba:66: d0:2a:3e:5e:9e:a7:92:fd:2d:57:4e:0f:d8:7f:90:c1:99:61: 03:40:7e:e2:34:4a:cf:0c:a7:cf:4a:91:39:01:a0:62:bc:94: 19:0b:38:16:99:b3:23:96:b0:aa:25:ff:33:b6:3e:f3:f0:5d: d9:9b:0a:97:b8:57:55:5d:b0:2e:6d:df:17:0c:c1:f8:47:82: ee:22:c6:eb:ed:eb:ec:b1:2b:7b:46:f1:b0:36:a0:44:a9:51: 3e:32:67:69:ec:76:4c:38:aa:e0:e7:9f:b7:bd:2b:12:84:86: 8f:bb:04:7f:e6:63:02:de:b0:92:b8:f4:7b:d1:da:e6:d8:aa: f6:f8:a2:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUwODIyMTQxNzE0WhcNMjUwODI5MTQxNzE0WjAYMRYwFAYD VQQDEw02OGE4N2JlYS0wYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhgScx6u/CggZ5PccxZTI/CAteZ6hMeb46to9PZ21VNLxd1dBkC0lsUZ/UWy NlVTl4x6Cj1F9jQ/uCemWlzMqWJjR52P28RakSkHreQDnBLOfFl/JLx2T/SflDvm lnGXb7o7AB8FESTCaQx6p7Ddx5haCHRoaXmzWzDk8d4Z8QcSlbi558TEgcZ0XYDe L56m0/1i2rMsHx0NHxWI8bLw2PItacThcFuL4HCHpQ7O6V/AteP+hyV9ldwCYqxZ Jxq9PzjHvyAejhk9Lc8VrNX8eokWDBBp+bkP4jqaSgtdKxXmHf+ZIaVy7UTamAG4 x2GYh8PRitTBjmW8Ex/8oZaTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAkptQ3 uN0gDh+X0k0eLXIHtNrzMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYcO59AyczH9Ok/truqECEma6MCBdzAch8ft3JIUr5kh+/Qkt8vKyg lft+Sd7IrjMFgFgosfJzG6XQSDtEqimnJL0xIX42f6RFE3+7rq3NVM6Bc5CG5003 LIletipTPyRuK4JR7jeMB+qWp4mbqXgdWNsCgKCvElVB7jpZumbQKj5enqeS/S1X Tg/Yf5DBmWEDQH7iNErPDKfPSpE5AaBivJQZCzgWmbMjlrCqJf8ztj7z8F3ZmwqX uFdVXbAubd8XDMH4R4LuIsbr7evssSt7RvGwNqBEqVE+Mmdp7HZMOKrg55+3vSsS hIaPuwR/5mMC3rCSuPR70drm2Kr2+KLz -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:05 2025 by rpki-client