$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: 4VMHk6XmfCm6B06l9mCiLAwEZ7N/sv4wblyVlc9CTuo= Subject key identifier: 66:A3:EB:AB:26:65:71:DB:D0:75:91:FE:2E:D0:FA:2B:35:05:98:D2 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 0986 Signing time: Thu 04 Sep 2025 20:49:53 +0000 Manifest this update: Thu 04 Sep 2025 20:49:52 +0000 Manifest next update: Thu 11 Sep 2025 20:49:52 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: Xb40TW4kBWbhcwmmPYhU/OAQG02aGgeITjcHmGYUmpM=) 2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: hwOF3wEGPYN9Coi28CC6fcXclDNnN/zPBkBKCSSYw20=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=) 6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: zUYnH2vgKQfIWN9t7fWoYsnZnmDnbwnSxI9OeM1m+1c=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Sep 4 20:49:52 2025 GMT Not After : Sep 11 20:49:52 2025 GMT Subject: CN=68b9fb70-d3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:a7:b7:44:9f:13:28:98:d3:ab:f7:2a:90: b0:96:02:e1:91:be:dd:db:88:6a:b7:1b:14:2d:67: b1:91:8c:82:b8:a0:37:fd:5e:76:b4:21:27:ff:6b: 3b:f8:1e:cc:39:21:7b:d6:65:df:f1:2c:61:76:52: b4:de:7d:32:0b:3d:d1:a0:f5:bc:78:9f:bc:3d:b8: 70:4a:88:9a:c5:6b:a3:98:66:96:0d:9f:53:18:07: b2:6c:40:3d:1b:d6:b0:1d:7f:13:1f:7c:1c:6e:89: ee:29:23:9b:d4:d4:65:99:5c:07:c8:bf:ae:8f:5a: ad:47:7e:b9:04:19:49:53:3c:07:30:e0:51:f1:6d: 95:3a:9b:ff:08:e0:7e:6d:c6:5b:b2:ff:51:62:bf: dd:19:45:f2:cb:69:13:c9:4c:58:33:93:f5:6e:d0: ab:9d:a9:2f:f4:29:2f:66:5c:42:ed:bf:e4:63:42: 9f:cb:b8:dd:ff:d3:a9:a4:69:3f:f0:db:14:12:24: ac:32:57:26:5c:ca:db:23:da:23:3d:91:96:35:80: a2:54:aa:a2:d7:a5:f1:91:be:9c:67:e5:08:b3:5b: bb:70:fe:5f:3c:7a:f6:33:2f:6a:d1:4a:90:56:88: c0:28:54:8e:93:e5:62:38:6a:91:8e:2e:92:81:d7: 25:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A3:EB:AB:26:65:71:DB:D0:75:91:FE:2E:D0:FA:2B:35:05:98:D2 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7b:ce:25:2e:80:e6:40:68:61:77:4b:92:22:27:9a:40:64: 5d:84:51:bf:5f:df:18:a6:d3:f7:b6:aa:76:46:d7:b0:0f:1a: 5a:c5:b2:ca:10:54:7b:01:2f:a6:f4:38:e6:79:b3:19:2b:79: 22:cf:7a:ed:d9:89:9e:84:e3:36:a2:af:b6:65:c1:bb:51:3a: f8:51:41:c3:f8:ac:a8:0f:28:a9:fb:3f:00:47:f9:55:15:26: 24:46:6e:1a:17:ac:32:bb:b6:2a:6e:28:27:01:41:6b:ca:21: 08:b3:e2:4c:d4:cc:f8:e3:05:03:f8:3c:cb:0e:ef:87:54:d6: 50:7e:dc:58:b4:6f:df:9c:dc:92:39:f5:df:24:90:b5:0c:b2: 09:27:34:65:be:60:e4:35:29:37:56:b2:e0:8f:00:34:e2:c0: 82:86:5e:b6:a3:1b:dd:c1:4b:29:58:82:9d:48:d6:7e:f1:23: a0:42:77:14:23:a5:38:cb:c5:54:a0:67:27:8d:f7:dc:6f:cd: 48:22:94:cb:9a:99:65:bb:ce:98:b3:bf:a7:5f:93:4b:64:76: 8d:66:76:c6:7b:42:26:30:d5:e7:0b:d3:18:e8:e2:c7:6e:f3: 3b:e4:03:24:be:1e:8d:45:9e:80:66:8e:45:cc:c4:fc:b5:64: 1a:e2:a5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwOTA0MjA0OTUyWhcNMjUwOTExMjA0OTUyWjAYMRYwFAYD VQQDEw02OGI5ZmI3MC1kM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPynt0SfEyiY06v3KpCwlgLhkb7d24hqtxsULWexkYyCuKA3/V52tCEn/2s7 +B7MOSF71mXf8SxhdlK03n0yCz3RoPW8eJ+8PbhwSoiaxWujmGaWDZ9TGAeybEA9 G9awHX8TH3wcbonuKSOb1NRlmVwHyL+uj1qtR365BBlJUzwHMOBR8W2VOpv/COB+ bcZbsv9RYr/dGUXyy2kTyUxYM5P1btCrnakv9CkvZlxC7b/kY0Kfy7jd/9OppGk/ 8NsUEiSsMlcmXMrbI9ojPZGWNYCiVKqi16Xxkb6cZ+UIs1u7cP5fPHr2My9q0UqQ VojAKFSOk+ViOGqRji6SgdclkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaj66sm ZXHb0HWR/i7Q+is1BZjSMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6e84lLoDmQGhhd0uSIieaQGRdhFG/X98YptP3tqp2RtewDxpaxbLK EFR7AS+m9DjmebMZK3kiz3rt2YmehOM2oq+2ZcG7UTr4UUHD+KyoDyip+z8AR/lV FSYkRm4aF6wyu7YqbignAUFryiEIs+JM1Mz44wUD+DzLDu+HVNZQftxYtG/fnNyS OfXfJJC1DLIJJzRlvmDkNSk3VrLgjwA04sCChl62oxvdwUspWIKdSNZ+8SOgQncU I6U4y8VUoGcnjffcb81IIpTLmpllu86Ys7+nX5NLZHaNZnbGe0ImMNXnC9MY6OLH bvM75AMkvh6NRZ6AZo5FzMT8tWQa4qWq -----END CERTIFICATE-----Generated at Sat Sep 6 16:44:08 2025 by rpki-client