$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: U+klNqnwKELjCPWYSXxndgpkRqYsEiQG0NfCL7IXqVw= Subject key identifier: 6E:59:85:A0:73:56:ED:50:95:13:A1:8A:49:4A:5B:CF:A4:7C:9F:7F Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 0360 Signing time: Thu 21 Aug 2025 01:06:09 +0000 Manifest this update: Thu 21 Aug 2025 01:06:08 +0000 Manifest next update: Thu 28 Aug 2025 01:06:08 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: 7JbSCT/710H7ITwdJwbqb4Nz+Uhtjb079DzsPU1N3Kk=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Aug 21 01:06:08 2025 GMT Not After : Aug 28 01:06:08 2025 GMT Subject: CN=68a67101-6f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:b1:39:d4:b2:e9:ef:c0:82:b8:6c:92:0b: c1:dd:85:6a:a7:81:3e:09:b7:27:98:cf:17:b9:88: 6d:21:33:13:fa:68:b6:dd:f6:a3:eb:9b:ac:0f:16: 6c:61:02:87:37:0e:93:f9:07:b6:7e:db:80:14:c8: 34:6d:6f:6f:53:3b:9b:2c:e2:7e:b9:d5:c5:89:3c: 91:ea:3a:26:c2:88:27:c3:17:0e:df:09:6a:57:42: 0e:e1:be:76:ff:e9:66:01:d8:3b:eb:af:59:65:fb: 73:e4:ff:64:31:2d:86:77:28:d8:88:6c:49:d5:75: 32:b4:1c:53:bf:53:21:c3:88:19:20:37:bc:2a:7b: db:88:5f:04:e6:9c:f7:b6:49:90:5a:9e:c9:47:46: 8a:85:c2:95:03:63:2b:34:c7:3b:82:ad:ec:b2:a7: 21:58:21:a8:5f:f4:60:90:20:c8:ed:df:21:9c:36: 98:a5:6b:34:bf:a5:10:f0:9e:a2:f2:63:15:80:be: ba:cd:f5:15:68:5e:78:0b:07:e3:0a:a4:13:ff:fc: 8e:83:fe:67:8f:e6:a2:b1:cb:eb:20:2f:46:d1:89: 9f:da:13:9a:c4:2b:58:7c:1b:39:9d:6d:89:c4:7a: 15:25:09:30:31:d8:55:b8:44:2f:7f:ee:90:3b:8d: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:59:85:A0:73:56:ED:50:95:13:A1:8A:49:4A:5B:CF:A4:7C:9F:7F X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f1:05:18:4d:cb:d5:0d:94:8e:40:3b:65:22:33:ed:08:10: b8:62:52:8e:50:c8:7e:1c:9f:18:27:f3:84:45:3e:4d:ae:ae: c0:9a:17:a0:fb:ec:41:3e:51:72:9c:b3:3c:3a:b0:96:aa:03: 05:52:da:0e:a0:fa:28:bb:45:41:4d:35:e2:97:4f:84:40:bc: 96:6d:0a:94:c6:d9:ce:ff:f6:7f:35:cb:35:2e:20:70:09:24: 31:6a:28:43:2e:27:0b:15:75:8c:e0:c8:4e:be:f7:06:48:d9: b5:79:8c:e1:24:12:d1:b4:51:9f:45:39:f6:fa:13:55:b8:57: e7:97:65:bb:b8:11:b0:e5:1a:86:d6:78:cb:69:db:17:bb:bc: 41:64:47:c2:8f:4e:4e:e7:e2:ed:e8:9e:fd:b6:25:44:0a:28: ea:65:ad:8a:89:92:f4:32:09:a9:c9:aa:0a:dc:0d:e5:55:6b: c5:4b:66:ca:60:94:49:ca:1c:8f:5f:ba:c7:f3:84:24:fd:f2: 9f:5e:b1:f1:46:70:ab:fa:c5:56:15:07:14:ef:d1:07:fa:e2: f1:e7:5a:31:11:aa:88:14:d8:9c:fd:5d:57:07:c8:ce:6f:41: 94:56:74:1a:50:7a:c8:1d:03:01:8a:b5:bc:3f:ac:03:4c:3b: 7d:cc:1b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUwODIxMDEwNjA4WhcNMjUwODI4MDEwNjA4WjAYMRYwFAYD VQQDEw02OGE2NzEwMS02ZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjmxOdSy6e/AgrhskgvB3YVqp4E+CbcnmM8XuYhtITMT+mi23faj65usDxZs YQKHNw6T+Qe2ftuAFMg0bW9vUzubLOJ+udXFiTyR6jomwognwxcO3wlqV0IO4b52 /+lmAdg7669ZZftz5P9kMS2GdyjYiGxJ1XUytBxTv1Mhw4gZIDe8KnvbiF8E5pz3 tkmQWp7JR0aKhcKVA2MrNMc7gq3ssqchWCGoX/RgkCDI7d8hnDaYpWs0v6UQ8J6i 8mMVgL66zfUVaF54CwfjCqQT//yOg/5nj+aiscvrIC9G0Ymf2hOaxCtYfBs5nW2J xHoVJQkwMdhVuEQvf+6QO40trwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5ZhaBz Vu1QlROhiklKW8+kfJ9/MB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp8QUYTcvVDZSOQDtlIjPtCBC4YlKOUMh+HJ8YJ/OERT5Nrq7Amheg ++xBPlFynLM8OrCWqgMFUtoOoPoou0VBTTXil0+EQLyWbQqUxtnO//Z/Ncs1LiBw CSQxaihDLicLFXWM4MhOvvcGSNm1eYzhJBLRtFGfRTn2+hNVuFfnl2W7uBGw5RqG 1njLadsXu7xBZEfCj05O5+Lt6J79tiVECijqZa2KiZL0MgmpyaoK3A3lVWvFS2bK YJRJyhyPX7rH84Qk/fKfXrHxRnCr+sVWFQcU79EH+uLx51oxEaqIFNic/V1XB8jO b0GUVnQaUHrIHQMBirW8P6wDTDt9zBtq -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:12 2025 by rpki-client