$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft File: _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json) Hash identifier: MfA+4ROUIjXmfhcvOh9O0h73iTl1xVKvr/kW1OIVf7U= Subject key identifier: 28:9F:D7:AE:25:D0:23:B9:B7:1F:20:FD:66:B3:18:8E:54:75:0C:D8 Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft Manifest number: 0857 Signing time: Thu 04 Sep 2025 20:55:32 +0000 Manifest this update: Thu 04 Sep 2025 20:55:32 +0000 Manifest next update: Thu 11 Sep 2025 20:55:32 +0000 Files and hashes: 1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: uerDn54bzYdduxcYsEMLyjFx5n7hFAM1CJzkKwvrfLY=) 2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: dUADLZNofYstB4J1GHJqZ4NyoXP/5OBBFPnTwTmX5d0=) 3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: pVe/D2y8+Q5khNjEW30/uK4SviswKm/bN634mRuECH4=) 4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: JKAxoURLcld4TYBs+HuThRABfXOXWBihIh336+ir050=) 5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Vhzmp3txj0Xul7ynXkTKnMTWBScHUp4m7KHYrp1yvUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B Validity Not Before: Sep 4 20:55:32 2025 GMT Not After : Sep 11 20:55:32 2025 GMT Subject: CN=68b9fcc4-c3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:62:d0:f3:8a:21:8b:c4:44:f6:33:a0:3f: 21:28:bb:ec:d3:62:78:f9:4d:f1:56:41:d5:12:54: ae:15:65:d2:f3:af:01:03:31:aa:fc:e8:3d:71:46: 57:c1:65:47:f9:17:59:10:bc:ea:80:c1:3f:6d:57: ec:0f:86:54:39:ad:7f:ff:7b:63:67:34:d5:d5:e6: a7:3a:c9:c6:99:f1:ab:2d:67:13:1c:79:12:4a:e4: 74:77:cb:85:e5:91:f3:e0:5d:61:70:94:7e:53:88: 48:42:8e:ec:02:e5:6f:5c:da:af:11:fa:99:64:25: 83:b6:67:52:45:9c:ca:3e:ba:eb:8b:45:f6:ab:57: b3:10:92:a7:00:4c:00:ad:87:40:30:c2:ea:19:c9: 9f:0d:d3:69:fb:6a:4d:c1:3f:1e:a1:bd:a0:f3:79: 8d:5e:d3:2e:38:f5:c6:a9:f5:2c:4c:9b:e4:cf:18: 3d:a2:13:ef:f0:32:83:5b:b1:46:6a:b4:e5:04:a1: 52:65:5c:c8:7f:22:57:81:a3:ed:7f:4a:bc:30:dc: 06:58:71:6e:e4:8e:17:af:09:3f:52:7b:d6:37:97: e2:a0:bf:f2:f7:8b:30:9e:60:18:f7:08:37:32:2b: 00:7a:aa:20:b2:ae:3e:fb:e5:ac:f6:c6:3f:77:6e: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9F:D7:AE:25:D0:23:B9:B7:1F:20:FD:66:B3:18:8E:54:75:0C:D8 X509v3 Authority Key Identifier: keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:68:b6:fc:f7:14:be:7e:36:18:59:e0:1e:97:ba:43:4a:c7: 65:d5:38:3a:06:df:4c:65:86:5a:6b:b4:46:9b:49:53:dd:b9: 1e:9c:ad:28:33:60:df:23:38:7a:ea:94:c2:50:44:e0:aa:0a: dc:81:d1:96:c5:df:87:04:4b:49:e9:80:81:4d:b1:30:1c:9f: 71:6f:dc:77:45:2a:00:28:ab:68:2c:b4:70:ad:30:e8:b5:62: 29:4c:d5:32:80:66:b9:26:39:19:6b:50:ea:7b:f2:ff:7e:21: 8c:c8:26:6b:0d:a5:12:08:13:6c:80:e7:ab:91:3c:b4:78:99: 24:08:a2:df:95:85:e0:86:91:e5:18:63:1e:24:cd:7b:e4:97: 15:e1:6f:dd:12:2d:f0:27:33:88:37:1e:32:08:b3:43:c3:21: 12:b6:cc:18:61:c7:a0:a6:33:8f:23:13:1a:33:61:43:2a:87: 4e:c8:f8:fe:a3:11:55:59:97:43:65:1a:d9:d3:cc:d2:17:4d: 40:e6:1e:d4:0c:5c:b9:35:c2:00:c6:fc:43:94:3e:7c:8e:14: 2e:24:7c:17:63:3b:8e:1c:07:c8:b0:e4:b5:53:1a:9f:04:b5: 1f:e6:0b:ff:f6:30:e9:a2:fb:26:8d:48:40:43:89:5f:f1:9b: 55:ad:55:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0N0UxMTAvBgNVBAUTKEZERDI1MDc4MjIxODNDRTgwNzU5NDE5RDU2NTQwNjA2 QTI0ODZCNEIwHhcNMjUwOTA0MjA1NTMyWhcNMjUwOTExMjA1NTMyWjAYMRYwFAYD VQQDEw02OGI5ZmNjNC1jM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApipi0POKIYvERPYzoD8hKLvs02J4+U3xVkHVElSuFWXS868BAzGq/Og9cUZX wWVH+RdZELzqgME/bVfsD4ZUOa1//3tjZzTV1eanOsnGmfGrLWcTHHkSSuR0d8uF 5ZHz4F1hcJR+U4hIQo7sAuVvXNqvEfqZZCWDtmdSRZzKPrrri0X2q1ezEJKnAEwA rYdAMMLqGcmfDdNp+2pNwT8eob2g83mNXtMuOPXGqfUsTJvkzxg9ohPv8DKDW7FG arTlBKFSZVzIfyJXgaPtf0q8MNwGWHFu5I4Xrwk/UnvWN5fioL/y94swnmAY9wg3 MisAeqogsq4+++Ws9sY/d25iDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCif164l 0CO5tx8g/WazGI5UdQzYMB8GA1UdIwQYMBaAFP3SUHgiGDzoB1lBnVZUBgaiSGtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjQ3RS8wRDEwQjgwNEQ2 MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBPZ0hXVUdkVmxRR0JxSklh MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kSlFlQ0lZUE9nSFdVR2RWbFFHQnFKSWEwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjQ3RS8wRDEwQjgwNEQ2MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBP Z0hXVUdkVmxRR0JxSklhMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjaLb89xS+fjYYWeAel7pDSsdl1Tg6Bt9MZYZaa7RGm0lT3bkenK0o M2DfIzh66pTCUETgqgrcgdGWxd+HBEtJ6YCBTbEwHJ9xb9x3RSoAKKtoLLRwrTDo tWIpTNUygGa5JjkZa1Dqe/L/fiGMyCZrDaUSCBNsgOerkTy0eJkkCKLflYXghpHl GGMeJM175JcV4W/dEi3wJzOINx4yCLNDwyEStswYYcegpjOPIxMaM2FDKodOyPj+ oxFVWZdDZRrZ08zSF01A5h7UDFy5NcIAxvxDlD58jhQuJHwXYzuOHAfIsOS1Uxqf BLUf5gv/9jDpovsmjUhAQ4lf8ZtVrVXo -----END CERTIFICATE-----Generated at Sat Sep 6 16:33:53 2025 by rpki-client