$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json) Hash identifier: 6JtgvyGZ3pnHict/M+Z0R8IFU4ImAF1ecfQbW2W+7OI= Subject key identifier: B0:C4:0B:10:90:75:BB:03:EC:8E:4C:FE:C8:BC:A8:2D:AB:73:93:FF Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft Manifest number: 0A Signing time: Fri 19 Sep 2025 08:53:56 +0000 Manifest this update: Fri 19 Sep 2025 08:53:55 +0000 Manifest next update: Fri 26 Sep 2025 08:53:55 +0000 Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: mILwjtkt7h2ExgjhRgYGqwcsxZp8YHiL3Ls2VjFANus=) 2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=) 3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=) 4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 08:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Sep 19 08:53:55 2025 GMT Not After : Sep 26 08:53:55 2025 GMT Subject: CN=68cd1a24-4260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:61:52:54:b1:e7:58:b9:7b:b4:ac:2f:66: 4d:3b:b7:7c:91:1c:d1:ad:43:81:d0:f0:46:4e:a9: f4:f2:a3:1f:16:7c:44:44:86:7a:3d:f8:52:cf:cc: 11:ba:8f:e2:a7:06:23:08:f7:eb:28:7b:11:8e:16: 44:ad:de:32:c1:3f:2f:47:65:7c:fd:dc:b2:db:d6: 34:55:be:c8:97:55:97:67:af:7e:28:80:9f:b5:a1: 38:65:93:d1:81:ba:28:db:6a:dd:90:a3:f6:35:25: 49:4b:7c:b6:c6:9f:fc:43:8b:bd:1e:27:3e:89:f8: 00:95:99:d3:a4:05:ff:d3:23:55:d3:71:0d:18:ba: 4a:54:51:bc:7c:ff:0b:18:c1:e0:c0:4d:99:0f:5c: 5e:f3:70:8a:b9:c0:c0:ce:fe:14:12:d3:05:ae:73: 69:06:38:18:e1:d5:57:32:80:36:82:ff:b6:57:43: 42:5e:c1:7f:8e:4d:cd:8a:e9:20:57:be:bb:25:66: d7:aa:cd:6e:8f:c5:67:63:14:41:01:57:97:02:db: bd:84:1e:69:36:cb:18:bb:7a:f0:d8:a6:67:a3:d1: 91:9a:83:48:20:4f:90:a7:e5:8d:30:a5:02:26:a1: b5:2a:f6:a5:a2:bb:33:f7:89:2d:03:9c:3a:2c:15: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:0B:10:90:75:BB:03:EC:8E:4C:FE:C8:BC:A8:2D:AB:73:93:FF X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cc:72:d0:73:3b:59:6b:30:84:04:64:e9:e4:15:73:74:24: b6:16:85:2a:74:e0:91:eb:ea:3e:99:f9:a3:12:32:69:c3:af: cd:60:5d:28:85:87:86:12:2f:ef:c3:4c:4b:1a:72:b9:a0:4c: 53:0d:e0:5a:6c:23:69:22:75:eb:7c:3e:ba:61:44:60:17:79: 3d:98:42:5c:eb:ba:c9:aa:90:96:be:84:92:ec:1c:16:67:a5: 3f:19:7a:1e:37:6b:d9:91:e4:5d:1f:f8:0d:b5:90:76:8d:e3: 09:ac:fe:76:01:df:22:0f:f4:18:b2:7b:d3:f8:10:69:89:47: 68:16:4f:65:a7:78:ed:9b:7c:fe:01:cf:45:e1:f9:9f:e6:cd: f0:d5:2f:4d:53:20:1a:6f:17:78:d9:36:86:2f:93:be:da:91: 74:cd:32:49:bd:5f:df:c2:e7:7d:97:0c:b0:46:0b:74:7c:30: a3:00:26:b7:f8:c0:8c:9e:09:6c:25:e1:36:c2:f9:a9:a7:17: ea:b0:fe:c9:0d:34:6d:c6:b0:08:81:b0:cf:4b:02:f8:40:c6: 48:3f:9a:91:20:2d:48:aa:8c:d1:f6:95:70:c3:78:84:41:07: ca:55:3f:5e:94:29:f9:9b:97:9f:c1:2a:36:0e:27:fb:07:f9: f9:89:8c:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTA5MTkwODUzNTVaFw0yNTA5MjYwODUzNTVaMBgxFjAUBgNV BAMTDTY4Y2QxYTI0LTQyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcgmFSVLHnWLl7tKwvZk07t3yRHNGtQ4HQ8EZOqfTyox8WfEREhno9+FLPzBG6 j+KnBiMI9+soexGOFkSt3jLBPy9HZXz93LLb1jRVvsiXVZdnr34ogJ+1oThlk9GB uijbat2Qo/Y1JUlLfLbGn/xDi70eJz6J+ACVmdOkBf/TI1XTcQ0YukpUUbx8/wsY weDATZkPXF7zcIq5wMDO/hQS0wWuc2kGOBjh1VcygDaC/7ZXQ0JewX+OTc2K6SBX vrslZteqzW6PxWdjFEEBV5cC272EHmk2yxi7evDYpmej0ZGag0ggT5Cn5Y0wpQIm obUq9qWiuzP3iS0DnDosFVSDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsMQLEJB1 uwPsjkz+yLyoLatzk/8wHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW Z2VBRm16UjhWRlFUdS1LRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvMctBzO1lrMIQEZOnkFXN0JLYWhSp04JHr6j6Z+aMSMmnDr81gXSiF h4YSL+/DTEsacrmgTFMN4FpsI2kidet8PrphRGAXeT2YQlzrusmqkJa+hJLsHBZn pT8Zeh43a9mR5F0f+A21kHaN4wms/nYB3yIP9Biye9P4EGmJR2gWT2WneO2bfP4B z0Xh+Z/mzfDVL01TIBpvF3jZNoYvk77akXTNMkm9X9/C532XDLBGC3R8MKMAJrf4 wIyeCWwl4TbC+amnF+qw/skNNG3GsAiBsM9LAvhAxkg/mpEgLUiqjNH2lXDDeIRB B8pVP16UKfmbl5/BKjYOJ/sH+fmJjFE= -----END CERTIFICATE-----Generated at Fri Sep 19 13:55:52 2025 by rpki-client