$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: TXJgSNFq8l0NxVxZwx/4JHa7IvE0dLWVbfKM2pBRG1c= Subject key identifier: A6:25:EC:BE:CD:8D:A0:BC:05:58:B8:BD:CA:5E:88:BE:5F:76:A3:3D Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1796 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1772 Signing time: Sat 06 Sep 2025 16:40:43 +0000 Manifest this update: Sat 06 Sep 2025 16:40:42 +0000 Manifest next update: Sat 13 Sep 2025 16:40:42 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: Yj7JNz6IuaZorFlcAz/gHtH+OZPtiBjlfCDFWj9QVxE=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6038 (0x1796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Sep 6 16:40:42 2025 GMT Not After : Sep 13 16:40:42 2025 GMT Subject: CN=68bc640b-e01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:14:71:eb:7e:49:70:7a:14:01:dc:ee:56: 79:af:fb:0c:e4:97:d3:22:ab:c6:7d:95:86:39:34: e8:5c:9e:48:d6:6e:f3:55:46:3d:b0:8a:b8:37:8c: 48:32:f9:9a:95:90:28:1f:a2:62:11:cb:3c:8c:64: f3:5a:45:3d:97:b7:2b:10:3f:42:a5:3a:5c:27:ca: 8a:e9:c2:1b:c7:b6:9b:b9:7d:bc:43:26:6d:4a:17: 38:ab:da:5d:cd:8a:ff:ee:23:dc:5b:dd:77:76:b2: 05:b0:8f:3c:3f:2b:29:76:19:f1:f1:e0:af:b7:3a: 4e:38:f5:a4:66:88:6b:8f:c9:fe:0f:8d:a7:47:f4: 73:10:9b:1e:08:d3:87:1f:18:2a:87:a4:07:08:27: 03:9e:80:37:6e:23:64:88:4b:5e:f0:69:a7:63:e9: 0a:a9:12:4a:c9:1b:30:2a:8f:9e:9a:da:c1:f7:01: 6a:7a:a4:34:d8:3b:19:2a:33:ef:ba:b0:e2:62:63: 14:28:54:6e:e7:ef:4e:07:f3:f5:d1:66:22:4b:e4: 11:ab:6e:22:16:7c:9e:28:a0:5b:55:67:99:61:1e: 76:c8:55:68:34:1e:ae:e7:95:bb:7e:f9:ad:72:ff: 9d:a5:79:bb:84:12:03:19:5c:b4:3c:bd:e6:34:d6: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:25:EC:BE:CD:8D:A0:BC:05:58:B8:BD:CA:5E:88:BE:5F:76:A3:3D X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:58:97:e8:a0:bf:e2:85:95:9e:29:aa:cf:49:0e:36:81:89: 5a:fa:ff:3c:59:fa:e2:e3:2d:dd:10:49:c2:f9:0b:a7:5d:f7: 59:00:8c:d7:59:d7:de:3a:32:7c:3e:9d:94:79:0f:aa:86:c1: ba:63:8d:c3:47:37:71:3c:bc:e2:d5:e3:71:c7:22:e1:f1:de: e1:16:5c:e8:73:be:73:31:5f:9f:ed:11:6a:af:44:81:a3:cb: 33:a8:74:c8:b1:6a:b3:8b:3e:ce:4a:bc:05:b5:4a:d2:1d:db: 06:15:70:34:64:10:48:63:71:76:e3:b3:db:32:d5:8d:22:84: 27:31:9b:92:5e:68:92:a3:69:13:49:ba:23:3e:20:b7:f4:f0: 92:ea:fa:85:a2:f6:74:f2:2e:95:81:dc:83:19:20:0c:20:f3: f2:32:71:3e:5a:c7:1d:df:09:75:7e:1d:8c:fd:7e:29:a3:24: 27:46:af:ff:45:f7:53:3e:6b:7c:25:cd:fc:4e:fe:b8:c3:06: f7:6c:94:10:37:8e:9e:c6:de:c2:2a:76:34:c6:66:e9:e8:22: 34:ff:7f:6f:69:fe:59:5f:04:9e:12:ce:e9:31:5e:6d:de:59: 23:a4:1b:c8:b6:bc:ff:39:ef:04:fc:b2:71:af:cc:77:26:cd: f9:48:60:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwOTA2MTY0MDQyWhcNMjUwOTEzMTY0MDQyWjAYMRYwFAYD VQQDEw02OGJjNjQwYi1lMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudAUcet+SXB6FAHc7lZ5r/sM5JfTIqvGfZWGOTToXJ5I1m7zVUY9sIq4N4xI MvmalZAoH6JiEcs8jGTzWkU9l7crED9CpTpcJ8qK6cIbx7abuX28QyZtShc4q9pd zYr/7iPcW913drIFsI88Pyspdhnx8eCvtzpOOPWkZohrj8n+D42nR/RzEJseCNOH Hxgqh6QHCCcDnoA3biNkiEte8GmnY+kKqRJKyRswKo+emtrB9wFqeqQ02DsZKjPv urDiYmMUKFRu5+9OB/P10WYiS+QRq24iFnyeKKBbVWeZYR52yFVoNB6u55W7fvmt cv+dpXm7hBIDGVy0PL3mNNZtiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYl7L7N jaC8BVi4vcpeiL5fdqM9MB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7WJfooL/ihZWeKarPSQ42gYla+v88Wfri4y3dEEnC+QunXfdZAIzX WdfeOjJ8Pp2UeQ+qhsG6Y43DRzdxPLzi1eNxxyLh8d7hFlzoc75zMV+f7RFqr0SB o8szqHTIsWqziz7OSrwFtUrSHdsGFXA0ZBBIY3F247PbMtWNIoQnMZuSXmiSo2kT SbojPiC39PCS6vqFovZ08i6VgdyDGSAMIPPyMnE+Wscd3wl1fh2M/X4poyQnRq// RfdTPmt8Jc38Tv64wwb3bJQQN46ext7CKnY0xmbp6CI0/39vaf5ZXwSeEs7pMV5t 3lkjpBvItrz/Oe8E/LJxr8x3Js35SGD5 -----END CERTIFICATE-----Generated at Sat Sep 6 20:56:58 2025 by rpki-client