$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: RosLzY+umGwboq2Hc1GRATEBIk6zOh1wNStpy1IPUOI= Subject key identifier: 31:AE:76:42:45:2B:C1:F5:16:7B:2D:EB:F6:E1:5B:10:F2:3A:1E:39 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: FB Signing time: Thu 21 Aug 2025 05:19:00 +0000 Manifest this update: Thu 21 Aug 2025 05:18:59 +0000 Manifest next update: Thu 28 Aug 2025 05:18:59 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: eG/AVXb2z0bW872XKiyBXbVzST9HRa0dD04RGmjdRoU=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Aug 21 05:18:59 2025 GMT Not After : Aug 28 05:18:59 2025 GMT Subject: CN=68a6ac44-8025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:ee:a9:c8:2b:44:ed:29:8b:d5:07:b7:fd: 8a:c1:c9:49:86:b4:b5:9c:a7:48:ba:6b:81:d4:39: 14:83:1d:f0:76:83:7d:63:80:92:5c:d9:e4:b8:08: ae:eb:b9:f5:84:95:a3:2a:1d:70:31:93:da:f1:4c: 35:72:c8:48:cd:6b:36:ef:88:a3:85:9b:d0:47:64: e8:a9:cd:ca:ff:be:0a:77:79:67:10:eb:bd:4e:f7: fd:f4:62:1d:81:e7:8e:16:16:48:dc:15:6f:45:07: 49:8a:4a:7a:dc:8d:6a:5e:32:d5:53:3b:4f:00:73: 9e:ab:55:0e:dc:52:6d:65:1c:2e:6c:6e:70:f8:a5: 3e:7d:06:1e:c1:4e:91:3f:ed:4d:48:a4:fd:a0:a2: 7d:5f:a6:cf:fb:75:44:4f:9a:6c:26:e1:9a:50:1a: 36:f6:b7:7b:8c:e7:e1:ef:a0:80:67:19:28:7b:32: 9b:a2:24:b5:17:7b:4e:1d:4a:e2:5f:54:b5:5f:dc: 21:2d:4e:7f:70:30:44:81:4e:a7:b0:88:a9:b8:33: 7b:0d:8b:f5:99:9f:70:e6:44:5b:4d:4f:e1:3a:71: f7:44:f6:92:8d:78:bf:31:b7:14:bc:69:5c:24:ba: 64:54:30:0f:38:7f:2f:60:a3:80:43:ae:71:31:25: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AE:76:42:45:2B:C1:F5:16:7B:2D:EB:F6:E1:5B:10:F2:3A:1E:39 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ca:0a:8d:ac:22:8a:9d:ff:bf:0b:10:8a:1a:b3:14:75:36: 68:fe:ac:fd:e7:de:5d:f0:26:98:95:b1:2b:54:2b:68:59:f7: 48:6b:17:21:72:01:8c:4b:09:1f:d1:44:d8:a1:ae:3b:12:95: cf:f0:ec:42:bd:22:28:8c:39:b2:72:38:09:25:b2:46:a8:d3: 1f:68:04:7d:04:02:f3:e1:90:04:19:a0:0c:92:9f:a5:d0:d0: 0f:f8:da:66:2a:22:38:b7:41:4b:da:ba:37:1c:34:2a:0d:b2: 6a:97:5f:c2:d5:d4:d2:c4:d2:8c:c5:f0:b9:a6:38:db:2e:11: a2:91:f0:08:15:e6:1d:2f:d3:ea:4a:0a:b8:44:61:36:99:75: 00:e4:dc:34:db:f4:ac:e8:47:e4:1d:98:7e:06:31:a9:1f:0c: 6d:ba:8b:1f:5c:01:f2:f4:ce:bb:79:18:3e:cc:54:a4:6d:b2: 06:3d:94:1d:0b:1e:05:17:26:6b:26:dc:d7:38:5c:f0:e7:4d: cb:d1:80:80:c4:bd:3e:0e:c4:a6:19:db:c0:5d:26:e2:82:1f: 01:bb:29:88:fc:4d:09:59:8e:c3:cb:ea:dd:01:a4:d2:44:1c: 8f:7d:3c:7c:e0:66:47:11:ae:fc:b1:c1:ef:66:9a:65:ef:1b: 6a:6a:cb:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwODIxMDUxODU5WhcNMjUwODI4MDUxODU5WjAYMRYwFAYD VQQDEw02OGE2YWM0NC04MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZfuqcgrRO0pi9UHt/2KwclJhrS1nKdIumuB1DkUgx3wdoN9Y4CSXNnkuAiu 67n1hJWjKh1wMZPa8Uw1cshIzWs274ijhZvQR2Toqc3K/74Kd3lnEOu9Tvf99GId geeOFhZI3BVvRQdJikp63I1qXjLVUztPAHOeq1UO3FJtZRwubG5w+KU+fQYewU6R P+1NSKT9oKJ9X6bP+3VET5psJuGaUBo29rd7jOfh76CAZxkoezKboiS1F3tOHUri X1S1X9whLU5/cDBEgU6nsIipuDN7DYv1mZ9w5kRbTU/hOnH3RPaSjXi/MbcUvGlc JLpkVDAPOH8vYKOAQ65xMSX9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGudkJF K8H1Fnst6/bhWxDyOh45MB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSygqNrCKKnf+/CxCKGrMUdTZo/qz9595d8CaYlbErVCtoWfdIaxch cgGMSwkf0UTYoa47EpXP8OxCvSIojDmycjgJJbJGqNMfaAR9BALz4ZAEGaAMkp+l 0NAP+NpmKiI4t0FL2ro3HDQqDbJql1/C1dTSxNKMxfC5pjjbLhGikfAIFeYdL9Pq Sgq4RGE2mXUA5Nw02/Ss6EfkHZh+BjGpHwxtuosfXAHy9M67eRg+zFSkbbIGPZQd Cx4FFyZrJtzXOFzw503L0YCAxL0+DsSmGdvAXSbigh8BuymI/E0JWY7Dy+rdAaTS RByPfTx84GZHEa78scHvZppl7xtqasud -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:43 2025 by rpki-client