$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: CRkj6vVym6EXKo0s0awuI2iYjoVCjrcN4QmfB5BAVOA= Subject key identifier: 13:7C:16:A6:85:EF:3B:3B:84:7A:EC:CB:4D:08:E5:30:40:69:B6:44 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 202D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 18AC Signing time: Wed 20 Aug 2025 17:20:38 +0000 Manifest this update: Wed 20 Aug 2025 17:20:38 +0000 Manifest next update: Wed 27 Aug 2025 17:20:38 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: QXQCCZ9B5kqAjbCJdHCXXdixGOW4N1mQ7x3twpIjT0U=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8237 (0x202d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Aug 20 17:20:38 2025 GMT Not After : Aug 27 17:20:38 2025 GMT Subject: CN=68a603e6-92ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:a5:62:44:b5:50:ed:b2:9b:82:50:77:bc: ec:e1:37:17:16:8c:fe:ab:83:2f:cc:da:45:96:20: 3d:ae:d1:05:50:d5:44:47:9f:81:bc:3b:a2:73:6e: 1c:7d:61:d3:a4:0e:cf:a4:a1:f3:78:2a:7c:7b:16: 68:62:0c:65:c0:79:8e:60:c8:5b:f6:56:13:f5:41: c0:b0:a0:24:37:eb:62:70:2d:97:99:24:96:d3:85: 4f:68:5d:6f:8f:c1:1b:ec:be:1e:34:0c:f6:58:8e: 22:04:57:d1:da:4e:fb:27:cd:7d:0a:11:d8:36:d5: 50:64:88:22:e8:e3:a5:72:96:bb:50:18:6e:43:c7: 40:18:37:de:47:39:97:3b:3a:20:29:73:05:a0:b8: 02:d0:93:21:37:3a:af:49:73:26:5b:7b:4c:57:aa: fd:05:8c:1b:16:09:16:ca:b7:4a:bc:45:53:53:e1: 06:22:36:15:8c:09:59:f9:32:e6:53:b8:92:be:91: cc:ce:cd:57:b4:32:85:a2:3b:e1:07:94:87:6f:a9: 2d:f4:ab:dc:9b:62:11:56:d7:83:ea:e6:52:51:f8: a6:2c:ab:a8:4f:21:4a:93:41:59:54:ae:c1:4a:36: 8f:11:52:d0:ae:33:7d:1f:fe:93:01:7d:b8:77:2f: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:16:A6:85:EF:3B:3B:84:7A:EC:CB:4D:08:E5:30:40:69:B6:44 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ef:1f:82:49:95:e2:d3:33:dc:26:54:00:e6:cc:fd:3a:7e: 32:98:d9:38:9d:10:f6:c9:73:d8:ca:c5:8d:68:24:98:a3:be: d6:6a:68:27:d5:b4:84:0c:57:61:8c:fd:84:5b:65:51:ae:25: d3:96:8a:47:36:5f:d0:6b:7c:fb:e8:de:a8:17:9f:3f:17:72: 69:85:3d:ae:0d:a3:5c:3f:6c:80:45:e0:10:79:9b:a6:97:b9: 0d:12:d6:44:8b:1f:94:71:f0:30:c9:65:a6:55:b9:9f:2c:bf: 91:52:67:a0:3c:77:1a:ba:f4:f8:eb:91:8c:10:7e:3d:5d:b4: 22:dc:f9:99:ff:6c:5f:32:1e:93:99:fd:e8:d9:96:00:a2:61: 8e:1a:86:38:ed:6b:ca:a3:8f:3a:33:e0:4c:16:1b:1d:7e:e3: b8:12:5a:18:11:81:11:21:81:b6:da:ff:02:6f:68:2f:d7:d5: 0b:c8:8a:28:4c:80:2b:58:6a:8a:7c:28:2c:d5:a2:28:84:15: c3:ca:9a:14:b5:a5:56:60:e5:11:9d:16:21:be:36:3a:3d:ae: 1a:44:3b:35:a8:bf:42:10:61:ab:47:2f:e6:32:d0:6a:bc:0e: cb:83:ba:10:ba:ec:5d:f7:39:ae:c6:7c:ab:62:59:84:22:0e: 5f:14:78:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwODIwMTcyMDM4WhcNMjUwODI3MTcyMDM4WjAYMRYwFAYD VQQDEw02OGE2MDNlNi05MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsymlYkS1UO2ym4JQd7zs4TcXFoz+q4MvzNpFliA9rtEFUNVER5+BvDuic24c fWHTpA7PpKHzeCp8exZoYgxlwHmOYMhb9lYT9UHAsKAkN+ticC2XmSSW04VPaF1v j8Eb7L4eNAz2WI4iBFfR2k77J819ChHYNtVQZIgi6OOlcpa7UBhuQ8dAGDfeRzmX OzogKXMFoLgC0JMhNzqvSXMmW3tMV6r9BYwbFgkWyrdKvEVTU+EGIjYVjAlZ+TLm U7iSvpHMzs1XtDKFojvhB5SHb6kt9Kvcm2IRVteD6uZSUfimLKuoTyFKk0FZVK7B SjaPEVLQrjN9H/6TAX24dy8k6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN8FqaF 7zs7hHrsy00I5TBAabZEMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL7x+CSZXi0zPcJlQA5sz9On4ymNk4nRD2yXPYysWNaCSYo77Wamgn 1bSEDFdhjP2EW2VRriXTlopHNl/Qa3z76N6oF58/F3JphT2uDaNcP2yAReAQeZum l7kNEtZEix+UcfAwyWWmVbmfLL+RUmegPHcauvT465GMEH49XbQi3PmZ/2xfMh6T mf3o2ZYAomGOGoY47WvKo486M+BMFhsdfuO4EloYEYERIYG22v8Cb2gv19ULyIoo TIArWGqKfCgs1aIohBXDypoUtaVWYOURnRYhvjY6Pa4aRDs1qL9CEGGrRy/mMtBq vA7Lg7oQuuxd9zmuxnyrYlmEIg5fFHh+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:26 2025 by rpki-client