$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: iJbfsVOXZaAkOVieoOPfz6iqr+NfsL2097E7X9xwEUo= Subject key identifier: F9:A8:91:B9:CE:98:22:1E:74:DD:44:A1:30:80:AA:28:E0:B9:28:B1 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 34C4 Signing time: Thu 18 Sep 2025 14:49:45 +0000 Manifest this update: Thu 18 Sep 2025 14:49:44 +0000 Manifest next update: Thu 25 Sep 2025 14:49:44 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: XjquWrNXc1IvuVIpsRJ6x7eOvFOvNnKRQLyKvET6cOc=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Sep 18 14:49:44 2025 GMT Not After : Sep 25 14:49:44 2025 GMT Subject: CN=68cc1c08-3737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:87:60:a2:55:04:42:e1:5b:ac:c7:01:12: 1d:8c:f6:2b:ec:9d:85:00:cd:88:ea:53:79:25:18: 8b:4f:1a:c7:b4:bc:84:ef:d8:7e:1f:8f:82:20:7f: 46:91:fd:05:87:eb:ff:82:30:d1:19:6d:69:67:fc: 3f:02:17:e5:20:26:2a:1c:5b:d3:31:e2:95:13:e0: 44:fc:a1:66:72:3e:74:4b:17:e6:c9:f4:8e:4f:6b: 5e:a6:33:ca:b4:2e:33:7a:15:de:b8:5a:a2:a9:fb: cd:66:10:9b:b0:58:5c:f6:1d:59:3b:3e:fe:28:43: 05:82:da:47:5b:aa:5d:b2:e3:c6:63:be:cb:7f:88: e5:2e:dc:73:97:8b:7c:22:0d:73:bc:8e:f5:81:79: cd:be:ba:e4:84:57:78:0f:9b:08:d8:3f:1d:2c:80: 7f:02:2f:2e:36:9a:7d:a5:38:90:47:d4:3f:cb:03: e2:bb:8f:84:75:93:d5:bc:f3:dc:01:db:a0:d8:f6: 67:62:71:70:e2:83:1e:d8:9f:32:e5:37:1d:8d:3d: 72:32:58:fc:45:50:9b:7c:ff:13:2e:98:1c:85:7f: f2:cd:da:6a:1d:12:d3:4d:ab:de:84:d7:13:6f:00: e0:ad:61:69:ee:dd:b2:5b:82:62:5c:0a:b9:25:2b: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A8:91:B9:CE:98:22:1E:74:DD:44:A1:30:80:AA:28:E0:B9:28:B1 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a9:92:0c:47:87:64:67:a1:46:7b:7f:34:65:f3:da:56:1b: 5f:cc:28:11:19:b7:2d:ba:8a:24:73:f1:1e:60:42:b8:df:46: 29:0f:03:52:58:fe:14:9b:77:2a:7c:65:45:fb:0e:74:17:9b: f8:70:20:37:85:f6:a3:02:3c:49:dd:0e:d6:a3:0f:1a:90:49: 2c:f5:08:c8:94:89:c5:20:01:39:c7:8c:b7:39:c7:15:fe:a6: 39:91:23:47:36:c3:92:c3:06:9d:51:c0:8d:6f:dc:00:65:e4: dd:d4:13:d2:5d:44:71:06:dc:49:f8:8c:fe:d4:ae:dd:e9:db: 3d:e5:ac:f9:73:c6:b4:2c:29:40:b8:38:00:d5:f6:0c:7c:6f: 4b:3a:9e:a1:ab:88:34:c2:b7:24:2d:33:ad:3f:1a:af:37:24: a0:4b:c3:61:3b:bf:7c:8c:ca:32:e1:51:1c:80:3b:f0:c0:e9: 62:01:4d:31:be:96:ac:aa:47:7b:8e:6f:94:fa:93:c1:36:f3: d6:ed:b0:ce:60:d5:d9:e5:de:06:83:39:de:ef:16:df:3a:2c: ed:40:64:d1:5c:02:b3:9b:b4:8c:a4:d4:28:88:4d:e3:fa:58: 64:e2:91:3b:d1:ec:9f:23:ae:ae:1b:3f:fc:65:52:91:f6:96: e3:b1:ec:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwOTE4MTQ0OTQ0WhcNMjUwOTI1MTQ0OTQ0WjAYMRYwFAYD VQQDEw02OGNjMWMwOC0zNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuiHYKJVBELhW6zHARIdjPYr7J2FAM2I6lN5JRiLTxrHtLyE79h+H4+CIH9G kf0Fh+v/gjDRGW1pZ/w/AhflICYqHFvTMeKVE+BE/KFmcj50SxfmyfSOT2tepjPK tC4zehXeuFqiqfvNZhCbsFhc9h1ZOz7+KEMFgtpHW6pdsuPGY77Lf4jlLtxzl4t8 Ig1zvI71gXnNvrrkhFd4D5sI2D8dLIB/Ai8uNpp9pTiQR9Q/ywPiu4+EdZPVvPPc Adug2PZnYnFw4oMe2J8y5TcdjT1yMlj8RVCbfP8TLpgchX/yzdpqHRLTTavehNcT bwDgrWFp7t2yW4JiXAq5JStjDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmokbnO mCIedN1EoTCAqijguSixMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANqZIMR4dkZ6FGe380ZfPaVhtfzCgRGbctuookc/EeYEK430YpDwNS WP4Um3cqfGVF+w50F5v4cCA3hfajAjxJ3Q7Wow8akEks9QjIlInFIAE5x4y3OccV /qY5kSNHNsOSwwadUcCNb9wAZeTd1BPSXURxBtxJ+Iz+1K7d6ds95az5c8a0LClA uDgA1fYMfG9LOp6hq4g0wrckLTOtPxqvNySgS8NhO798jMoy4VEcgDvwwOliAU0x vpasqkd7jm+U+pPBNvPW7bDOYNXZ5d4Ggzne7xbfOiztQGTRXAKzm7SMpNQoiE3j +lhk4pE70eyfI66uGz/8ZVKR9pbjsexN -----END CERTIFICATE-----Generated at Thu Sep 18 23:48:36 2025 by rpki-client