$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: doeSoTDkCvKBZBfmzL1img0CykbiVtULVuuSHNAEZM8= Subject key identifier: EB:53:A1:6C:9E:D9:4D:F5:78:8B:20:C6:EA:42:BC:20:05:9B:08:F1 Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: D3 Signing time: Thu 21 Aug 2025 05:47:16 +0000 Manifest this update: Thu 21 Aug 2025 05:47:15 +0000 Manifest next update: Thu 28 Aug 2025 05:47:15 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: KCFQYuu/IVfLdDmgIwi5lbO4t7FtS2zJoGYqAD1Vr64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Aug 21 05:47:15 2025 GMT Not After : Aug 28 05:47:15 2025 GMT Subject: CN=68a6b2e4-d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:67:63:7e:95:0a:5f:26:78:c1:28:c2:42: 49:70:34:cb:62:37:0a:e0:ef:17:c7:38:60:70:99: b1:ae:9e:81:1e:de:1b:66:a7:95:c1:12:ec:81:10: 23:ad:cb:b7:e8:a0:81:5f:3a:84:1d:d5:70:7a:ee: 4e:20:c9:c2:9d:f8:9b:19:9d:6a:a5:4e:3d:b0:2e: a5:da:a0:a7:7f:ad:97:43:41:9d:88:e7:17:bd:6e: 36:a0:7b:fa:54:09:5b:f7:12:15:50:fc:02:05:da: bd:0b:70:c8:07:c5:37:4c:52:48:d3:b9:81:c8:85: d2:31:60:17:54:8b:47:28:5d:25:58:48:9f:86:10: a5:16:74:39:60:2c:8f:0e:04:0d:ea:ef:63:05:94: ad:f6:d1:fa:e1:6a:a9:87:f9:5c:01:19:6b:59:d1: fa:23:ab:6b:4b:a8:5f:45:0e:91:3e:f0:79:12:04: 65:bd:20:7b:8e:2b:a1:82:c7:d8:77:47:f7:3b:b1: ff:38:3f:09:11:f1:00:04:12:ba:27:5d:fd:2e:ee: 70:55:97:8b:2c:b5:15:cc:8b:26:26:ee:b5:44:7e: f0:b8:f5:1b:4b:bc:83:19:48:b5:2d:57:f2:93:64: 34:38:99:dc:3d:c7:15:4c:42:01:54:37:26:49:e0: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:A1:6C:9E:D9:4D:F5:78:8B:20:C6:EA:42:BC:20:05:9B:08:F1 X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:38:a5:e8:d3:33:67:0a:8a:21:60:ab:ff:93:5b:70:d3:a2: 9d:69:c3:bb:99:fe:33:f9:ec:61:09:7a:ab:5e:1b:f4:55:4a: 1e:2b:e8:4f:f4:75:83:a4:21:27:34:07:eb:8c:67:a8:4c:f9: dc:dc:79:8d:37:56:a7:56:36:33:66:29:ab:b0:9a:cc:78:18: 80:1b:4e:2a:e2:4b:e1:d9:ae:73:9f:6e:53:08:03:da:a3:f5: 46:7f:19:bd:50:7a:66:41:99:8e:54:03:f1:c0:b3:a9:75:95: a4:f0:d1:9e:0f:f1:1b:31:2e:ea:9a:b6:7e:ea:26:19:e3:14: e7:57:7a:61:6d:e5:65:47:7e:36:88:63:9e:d2:15:7b:69:f4: d3:cd:7d:82:b2:be:b8:5b:8a:0d:9c:5b:4a:78:91:2e:b8:4f: c7:16:75:a7:49:d7:aa:59:59:5a:43:a2:17:b9:0f:6f:2a:8a: 0b:de:53:8b:58:26:b4:0e:34:d2:cf:a3:93:ee:2d:9b:7c:20: 45:c6:77:ce:65:0d:33:d1:20:41:18:42:11:7e:da:1b:85:74: 8f:43:e5:ce:5d:59:44:2b:d4:96:f2:8d:01:31:fc:cb:b7:ca: 96:2e:db:b2:21:14:8d:d8:ed:44:98:83:96:76:c0:c9:aa:30: a1:78:d2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKDc1QjcxRjU0NkY0N0IyMUVFM0VBOUE4NjUxMTQ2QzFF QzVFQzk1QTYwHhcNMjUwODIxMDU0NzE1WhcNMjUwODI4MDU0NzE1WjAYMRYwFAYD VQQDEw02OGE2YjJlNC1kNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gBnY36VCl8meMEowkJJcDTLYjcK4O8XxzhgcJmxrp6BHt4bZqeVwRLsgRAj rcu36KCBXzqEHdVweu5OIMnCnfibGZ1qpU49sC6l2qCnf62XQ0GdiOcXvW42oHv6 VAlb9xIVUPwCBdq9C3DIB8U3TFJI07mByIXSMWAXVItHKF0lWEifhhClFnQ5YCyP DgQN6u9jBZSt9tH64Wqph/lcARlrWdH6I6trS6hfRQ6RPvB5EgRlvSB7jiuhgsfY d0f3O7H/OD8JEfEABBK6J139Lu5wVZeLLLUVzIsmJu61RH7wuPUbS7yDGUi1LVfy k2Q0OJncPccVTEIBVDcmSeBkzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtToWye 2U31eIsgxupCvCAFmwjxMB8GA1UdIwQYMBaAFHW3H1RvR7Ie4+qahlEUbB7F7JWm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS8wNEQ0NzIwNDNB OEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNoN2o2cHFHVVJSc0hzWHNs YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS8wNEQ0NzIwNDNBOEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNo N2o2cHFHVVJSc0hzWHNsYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5OKXo0zNnCoohYKv/k1tw06KdacO7mf4z+exhCXqrXhv0VUoeK+hP 9HWDpCEnNAfrjGeoTPnc3HmNN1anVjYzZimrsJrMeBiAG04q4kvh2a5zn25TCAPa o/VGfxm9UHpmQZmOVAPxwLOpdZWk8NGeD/EbMS7qmrZ+6iYZ4xTnV3phbeVlR342 iGOe0hV7afTTzX2Csr64W4oNnFtKeJEuuE/HFnWnSdeqWVlaQ6IXuQ9vKooL3lOL WCa0DjTSz6OT7i2bfCBFxnfOZQ0z0SBBGEIRftobhXSPQ+XOXVlEK9SW8o0BMfzL t8qWLtuyIRSN2O1EmIOWdsDJqjCheNJ0 -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:38 2025 by rpki-client