$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: EXJyCpp4TaxhQO4BH0rhgYpSBePQm14WcH49oG77S/w= Subject key identifier: 11:C5:EA:CB:05:F7:6D:CB:42:93:59:58:95:1D:BD:98:DC:B4:BA:E0 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 029A Signing time: Fri 19 Sep 2025 02:02:22 +0000 Manifest this update: Fri 19 Sep 2025 02:02:22 +0000 Manifest next update: Fri 26 Sep 2025 02:02:22 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: K5bO/1b0xrcaOIddljhfIpu7dX4UvVGLojCCI60k4gc=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Sep 19 02:02:22 2025 GMT Not After : Sep 26 02:02:22 2025 GMT Subject: CN=68ccb9ae-fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:e3:f1:5b:33:7d:79:02:1a:37:aa:b5:6c: 89:ce:f0:cd:97:af:02:f7:5d:de:ad:d7:13:86:62: ba:32:0f:6b:06:bd:73:52:00:f7:44:c2:41:50:df: d9:e7:b8:37:65:01:e6:e0:de:69:7a:63:60:bc:2e: cd:2b:36:2d:5d:12:09:33:ec:1f:30:4b:96:42:16: ef:86:96:cc:4a:91:ac:2e:88:79:06:da:e6:14:9c: 4f:97:c9:6a:ce:d2:7c:e9:15:fd:84:6c:f8:b6:ce: f1:85:2c:26:a5:42:1b:a8:53:63:9c:db:e1:96:ba: 35:db:8a:ff:77:5b:26:6e:11:11:a2:a9:8c:1f:27: 25:e7:bd:68:19:81:7e:0d:8e:3a:df:c4:d1:19:0b: a3:ff:9a:20:e0:6a:02:bb:58:6c:f5:bf:d2:7c:c1: 08:07:6c:ee:e6:10:38:45:7f:4d:48:46:65:6e:55: 0c:05:46:69:2a:9e:85:8f:67:24:29:0d:43:62:5c: 5e:77:da:c9:9e:0a:a3:19:fd:51:ab:1c:7d:4d:bd: b5:75:08:b5:1c:1a:b7:7a:0e:55:1b:cf:a2:35:a2: 22:1d:69:43:c0:f5:c7:08:f8:8a:77:f5:f3:2e:15: d4:fb:d3:11:d8:68:4c:e6:e3:59:21:66:29:77:1e: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:EA:CB:05:F7:6D:CB:42:93:59:58:95:1D:BD:98:DC:B4:BA:E0 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:a8:e5:8f:a1:7d:25:8f:b6:af:c9:51:55:e6:db:b8:d7: 7a:68:b1:e2:1b:81:ab:74:28:32:2a:a7:e7:2f:df:42:96:f4: f4:25:f9:c0:5b:b8:50:f9:ba:d5:23:dd:28:79:c3:7f:cf:a0: 2f:8d:46:cb:11:1c:07:7d:77:07:1f:07:f7:4d:f9:3b:98:11: c0:16:93:61:72:a2:39:7e:5f:79:f3:90:87:04:bc:57:28:a4: ff:cc:56:71:d0:20:46:e7:a6:80:fa:fd:aa:df:c6:d3:a0:02: 9c:b9:dc:dd:7d:11:55:bf:21:7c:ea:10:3e:82:e1:90:21:77: de:3c:ee:da:fa:0c:0b:93:f8:12:5c:71:a8:39:5e:7d:59:03: b8:96:63:6b:34:07:d5:23:87:db:e1:8b:e1:10:22:40:e7:c5: eb:59:80:4f:4b:c5:45:f7:4e:43:97:d2:c7:9a:eb:04:36:6a: 7d:78:58:11:cd:a7:0c:84:a4:72:2c:e1:60:41:14:a1:31:8a: 92:f2:b0:e5:14:5c:af:4d:18:03:3f:83:2e:db:f4:3a:95:d3: 39:94:71:c0:82:93:27:a7:2d:1c:aa:d9:ef:5a:09:e2:f1:16: d2:14:97:96:1c:79:0e:25:b3:9c:80:2a:ea:b4:9d:7e:77:99: dc:3d:0b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwOTE5MDIwMjIyWhcNMjUwOTI2MDIwMjIyWjAYMRYwFAYD VQQDEw02OGNjYjlhZS1mYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hPj8VszfXkCGjeqtWyJzvDNl68C913erdcThmK6Mg9rBr1zUgD3RMJBUN/Z 57g3ZQHm4N5pemNgvC7NKzYtXRIJM+wfMEuWQhbvhpbMSpGsLoh5BtrmFJxPl8lq ztJ86RX9hGz4ts7xhSwmpUIbqFNjnNvhlro124r/d1smbhERoqmMHycl571oGYF+ DY4638TRGQuj/5og4GoCu1hs9b/SfMEIB2zu5hA4RX9NSEZlblUMBUZpKp6Fj2ck KQ1DYlxed9rJngqjGf1Rqxx9Tb21dQi1HBq3eg5VG8+iNaIiHWlDwPXHCPiKd/Xz LhXU+9MR2GhM5uNZIWYpdx7JNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHF6ssF 923LQpNZWJUdvZjctLrgMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4qjlj6F9JY+2r8lRVebbuNd6aLHiG4GrdCgyKqfnL99ClvT0JfnA W7hQ+brVI90oecN/z6AvjUbLERwHfXcHHwf3Tfk7mBHAFpNhcqI5fl9585CHBLxX KKT/zFZx0CBG56aA+v2q38bToAKcudzdfRFVvyF86hA+guGQIXfePO7a+gwLk/gS XHGoOV59WQO4lmNrNAfVI4fb4YvhECJA58XrWYBPS8VF905Dl9LHmusENmp9eFgR zacMhKRyLOFgQRShMYqS8rDlFFyvTRgDP4Mu2/Q6ldM5lHHAgpMnpy0cqtnvWgni 8RbSFJeWHHkOJbOcgCrqtJ1+d5ncPQvD -----END CERTIFICATE-----Generated at Fri Sep 19 03:56:50 2025 by rpki-client