$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: rezeGoc/VCAG7lJnCF/7s1P7EXsPbaZQzNZwRsaw9o8= Subject key identifier: 7E:D3:39:49:1B:27:40:55:21:FF:83:24:DF:51:A9:1D:7D:61:E3:41 Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0BCB Signing time: Wed 20 Aug 2025 19:00:32 +0000 Manifest this update: Wed 20 Aug 2025 19:00:31 +0000 Manifest next update: Wed 27 Aug 2025 19:00:31 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: Qe4qLS8tNAiECIpaaPPW7Ox+av2mYlYh2r0WuHOR0GI=) 2: 7AC6992E655411F088401528C4F9AE02.roa (hash: uIcNx9LJmFIiFy1R//MYnp48SjiCyMS3BH2WDp6mT4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Aug 20 19:00:31 2025 GMT Not After : Aug 27 19:00:31 2025 GMT Subject: CN=68a61b50-04e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:d5:90:74:ba:d9:34:33:32:96:ea:2d:93: 40:7a:68:d0:e9:64:93:9f:52:65:8f:dc:58:6f:99: 7b:d8:9c:8c:a7:96:54:5d:2b:b8:fe:75:0d:a2:07: 19:af:b7:87:0f:3d:10:3c:16:6f:fa:92:98:b5:67: 5f:d1:8d:51:21:ef:aa:00:b0:f3:1a:1b:06:72:71: 21:c0:ab:57:fe:52:d8:c1:15:d9:dc:ad:96:bf:d8: c4:96:ce:3c:f6:39:a0:1d:a7:66:21:5d:f9:f0:fc: 60:39:5f:2b:65:6a:7c:03:e3:fa:73:e8:9f:1e:0a: 60:30:22:a0:22:3c:17:cd:8c:ed:94:ba:1d:5f:53: 02:60:6e:cb:8f:f8:3d:d6:9d:df:34:a9:8b:87:f2: 80:f3:99:12:86:c0:62:f2:64:98:9f:a7:ce:df:c8: 8a:ef:d3:ce:48:a6:c9:af:3f:2b:eb:d0:b1:aa:72: 85:69:50:22:e0:e3:52:8b:4d:3d:a1:10:11:6f:16: 7b:48:a1:4d:07:89:d0:fc:78:8d:3d:d3:5b:e5:ac: d1:70:bd:75:ef:97:fb:df:8f:69:05:24:89:6f:6c: a2:ed:a0:f5:6a:37:6b:e2:aa:f2:4c:b5:2b:cf:63: cf:89:3b:d1:e0:d9:9e:74:f0:09:1b:8d:f0:7c:37: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D3:39:49:1B:27:40:55:21:FF:83:24:DF:51:A9:1D:7D:61:E3:41 X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1d:8c:7e:d9:82:9d:2f:f3:62:d5:6c:72:8d:c9:59:ef:21: 22:45:79:92:75:b2:4c:6d:4a:e3:1f:e3:25:86:80:fc:80:8f: 04:27:4a:1c:9e:f6:bb:fd:b3:cc:06:8e:31:9e:64:62:87:3e: 29:4a:1b:27:62:91:bd:0b:85:5e:fc:4e:5b:37:4b:92:f1:20: 34:09:ed:d9:17:3c:83:d7:5c:a0:a9:b3:f4:4f:78:d3:af:dc: 8b:c3:01:90:44:1d:5b:b8:b5:a2:d7:83:ef:c7:ab:98:a3:08: de:00:b5:a6:cd:b1:01:59:c8:38:aa:13:38:e7:6c:31:5a:6f: 9a:02:df:68:23:dc:e2:10:cb:5b:5b:62:e2:1b:a0:2d:be:9f: 4b:6c:93:ed:ac:ea:46:64:5d:7d:0b:93:b6:ae:61:30:fe:80: 88:74:2c:18:7a:29:79:bf:ad:42:b3:0e:61:8e:34:d8:a1:bb: 3d:4f:a0:e1:b4:01:1c:79:81:32:02:d5:de:f6:87:32:8d:e6: c7:bf:d9:a7:c7:4f:d9:ed:0f:a0:07:30:81:23:e6:35:08:80: 7a:83:8a:d0:29:56:1d:21:bd:f6:ce:32:9c:dc:da:a2:1f:ca: 62:53:0f:4a:09:12:d6:a2:7d:2f:03:1e:f2:76:24:61:31:1b: bc:4f:e5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUwODIwMTkwMDMxWhcNMjUwODI3MTkwMDMxWjAYMRYwFAYD VQQDEw02OGE2MWI1MC0wNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts3VkHS62TQzMpbqLZNAemjQ6WSTn1Jlj9xYb5l72JyMp5ZUXSu4/nUNogcZ r7eHDz0QPBZv+pKYtWdf0Y1RIe+qALDzGhsGcnEhwKtX/lLYwRXZ3K2Wv9jEls48 9jmgHadmIV358PxgOV8rZWp8A+P6c+ifHgpgMCKgIjwXzYztlLodX1MCYG7Lj/g9 1p3fNKmLh/KA85kShsBi8mSYn6fO38iK79POSKbJrz8r69CxqnKFaVAi4ONSi009 oRARbxZ7SKFNB4nQ/HiNPdNb5azRcL1175f7349pBSSJb2yi7aD1ajdr4qryTLUr z2PPiTvR4NmedPAJG43wfDeoQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7TOUkb J0BVIf+DJN9RqR19YeNBMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPHYx+2YKdL/Ni1WxyjclZ7yEiRXmSdbJMbUrjH+MlhoD8gI8EJ0oc nva7/bPMBo4xnmRihz4pShsnYpG9C4Ve/E5bN0uS8SA0Ce3ZFzyD11ygqbP0T3jT r9yLwwGQRB1buLWi14Pvx6uYowjeALWmzbEBWcg4qhM452wxWm+aAt9oI9ziEMtb W2LiG6Atvp9LbJPtrOpGZF19C5O2rmEw/oCIdCwYeil5v61Csw5hjjTYobs9T6Dh tAEceYEyAtXe9ocyjebHv9mnx0/Z7Q+gBzCBI+Y1CIB6g4rQKVYdIb32zjKc3Nqi H8piUw9KCRLWon0vAx7ydiRhMRu8T+V+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:46 2025 by rpki-client