$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: 7Ht9pofHW/OPZMliUj1UMy8Lb6UKd8vZSU6STX4s32Y= Subject key identifier: B2:B6:F2:59:CD:A2:1F:04:A9:8F:28:3B:1E:DC:24:80:D7:1E:A9:C7 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01EE Signing time: Thu 21 Aug 2025 02:38:46 +0000 Manifest this update: Thu 21 Aug 2025 02:38:46 +0000 Manifest next update: Thu 28 Aug 2025 02:38:46 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: swUjmmguLkUFq/es9nIqSf57AKZhalhONF+7/OzvmAI=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Aug 21 02:38:46 2025 GMT Not After : Aug 28 02:38:46 2025 GMT Subject: CN=68a686b6-4cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:b1:bc:bd:c9:13:b0:53:ea:6b:a5:5f:67: 80:0c:1e:3a:31:9f:1e:98:46:20:f7:1a:43:b7:88: 50:97:64:b3:92:91:1b:ba:45:83:f7:a6:b3:e8:2c: a9:18:69:75:15:45:6f:6f:a6:0a:63:88:2c:16:b2: 96:1a:6c:50:2a:b2:52:10:7d:c2:f6:0d:62:02:34: c3:54:8b:51:6d:6d:60:8b:87:6f:5a:9e:d1:30:8a: 21:45:8a:3b:87:f8:48:e4:e1:17:6b:fc:96:52:33: 16:60:44:1a:c8:02:4e:0a:5e:c2:e0:87:18:dc:3c: f8:41:b1:ff:cc:27:e2:d5:36:63:bd:ee:f0:ea:a4: 17:92:8b:73:9c:47:d9:77:55:bb:d1:77:fb:66:80: 8f:29:56:df:d0:a4:c9:e6:53:97:72:b7:d2:99:89: 9c:bf:c3:b2:3c:3b:5b:63:87:ba:44:ed:ec:8d:fa: 10:d8:a9:74:47:8f:f7:69:40:c4:11:2c:84:3a:db: c9:0f:12:15:9a:47:9c:61:ef:0f:8d:fe:47:4e:54: 4a:a7:5d:70:26:ff:9b:c3:9c:e4:0f:a6:d7:fd:cf: 9d:a2:f8:cb:5e:9b:1f:cd:8b:f8:95:36:69:cf:2f: 49:27:df:d0:86:74:8b:f8:48:6c:58:b1:84:e3:36: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:F2:59:CD:A2:1F:04:A9:8F:28:3B:1E:DC:24:80:D7:1E:A9:C7 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:05:62:44:8f:cc:4e:f2:a7:2b:48:44:0c:a0:70:b2:e7:5d: 83:0b:60:24:7d:17:55:58:e2:5b:77:a1:39:80:fa:87:ad:cf: 4c:10:bc:fa:ab:ea:43:90:f0:d0:08:57:63:11:e7:72:89:06: e1:cf:91:f4:8e:70:47:b4:4f:05:98:73:98:43:d6:dd:fa:b5: 9c:51:be:f3:24:0e:ff:35:d2:ec:f2:24:a7:ba:fb:5d:a9:5d: ae:e1:a7:9e:17:1d:9a:40:9e:7d:bc:87:ac:3f:0f:6d:f8:dd: 26:92:e8:0a:dd:a0:f0:5a:bd:04:16:d9:76:31:39:c1:d7:64: 18:24:a3:98:e3:58:3d:5c:92:a4:57:27:d0:1e:30:d1:80:5d: 8b:1a:5e:87:21:12:6d:54:11:bc:55:5a:cb:14:65:c0:c8:d0: 33:2e:62:1c:0c:d8:df:5d:90:38:7e:19:b9:4a:c8:96:83:c4: 76:1f:0e:01:cd:6a:5c:01:9d:c9:10:7a:53:f6:68:e0:ce:ef: 15:8a:28:14:bb:ba:59:f4:9c:35:58:94:e1:59:04:49:04:32: cf:32:79:0f:f6:96:69:8e:1d:8b:b8:92:ad:6c:82:88:19:51: bc:c2:2c:d3:bf:2b:76:e7:75:3a:5d:18:50:ce:c6:ca:a2:44: 57:93:30:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwODIxMDIzODQ2WhcNMjUwODI4MDIzODQ2WjAYMRYwFAYD VQQDEw02OGE2ODZiNi00Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0GxvL3JE7BT6mulX2eADB46MZ8emEYg9xpDt4hQl2SzkpEbukWD96az6Cyp GGl1FUVvb6YKY4gsFrKWGmxQKrJSEH3C9g1iAjTDVItRbW1gi4dvWp7RMIohRYo7 h/hI5OEXa/yWUjMWYEQayAJOCl7C4IcY3Dz4QbH/zCfi1TZjve7w6qQXkotznEfZ d1W70Xf7ZoCPKVbf0KTJ5lOXcrfSmYmcv8OyPDtbY4e6RO3sjfoQ2Kl0R4/3aUDE ESyEOtvJDxIVmkecYe8Pjf5HTlRKp11wJv+bw5zkD6bX/c+dovjLXpsfzYv4lTZp zy9JJ9/QhnSL+EhsWLGE4zaSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK28lnN oh8EqY8oOx7cJIDXHqnHMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmBWJEj8xO8qcrSEQMoHCy512DC2AkfRdVWOJbd6E5gPqHrc9MELz6 q+pDkPDQCFdjEedyiQbhz5H0jnBHtE8FmHOYQ9bd+rWcUb7zJA7/NdLs8iSnuvtd qV2u4aeeFx2aQJ59vIesPw9t+N0mkugK3aDwWr0EFtl2MTnB12QYJKOY41g9XJKk VyfQHjDRgF2LGl6HIRJtVBG8VVrLFGXAyNAzLmIcDNjfXZA4fhm5SsiWg8R2Hw4B zWpcAZ3JEHpT9mjgzu8ViigUu7pZ9Jw1WJThWQRJBDLPMnkP9pZpjh2LuJKtbIKI GVG8wizTvyt253U6XRhQzsbKokRXkzA5 -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:16 2025 by rpki-client