$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: unJhe32hDrerLcsDIdpQIeZwyibN4PWATfVW9o+tmag= Subject key identifier: EF:A4:FB:CA:C2:26:73:D2:DE:A6:0E:F0:CA:5B:7A:C1:3C:04:23:5C Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0E20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0E8D Signing time: Sun 24 Aug 2025 17:47:53 +0000 Manifest this update: Sun 24 Aug 2025 17:47:53 +0000 Manifest next update: Sun 31 Aug 2025 17:47:53 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: LAx6LDESMJSdR6STkHbCkasBVamss/xe32FTFpacfeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Aug 24 17:47:53 2025 GMT Not After : Aug 31 17:47:53 2025 GMT Subject: CN=68ab5049-a55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:c4:21:c2:cb:dc:ae:52:f2:0b:03:8b:0d: 72:e2:a0:42:a4:b7:ad:9c:cb:e6:11:8f:c0:a8:a4: 9f:1d:9d:e3:4f:fa:85:f9:df:a6:91:12:95:4f:d2: 41:a1:2c:de:2f:b0:e0:2f:77:ef:41:96:fb:5f:6e: 20:55:8d:f9:9e:f7:10:28:bc:7e:73:b0:ca:12:5d: 19:3d:24:86:7c:4c:a7:5c:36:81:07:4c:44:56:fb: b3:b0:61:54:22:9a:cd:07:3b:5a:1a:73:6a:b4:b6: 04:26:d2:bd:d6:f9:d7:e7:d7:f0:76:ad:3c:c9:39: cd:c2:68:e2:41:b6:b8:1c:5a:71:5f:5f:97:88:0b: 5f:63:33:40:3b:1e:5f:39:bc:7d:6e:61:2c:62:2f: 16:31:d6:2e:08:5d:a1:75:dd:6e:e2:ec:be:eb:bc: b7:c6:a9:00:95:11:c1:5e:75:f1:47:be:32:d4:1e: b4:42:67:f1:31:8f:f3:07:70:06:cf:9a:63:f2:16: 5d:6f:21:f3:f7:64:ba:d0:75:b0:f5:a6:34:11:86: 50:5b:36:fd:ba:7f:bf:ef:74:b1:60:a1:e5:09:89: be:01:f0:dc:70:25:3e:ca:96:75:33:72:7e:69:1d: f0:64:3b:9e:24:34:51:08:3a:6e:ef:2c:57:26:7f: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:FB:CA:C2:26:73:D2:DE:A6:0E:F0:CA:5B:7A:C1:3C:04:23:5C X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:97:01:91:32:6d:53:c4:e8:ac:7f:24:a3:3e:a8:1c:41:32: 74:86:e8:18:c4:b0:ee:68:cd:b7:02:b9:20:c6:0f:49:5b:17: 18:01:6f:40:33:4f:28:66:74:cd:43:07:ea:43:ee:d9:8a:c9: b9:40:ba:69:fa:95:cd:22:4c:3c:d6:11:da:4f:3c:0b:67:68: fe:56:c9:3a:ee:e3:a5:71:2a:76:c6:46:3a:b5:c9:e1:0c:1c: 7b:bf:34:82:fd:4a:d9:b2:e5:37:a2:47:bb:e6:99:13:db:ee: cc:c8:93:e2:5f:c9:7c:b3:e1:aa:bb:2c:77:34:b2:3d:33:b1: 79:f1:ce:7f:57:de:81:2a:f7:7b:5a:86:90:5d:50:34:7d:a8: a9:dd:2c:25:4a:d1:52:92:3d:dc:bd:6c:f9:ca:c7:7b:20:19: a7:eb:a6:0d:ae:46:d2:33:29:3d:c3:a5:ac:dd:7f:00:07:92: f0:ef:9f:b1:2d:f2:df:e9:12:22:1e:5e:3c:39:52:3b:6c:da: fb:f8:24:21:a9:54:f4:fe:89:1f:bc:a1:b8:4c:63:d7:86:0c: 9c:4e:00:05:4e:dd:34:59:30:c2:ea:19:f5:29:f4:a7:a0:e9: 5b:61:e1:10:c2:7c:c3:b1:bb:0b:bf:cc:0c:82:f9:c2:36:1f: 28:ab:88:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjUwODI0MTc0NzUzWhcNMjUwODMxMTc0NzUzWjAYMRYwFAYD VQQDEw02OGFiNTA0OS1hNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHbEIcLL3K5S8gsDiw1y4qBCpLetnMvmEY/AqKSfHZ3jT/qF+d+mkRKVT9JB oSzeL7DgL3fvQZb7X24gVY35nvcQKLx+c7DKEl0ZPSSGfEynXDaBB0xEVvuzsGFU IprNBztaGnNqtLYEJtK91vnX59fwdq08yTnNwmjiQba4HFpxX1+XiAtfYzNAOx5f Obx9bmEsYi8WMdYuCF2hdd1u4uy+67y3xqkAlRHBXnXxR74y1B60QmfxMY/zB3AG z5pj8hZdbyHz92S60HWw9aY0EYZQWzb9un+/73SxYKHlCYm+AfDccCU+ypZ1M3J+ aR3wZDueJDRRCDpu7yxXJn+3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+k+8rC JnPS3qYO8MpbesE8BCNcMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlwGRMm1TxOisfySjPqgcQTJ0hugYxLDuaM23Arkgxg9JWxcYAW9A M08oZnTNQwfqQ+7Zism5QLpp+pXNIkw81hHaTzwLZ2j+Vsk67uOlcSp2xkY6tcnh DBx7vzSC/UrZsuU3oke75pkT2+7MyJPiX8l8s+Gquyx3NLI9M7F58c5/V96BKvd7 WoaQXVA0faip3SwlStFSkj3cvWz5ysd7IBmn66YNrkbSMyk9w6Ws3X8AB5Lw75+x LfLf6RIiHl48OVI7bNr7+CQhqVT0/okfvKG4TGPXhgycTgAFTt00WTDC6hn1KfSn oOlbYeEQwnzDsbsLv8wMgvnCNh8oq4iT -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:54 2025 by rpki-client