$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: oAPP3/gdDUZW8Bcb0bqX+A+5y5727zVMblGh3n1Ys4U= Subject key identifier: E4:3B:EC:FE:EE:D6:CD:40:87:A4:8F:D9:8E:8D:0F:D0:7D:5B:5F:88 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0C74 Signing time: Thu 18 Sep 2025 18:37:53 +0000 Manifest this update: Thu 18 Sep 2025 18:37:52 +0000 Manifest next update: Thu 25 Sep 2025 18:37:52 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: PcjAH6XBrb2VbUq6dSvxAg9nxuwfSeOykA5fYYHoPog=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Sep 18 18:37:52 2025 GMT Not After : Sep 25 18:37:52 2025 GMT Subject: CN=68cc5180-e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:90:53:f2:dc:85:90:53:f0:d5:25:3e:63:b7: b0:3c:d2:d5:fa:e5:c0:8c:6b:79:66:91:55:24:7d: 5a:16:cd:a1:5d:5c:66:37:98:d6:6d:5a:58:f4:0d: c2:13:37:83:63:f7:04:c8:b6:d7:c5:89:43:44:ba: b0:70:e1:2e:e0:e8:3a:37:aa:92:a9:05:49:ab:08: 78:50:4e:30:66:39:e3:af:ef:58:2c:93:c7:13:0c: e0:c6:e0:a1:31:5e:a9:46:ba:a1:0f:e5:5e:de:d1: 70:28:53:c4:f0:ec:23:e3:6a:3d:8e:be:a9:ea:98: ab:a5:b9:e3:1f:5d:c3:d3:ca:e2:64:ba:d0:03:e4: b0:00:cb:4e:41:f6:03:32:c2:c9:af:ea:eb:ea:6d: 6b:59:53:ca:0f:77:74:16:81:81:66:00:60:3a:73: f5:e6:8c:1f:c6:e0:3b:94:5e:82:cc:fc:66:ed:7a: b7:12:b7:fc:16:58:ad:51:1c:bf:72:4a:86:7d:8d: 38:35:69:e7:9f:d8:59:05:43:91:1f:75:12:2e:3a: df:54:bb:19:0e:b5:a5:11:5f:1f:24:ce:08:48:a6: 53:a4:97:dd:2e:7b:ab:e3:c6:2b:a4:5a:61:73:57: 28:c6:f8:78:0f:e9:27:6a:06:61:fd:16:81:29:96: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3B:EC:FE:EE:D6:CD:40:87:A4:8F:D9:8E:8D:0F:D0:7D:5B:5F:88 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3b:7e:20:2f:62:b1:89:a1:68:63:d2:79:0d:1c:65:48:d0: 29:36:7b:38:9d:3c:06:1a:cb:1a:06:ea:3e:d4:1c:9d:00:31: 55:ba:90:0c:15:ce:d4:01:96:ad:0a:47:42:df:09:6c:85:00: 17:43:fc:8d:c4:16:ac:54:86:42:cc:93:76:cb:cc:44:3e:87: fd:0d:b5:5f:2d:22:ed:2e:e9:af:7e:08:3e:96:c8:de:02:50: 51:1a:4b:e4:d2:70:06:46:c6:8f:d5:fa:f1:46:d2:8f:91:e6: 7e:25:b4:ef:94:0b:74:dd:41:5d:34:03:83:9f:d6:87:53:3f: 4e:9d:87:3b:d3:8d:2f:a7:4b:dc:90:27:f2:ba:6e:a7:12:3c: 4f:ff:91:c2:b7:44:57:d4:fc:3e:e3:86:76:05:86:8d:54:a8: 45:cd:12:3a:26:93:ab:27:78:15:59:f2:c7:42:68:ab:7f:25: 92:ee:32:3c:05:f7:ce:44:81:8b:d6:bb:6c:19:65:2a:6e:b4: 4d:7d:75:b2:c3:8c:69:f3:d9:90:f2:2e:c8:1d:01:2b:98:92: ef:14:2a:e1:ee:18:78:19:3c:eb:67:80:ad:f7:c6:56:c8:ff: 6f:f6:0c:a1:ef:4d:d4:f3:fb:9c:06:8a:fc:60:3e:2c:33:0f: 10:13:e3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUwOTE4MTgzNzUyWhcNMjUwOTI1MTgzNzUyWjAYMRYwFAYD VQQDEw02OGNjNTE4MC1lN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JBT8tyFkFPw1SU+Y7ewPNLV+uXAjGt5ZpFVJH1aFs2hXVxmN5jWbVpY9A3C EzeDY/cEyLbXxYlDRLqwcOEu4Og6N6qSqQVJqwh4UE4wZjnjr+9YLJPHEwzgxuCh MV6pRrqhD+Ve3tFwKFPE8Owj42o9jr6p6pirpbnjH13D08riZLrQA+SwAMtOQfYD MsLJr+rr6m1rWVPKD3d0FoGBZgBgOnP15owfxuA7lF6CzPxm7Xq3Erf8FlitURy/ ckqGfY04NWnnn9hZBUORH3USLjrfVLsZDrWlEV8fJM4ISKZTpJfdLnur48YrpFph c1coxvh4D+knagZh/RaBKZa5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ77P7u 1s1Ah6SP2Y6ND9B9W1+IMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiO34gL2KxiaFoY9J5DRxlSNApNns4nTwGGssaBuo+1BydADFVupAM Fc7UAZatCkdC3wlshQAXQ/yNxBasVIZCzJN2y8xEPof9DbVfLSLtLumvfgg+lsje AlBRGkvk0nAGRsaP1frxRtKPkeZ+JbTvlAt03UFdNAODn9aHUz9OnYc7040vp0vc kCfyum6nEjxP/5HCt0RX1Pw+44Z2BYaNVKhFzRI6JpOrJ3gVWfLHQmirfyWS7jI8 BffORIGL1rtsGWUqbrRNfXWyw4xp89mQ8i7IHQErmJLvFCrh7hh4GTzrZ4Ct98ZW yP9v9gyh703U8/ucBor8YD4sMw8QE+NK -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:13 2025 by rpki-client