$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: RRRG9HTyOB1rKJ56kaqq4EtholaNM8bMLjbh6HrfiHs= Subject key identifier: 1B:C0:53:41:1F:58:87:C5:2E:72:A0:A3:F5:16:B6:1D:8A:D2:B1:99 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 013A Signing time: Sat 23 Aug 2025 04:36:30 +0000 Manifest this update: Sat 23 Aug 2025 04:36:30 +0000 Manifest next update: Sat 30 Aug 2025 04:36:30 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: U/xfpfHXGkOZR2M3x4XftwqwhvYZ/l/hZXUBtEEqKWw=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Aug 23 04:36:30 2025 GMT Not After : Aug 30 04:36:30 2025 GMT Subject: CN=68a9454e-3bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:61:33:c0:9d:e9:64:ff:d1:a5:c0:3b:76: a5:3a:39:1d:57:89:86:09:cf:75:c3:1f:85:c5:e8: 3f:c5:07:91:64:a6:64:fd:43:35:c6:41:bf:d2:e0: ff:dd:98:f3:e8:a2:6f:6f:c9:00:b8:4e:0a:28:4c: da:c7:6a:d0:66:97:58:49:4d:71:58:8d:83:d0:39: 0f:02:cc:a9:e4:2b:ac:9d:ca:52:2f:90:71:b2:32: f3:cb:60:ac:da:89:14:04:bb:32:8a:3b:0b:84:37: ac:06:28:3b:23:b1:b1:14:c2:07:5c:9e:81:f9:85: c6:31:b3:d2:93:8e:77:46:c2:d2:13:3c:7a:5f:fc: b3:fe:fd:ae:79:e8:f3:d5:cc:51:71:ea:4c:ca:99: 89:cc:c9:28:59:6a:e8:73:ab:c2:6f:ac:94:5b:90: 02:49:98:58:61:15:fe:83:c7:4a:8d:3e:4a:bf:6f: 3e:43:76:c9:4e:03:ed:0e:7f:91:86:1f:10:1c:f7: a8:27:9f:06:22:db:0e:c8:28:63:1e:ca:2c:79:2a: 3a:19:22:d8:ee:1b:72:48:43:ce:b2:d2:63:e5:05: 4a:71:4c:b2:c7:2c:85:61:c1:91:d5:27:5a:bc:50: 8d:0b:20:5d:2f:8d:a4:a4:0d:23:8c:e7:40:3e:ee: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:53:41:1F:58:87:C5:2E:72:A0:A3:F5:16:B6:1D:8A:D2:B1:99 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:49:12:84:3e:b2:0b:94:f7:54:da:43:22:87:2a:21:35: c5:08:47:6f:d5:1a:3f:7c:47:e6:26:41:94:e6:2d:6a:49:a6: 11:a6:97:9e:4a:f2:74:d8:3d:27:d7:bf:2a:3a:be:d7:6d:cd: ef:67:8c:58:a7:18:69:7c:ca:2c:c8:a7:49:84:c3:a6:ff:8a: 8a:de:a1:ac:ce:8e:4a:48:2d:11:90:4f:da:56:74:7a:63:26: 6a:2c:ed:bf:47:27:82:d8:00:b8:95:af:5d:af:f2:90:8c:19: 4d:bd:33:c6:95:fa:7c:4b:db:bf:38:58:51:16:ff:dc:0e:18: ff:d9:56:24:36:9b:f4:a9:39:ce:ac:0f:4c:8b:a8:d8:fd:f8: c7:aa:e7:42:22:0b:ab:30:d0:07:3c:6f:fa:ed:ca:fe:ad:d1: cf:05:75:08:c6:fa:eb:bb:43:49:06:17:06:13:e3:59:cd:be: 94:64:17:e3:30:37:e9:a5:7a:32:94:4d:cc:6b:96:61:a5:da: 79:48:08:3b:4c:2f:e3:1c:a6:31:14:76:fd:ad:71:85:92:ba: cb:d6:59:af:69:17:03:89:4c:00:e3:28:6c:8e:08:f9:2b:c3: 90:9f:11:4a:18:a3:5f:06:2a:d9:3f:ce:da:eb:f8:6a:33:94: 18:f7:2c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUwODIzMDQzNjMwWhcNMjUwODMwMDQzNjMwWjAYMRYwFAYD VQQDEw02OGE5NDU0ZS0zYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FphM8Cd6WT/0aXAO3alOjkdV4mGCc91wx+Fxeg/xQeRZKZk/UM1xkG/0uD/ 3Zjz6KJvb8kAuE4KKEzax2rQZpdYSU1xWI2D0DkPAsyp5CusncpSL5BxsjLzy2Cs 2okUBLsyijsLhDesBig7I7GxFMIHXJ6B+YXGMbPSk453RsLSEzx6X/yz/v2ueejz 1cxRcepMypmJzMkoWWroc6vCb6yUW5ACSZhYYRX+g8dKjT5Kv28+Q3bJTgPtDn+R hh8QHPeoJ58GItsOyChjHsoseSo6GSLY7htySEPOstJj5QVKcUyyxyyFYcGR1Sda vFCNCyBdL42kpA0jjOdAPu4f+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvAU0Ef WIfFLnKgo/UWth2K0rGZMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8zkkShD6yC5T3VNpDIocqITXFCEdv1Ro/fEfmJkGU5i1qSaYRppee SvJ02D0n178qOr7Xbc3vZ4xYpxhpfMosyKdJhMOm/4qK3qGszo5KSC0RkE/aVnR6 YyZqLO2/RyeC2AC4la9dr/KQjBlNvTPGlfp8S9u/OFhRFv/cDhj/2VYkNpv0qTnO rA9Mi6jY/fjHqudCIgurMNAHPG/67cr+rdHPBXUIxvrru0NJBhcGE+NZzb6UZBfj MDfppXoylE3Ma5Zhpdp5SAg7TC/jHKYxFHb9rXGFkrrL1lmvaRcDiUwA4yhsjgj5 K8OQnxFKGKNfBirZP87a6/hqM5QY9yxG -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:10 2025 by rpki-client