$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: M044L3VGORQg32a66nId/BfS4fWqysGc4m+YVlGijKI= Subject key identifier: 8A:E2:1C:B2:CC:EE:22:57:D7:84:31:19:BC:0E:7C:A7:0A:1D:CB:D6 Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: 85 Signing time: Thu 03 Jul 2025 05:20:11 +0000 Manifest this update: Thu 03 Jul 2025 05:20:11 +0000 Manifest next update: Thu 10 Jul 2025 05:20:11 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: FrhmXR64W2Ho8N4I7TwQrqD0OSvzQImLRHSxVhKC2VA=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Jul 3 05:20:11 2025 GMT Not After : Jul 10 05:20:11 2025 GMT Subject: CN=6866130b-29c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:f7:09:8b:1d:18:23:ad:8f:f3:9a:ea:88: ec:ee:58:62:72:79:77:6e:c9:59:7a:e2:39:61:4e: 86:54:f7:7b:b0:34:39:f3:66:2d:22:bc:66:58:52: cd:7a:02:81:e1:20:c7:22:f7:20:52:5a:31:6c:e4: 5d:e6:06:59:84:45:ec:b6:85:f4:ea:1c:c9:15:dd: c4:e1:a4:28:22:6a:bd:d1:73:dc:5f:cb:94:2f:2f: a2:48:4b:e2:13:aa:a6:d3:a5:b9:99:74:3f:b0:7a: c6:35:ca:48:2e:54:f0:1c:25:e8:ce:da:3f:81:13: a9:01:b1:0c:df:1c:ae:cf:c4:75:2b:ad:87:04:78: cb:db:74:78:40:95:2f:f9:de:6b:9b:b4:44:62:64: f2:f2:e5:d3:7c:a2:c9:6c:31:cf:13:d3:01:aa:ca: 08:9f:ca:5b:f7:5e:0f:76:0c:19:e2:d2:d7:26:cc: 6b:0c:46:26:7d:0d:d0:d1:f3:f8:de:41:ae:28:3e: e2:b9:d6:87:f3:e3:60:e4:35:3d:20:26:6e:6b:74: 19:76:a9:96:a4:94:57:d9:ac:0d:97:c1:2d:a7:9b: f2:f3:66:57:94:9f:e5:ae:99:d2:62:b6:d2:03:06: 41:b0:5f:a2:fa:ef:2f:83:2b:75:72:36:d1:07:26: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:1C:B2:CC:EE:22:57:D7:84:31:19:BC:0E:7C:A7:0A:1D:CB:D6 X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c1:11:39:7f:bd:11:c1:d0:04:8f:ad:4f:07:20:2d:da:09: 1e:44:2f:05:21:ee:10:96:c8:72:77:df:f3:88:96:64:84:65: de:e8:58:dc:16:4f:84:bb:ef:5e:bc:a6:fd:11:42:65:d3:cb: 00:9e:1e:97:9f:cf:af:55:20:98:22:cf:0f:00:da:5c:bd:67: e8:42:2b:11:07:57:93:bc:1f:bc:6a:63:f4:19:96:c9:44:e7: 67:32:7d:72:90:8d:82:20:3a:e6:40:b4:c1:8c:3b:1a:01:35: 72:44:fb:16:e8:37:de:09:1a:c2:ab:17:dd:15:e1:fb:80:43: b1:ce:c5:58:d7:73:de:20:62:9a:d5:7b:e5:37:f6:fc:b6:99: 1e:71:c1:1f:23:0a:c1:b0:49:14:09:aa:6f:c0:e1:11:67:20: 34:10:b2:01:52:8f:6e:7f:aa:d2:e8:4e:96:a5:57:a8:2b:69: 19:1d:3d:9d:be:82:2e:ec:f1:4a:88:33:f6:6d:08:91:5e:d2: 79:83:37:fb:75:c5:04:3c:6a:58:b1:c3:af:98:38:19:86:23: 1c:3f:d1:6c:02:0a:32:ce:a9:07:8d:07:48:36:b0:5a:c2:c9: ff:e8:5b:82:a0:a4:d1:90:b7:9f:8b:29:ca:45:ce:d1:f0:ef: 92:e5:7c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5 Q0IyQUIxM0YwHhcNMjUwNzAzMDUyMDExWhcNMjUwNzEwMDUyMDExWjAYMRYwFAYD VQQDEw02ODY2MTMwYi0yOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFr3CYsdGCOtj/Oa6ojs7lhicnl3bslZeuI5YU6GVPd7sDQ582YtIrxmWFLN egKB4SDHIvcgUloxbORd5gZZhEXstoX06hzJFd3E4aQoImq90XPcX8uULy+iSEvi E6qm06W5mXQ/sHrGNcpILlTwHCXozto/gROpAbEM3xyuz8R1K62HBHjL23R4QJUv +d5rm7REYmTy8uXTfKLJbDHPE9MBqsoIn8pb914PdgwZ4tLXJsxrDEYmfQ3Q0fP4 3kGuKD7iudaH8+Ng5DU9ICZua3QZdqmWpJRX2awNl8Etp5vy82ZXlJ/lrpnSYrbS AwZBsF+i+u8vgyt1cjbRByaVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIriHLLM 7iJX14QxGbwOfKcKHcvWMB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93 bWt3V0dyX3QtSGVjc3FzVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAowRE5f70RwdAEj61PByAt2gkeRC8FIe4Qlshyd9/ziJZkhGXe6Fjc Fk+Eu+9evKb9EUJl08sAnh6Xn8+vVSCYIs8PANpcvWfoQisRB1eTvB+8amP0GZbJ ROdnMn1ykI2CIDrmQLTBjDsaATVyRPsW6DfeCRrCqxfdFeH7gEOxzsVY13PeIGKa 1XvlN/b8tpkeccEfIwrBsEkUCapvwOERZyA0ELIBUo9uf6rS6E6WpVeoK2kZHT2d voIu7PFKiDP2bQiRXtJ5gzf7dcUEPGpYscOvmDgZhiMcP9FsAgoyzqkHjQdINrBa wsn/6FuCoKTRkLefiynKRc7R8O+S5Xxn -----END CERTIFICATE-----Generated at Fri Jul 4 11:16:12 2025 by rpki-client