$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: 8j4nAUiM0kyU2Euho0UTGFgB/t7kHrxfe5yWLZktPGg= Subject key identifier: 6C:1F:D0:08:44:D5:3F:D2:FB:DC:7B:D0:3B:1D:FA:0A:49:59:A6:35 Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: A1 Signing time: Sat 23 Aug 2025 05:00:17 +0000 Manifest this update: Sat 23 Aug 2025 05:00:16 +0000 Manifest next update: Sat 30 Aug 2025 05:00:16 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: g+EoM1WeeKgamPhCNC2DUV/AHrykYVEtzkNqzBGthag=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Aug 23 05:00:16 2025 GMT Not After : Aug 30 05:00:16 2025 GMT Subject: CN=68a94ae0-94c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:0f:86:13:16:2d:4a:0c:cf:ec:ce:bf:98: f3:20:0a:90:b6:0b:e0:76:56:3d:b9:86:10:dc:f5: c3:2b:e7:4b:a2:d8:a3:bc:75:8d:71:a3:15:88:d8: 04:b4:27:e0:33:06:5f:77:a6:9f:3b:ec:8d:24:5f: 97:a3:47:8d:77:df:50:30:14:0d:32:9c:e6:bd:6c: 3a:66:02:45:63:f6:09:7f:99:2d:d3:87:36:2e:1e: 5b:82:e3:0b:5d:cc:ce:4c:b0:32:31:7d:a2:75:e8: 31:d3:48:69:ea:0f:b0:95:d7:39:21:f5:1d:ff:0e: 80:8c:d0:b3:0a:d1:42:19:ad:16:e8:6a:1b:d0:e6: 1b:18:03:2e:47:60:21:27:b2:25:33:54:a2:59:70: 30:f0:1e:0f:f2:72:bf:e6:9c:2a:e8:d0:cf:e5:a5: df:d3:3c:5d:de:d1:c9:f3:d3:1b:01:52:67:0a:19: 5c:d9:65:4e:28:8a:17:a4:75:4e:16:dd:91:d0:d9: c2:b7:69:e8:20:d3:9c:e0:31:f7:47:d2:81:14:ed: 50:78:fe:2c:c3:58:5b:65:16:94:09:6f:0b:81:c3: c3:ef:f7:44:6b:a4:07:59:97:16:c1:83:1a:a7:36: 7e:ee:bc:4d:93:c3:9e:d7:70:6f:58:a9:8e:fc:29: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1F:D0:08:44:D5:3F:D2:FB:DC:7B:D0:3B:1D:FA:0A:49:59:A6:35 X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:03:26:f3:c3:98:8c:ef:61:42:0a:b9:a6:00:a8:5d:2f:c9: e8:cf:81:02:cc:9e:f3:35:af:65:53:1a:4e:03:2e:4e:3e:2a: b6:9d:2c:97:3c:c3:90:11:72:74:b6:1c:17:37:32:74:8b:e3: 6b:7c:40:14:e5:19:6c:f9:68:9c:98:f4:66:18:7a:84:b3:4d: e9:a6:f7:e8:62:c0:35:ce:91:f5:dd:01:58:d4:e0:d1:ca:1c: 30:f2:91:57:a4:b1:73:53:5b:fe:95:99:72:4e:62:6b:16:13: 5b:d2:fc:62:c1:1a:5d:52:3e:7d:d9:a8:97:e4:d4:60:d8:26: b8:54:34:4c:2f:9f:46:8c:50:82:ca:79:ec:f1:4b:90:4c:68: 17:3a:2c:b5:cc:7f:d5:81:49:98:84:26:6a:b6:d8:56:06:82: b5:e4:c6:a5:22:a5:91:1f:6a:16:74:46:b8:a8:a1:75:91:65: 78:f5:3e:cd:24:88:9c:71:24:af:00:35:e1:aa:01:b7:98:63: e3:29:f6:6c:37:30:ef:7a:58:26:ce:3c:ec:e2:87:15:c9:16: 5b:f3:18:2b:a8:06:7c:1f:95:29:34:01:43:4e:5f:56:a1:5c: 62:27:64:cb:b0:89:10:43:ac:e8:05:46:d8:ea:fb:e8:a9:5d: 9c:c3:b9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5 Q0IyQUIxM0YwHhcNMjUwODIzMDUwMDE2WhcNMjUwODMwMDUwMDE2WjAYMRYwFAYD VQQDEw02OGE5NGFlMC05NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0YPhhMWLUoMz+zOv5jzIAqQtgvgdlY9uYYQ3PXDK+dLotijvHWNcaMViNgE tCfgMwZfd6afO+yNJF+Xo0eNd99QMBQNMpzmvWw6ZgJFY/YJf5kt04c2Lh5bguML XczOTLAyMX2idegx00hp6g+wldc5IfUd/w6AjNCzCtFCGa0W6Gob0OYbGAMuR2Ah J7IlM1SiWXAw8B4P8nK/5pwq6NDP5aXf0zxd3tHJ89MbAVJnChlc2WVOKIoXpHVO Ft2R0NnCt2noINOc4DH3R9KBFO1QeP4sw1hbZRaUCW8LgcPD7/dEa6QHWZcWwYMa pzZ+7rxNk8Oe13BvWKmO/ClQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwf0AhE 1T/S+9x70Dsd+gpJWaY1MB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93 bWt3V0dyX3QtSGVjc3FzVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAybzw5iM72FCCrmmAKhdL8noz4ECzJ7zNa9lUxpOAy5OPiq2nSyX PMOQEXJ0thwXNzJ0i+NrfEAU5Rls+WicmPRmGHqEs03ppvfoYsA1zpH13QFY1ODR yhww8pFXpLFzU1v+lZlyTmJrFhNb0vxiwRpdUj592aiX5NRg2Ca4VDRML59GjFCC ynns8UuQTGgXOiy1zH/VgUmYhCZqtthWBoK15MalIqWRH2oWdEa4qKF1kWV49T7N JIiccSSvADXhqgG3mGPjKfZsNzDvelgmzjzs4ocVyRZb8xgrqAZ8H5UpNAFDTl9W oVxiJ2TLsIkQQ6zoBUbY6vvoqV2cw7mV -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:48 2025 by rpki-client