$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: Kmll8BcDhetR4OyaPw/WdEtVhx5QpxVEHZ2Z4QfFyio= Subject key identifier: 5E:EF:DA:C2:38:9D:2F:F6:D6:31:37:C3:64:C9:DC:3A:AD:CC:D5:D8 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D3E Signing time: Fri 22 Aug 2025 18:08:08 +0000 Manifest this update: Fri 22 Aug 2025 18:08:07 +0000 Manifest next update: Fri 29 Aug 2025 18:08:07 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: NvwLcsNbzmzSg0kaKQGkZm6g93o5c+lPe1JNXMos3hw=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Aug 22 18:08:07 2025 GMT Not After : Aug 29 18:08:07 2025 GMT Subject: CN=68a8b208-d301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:3d:01:bf:31:73:e3:5d:94:73:55:15:dc: 58:a4:08:04:f7:8f:30:39:bd:e8:ac:f2:d7:4b:13: 0a:b9:33:ce:43:60:9d:3c:05:ab:04:4a:f3:83:6d: dc:7b:71:b8:86:1c:3b:4d:63:48:80:ba:f5:ef:e9: 58:64:73:fb:e8:ec:68:8b:3e:6a:90:aa:8a:e0:ac: c7:fc:23:d5:d4:fe:6e:98:f1:57:b1:72:6c:14:ff: a4:dc:0f:96:13:b4:2d:a9:f8:06:67:6e:ee:f9:af: 64:09:60:f0:19:29:69:d1:12:9b:fd:ab:ea:73:da: 01:ea:72:bb:6e:4c:b1:29:46:7c:17:37:b0:a8:29: b5:73:92:1a:09:1e:06:00:94:99:67:0c:16:7e:4e: 96:19:21:a9:c6:44:de:7b:06:42:e5:30:f8:45:54: 20:f3:28:86:4b:1d:e7:f5:8a:85:0b:99:2f:1c:c2: 33:26:ca:5a:0d:1e:98:13:c7:45:84:a5:c4:e1:e2: df:10:4e:45:6a:52:1d:1e:5f:a7:b8:b6:89:9f:6a: 4f:09:79:eb:7f:3f:16:78:d8:2e:3f:4b:09:ff:97: b5:71:06:ec:d0:23:c5:f0:f9:09:2d:a4:d6:e5:f7: 2b:c3:8a:0b:7c:02:f7:6b:3d:9a:3c:15:9e:46:77: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:DA:C2:38:9D:2F:F6:D6:31:37:C3:64:C9:DC:3A:AD:CC:D5:D8 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:68:dd:9f:a4:8a:c1:e9:e8:ee:34:6c:31:49:09:8f:1c:8f: 6f:19:53:f2:86:45:c4:29:ca:0a:e7:ae:a2:95:17:56:e0:08: f0:2a:bd:38:41:fa:82:84:97:e9:04:0b:ce:4a:d8:be:24:7c: ff:66:2d:44:81:9e:d9:de:36:b1:a7:a8:30:0d:8d:46:69:8b: 44:70:89:45:0f:b2:bc:12:69:91:1e:f0:d6:a1:41:50:6e:04: 80:cb:9b:72:49:18:b9:19:bd:69:9d:8a:84:2d:9e:30:b3:56: cf:d4:53:01:18:c5:d9:fa:17:6b:ac:80:80:28:de:26:17:e8: 4e:f1:57:fd:52:51:48:e6:79:d4:fe:6e:57:2b:15:bb:b5:f8: 96:91:7d:5a:9a:e5:7e:79:73:08:70:bb:58:f1:f6:f8:c2:8b: 95:6c:02:2d:80:8e:28:3a:23:7c:26:69:20:27:3a:64:05:ee: 24:8b:72:ab:a9:02:70:e3:26:66:82:50:57:16:37:a2:5e:0f: 82:54:f5:f4:a1:ed:be:07:e6:64:5b:19:ce:98:fc:34:16:ed: 26:8a:70:a3:6e:8e:6a:94:3b:9b:06:35:33:29:21:83:16:51: d5:90:45:24:b0:fb:c1:65:25:6c:f3:00:0d:1c:c4:54:6f:41: aa:50:49:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwODIyMTgwODA3WhcNMjUwODI5MTgwODA3WjAYMRYwFAYD VQQDEw02OGE4YjIwOC1kMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvg9Ab8xc+NdlHNVFdxYpAgE948wOb3orPLXSxMKuTPOQ2CdPAWrBErzg23c e3G4hhw7TWNIgLr17+lYZHP76Oxoiz5qkKqK4KzH/CPV1P5umPFXsXJsFP+k3A+W E7QtqfgGZ27u+a9kCWDwGSlp0RKb/avqc9oB6nK7bkyxKUZ8FzewqCm1c5IaCR4G AJSZZwwWfk6WGSGpxkTeewZC5TD4RVQg8yiGSx3n9YqFC5kvHMIzJspaDR6YE8dF hKXE4eLfEE5FalIdHl+nuLaJn2pPCXnrfz8WeNguP0sJ/5e1cQbs0CPF8PkJLaTW 5fcrw4oLfAL3az2aPBWeRndKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7v2sI4 nS/21jE3w2TJ3DqtzNXYMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoaN2fpIrB6ejuNGwxSQmPHI9vGVPyhkXEKcoK566ilRdW4AjwKr04 QfqChJfpBAvOSti+JHz/Zi1EgZ7Z3jaxp6gwDY1GaYtEcIlFD7K8EmmRHvDWoUFQ bgSAy5tySRi5Gb1pnYqELZ4ws1bP1FMBGMXZ+hdrrICAKN4mF+hO8Vf9UlFI5nnU /m5XKxW7tfiWkX1amuV+eXMIcLtY8fb4wouVbAItgI4oOiN8JmkgJzpkBe4ki3Kr qQJw4yZmglBXFjeiXg+CVPX0oe2+B+ZkWxnOmPw0Fu0minCjbo5qlDubBjUzKSGD FlHVkEUksPvBZSVs8wANHMRUb0GqUEkX -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:49 2025 by rpki-client