$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: rpsBhXzIBeNjXwfeVOv2fNSxBvMsuMKX7NUTQLvr79E= Subject key identifier: 4D:E6:46:2B:9B:9A:B9:4A:1C:08:79:63:6C:35:EE:61:82:D0:68:AD Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34D6 Signing time: Mon 30 Jun 2025 14:17:28 +0000 Manifest this update: Mon 30 Jun 2025 14:17:28 +0000 Manifest next update: Mon 07 Jul 2025 14:17:28 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: z80ER5CeIBzKoOh8QQbzXlRMo1Oq3zGGoPKkWcf0gSY=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Jun 30 14:17:28 2025 GMT Not After : Jul 7 14:17:28 2025 GMT Subject: CN=68629c78-b7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:ff:7f:8b:03:e0:4f:3e:82:ee:6b:fb:d5: b5:34:bc:94:cd:0c:5f:a8:80:50:20:e7:66:aa:21: 45:fa:3e:1d:82:f1:42:0a:e5:6c:ae:ae:73:21:b0: 15:90:4a:ff:49:f2:5f:b9:b8:f2:ef:6b:9f:b5:0f: 2f:47:a1:70:be:9a:b7:a2:3a:a8:3d:2e:0f:7a:d1: 28:53:05:ac:37:b4:9f:fa:fe:ff:26:d8:f1:87:fc: 0d:3d:66:30:d5:2a:1a:5e:a2:aa:3e:33:f9:09:db: 2d:d1:9c:34:1e:ee:8d:84:89:65:a6:64:c0:60:04: f6:f5:ad:bb:b7:78:70:b2:db:be:f6:ca:29:6c:4e: 11:bd:46:42:d0:a6:64:3c:2e:db:b1:54:0f:3d:64: 82:3c:68:f9:fd:94:6e:a0:e5:ef:72:4b:ae:99:42: 0f:80:df:93:db:31:4c:8e:b1:77:a5:8d:68:0b:e8: 69:ba:30:ac:47:6b:66:be:3e:45:29:b9:a4:cb:94: 7c:0b:31:83:23:fa:da:fe:c7:9f:84:fb:db:d1:8a: 26:19:01:22:57:44:4c:44:0c:04:19:15:38:b6:3a: 37:85:4b:c8:4a:b4:b6:a8:41:b7:09:02:f8:31:0c: 3b:d2:52:e7:83:14:47:c4:80:e2:63:c8:e7:1c:3f: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E6:46:2B:9B:9A:B9:4A:1C:08:79:63:6C:35:EE:61:82:D0:68:AD X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c1:c1:d6:7e:e6:bb:dc:de:b0:e6:12:c7:76:0c:5c:85:4a: ee:d9:92:48:7f:f4:43:53:28:10:1d:87:c2:a9:c8:cc:41:81: a0:cb:0c:6b:f3:bf:9d:c4:87:9f:0e:8f:07:51:b8:4b:ba:18: fd:94:6d:b3:b5:e6:19:27:d0:95:9c:66:3b:18:5b:25:21:43: 40:93:42:22:20:43:70:63:07:fe:ff:e8:f7:f4:7f:5e:ac:e9: 36:ef:b4:5d:37:e2:49:15:49:0c:11:c1:82:e0:1c:d9:d5:cb: d8:98:47:24:c5:ec:71:9e:12:47:20:b0:1a:69:73:47:6f:ed: 54:63:c3:e8:50:cf:8d:bc:6e:11:e7:26:62:1a:14:3b:6d:17: fd:88:a7:9e:c9:03:8a:20:0d:ce:5e:c7:6c:9f:e6:92:b7:01: f2:13:92:a4:4c:9f:4e:c9:27:b2:8b:8e:ee:75:8b:40:02:e3: c7:61:86:6f:00:22:d9:5b:f2:59:35:ed:fd:44:95:e5:14:3d: 0c:ae:54:63:24:a0:c9:90:a0:da:d6:0b:63:77:e9:b8:5e:9d: c8:44:1d:65:76:57:61:e3:fc:52:d1:6c:7c:3f:3a:1b:52:c7: 40:aa:89:12:ab:e3:59:ee:98:2f:b4:45:6a:ad:e2:56:a4:1e: 48:06:d2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwNjMwMTQxNzI4WhcNMjUwNzA3MTQxNzI4WjAYMRYwFAYD VQQDEw02ODYyOWM3OC1iN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEj/f4sD4E8+gu5r+9W1NLyUzQxfqIBQIOdmqiFF+j4dgvFCCuVsrq5zIbAV kEr/SfJfubjy72uftQ8vR6Fwvpq3ojqoPS4PetEoUwWsN7Sf+v7/Jtjxh/wNPWYw 1SoaXqKqPjP5Cdst0Zw0Hu6NhIllpmTAYAT29a27t3hwstu+9sopbE4RvUZC0KZk PC7bsVQPPWSCPGj5/ZRuoOXvckuumUIPgN+T2zFMjrF3pY1oC+hpujCsR2tmvj5F Kbmky5R8CzGDI/ra/sefhPvb0YomGQEiV0RMRAwEGRU4tjo3hUvISrS2qEG3CQL4 MQw70lLngxRHxIDiY8jnHD+UYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3mRiub mrlKHAh5Y2w17mGC0GitMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlwcHWfua73N6w5hLHdgxchUru2ZJIf/RDUygQHYfCqcjMQYGgywxr 87+dxIefDo8HUbhLuhj9lG2zteYZJ9CVnGY7GFslIUNAk0IiIENwYwf+/+j39H9e rOk277RdN+JJFUkMEcGC4BzZ1cvYmEckxexxnhJHILAaaXNHb+1UY8PoUM+NvG4R 5yZiGhQ7bRf9iKeeyQOKIA3OXsdsn+aStwHyE5KkTJ9OySeyi47udYtAAuPHYYZv ACLZW/JZNe39RJXlFD0MrlRjJKDJkKDa1gtjd+m4Xp3IRB1ldldh4/xS0Wx8Pzob UsdAqokSq+NZ7pgvtEVqreJWpB5IBtJe -----END CERTIFICATE-----Generated at Tue Jul 1 05:21:50 2025 by rpki-client