$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: LS7oPpGZGCY9RGFkN4COjxoJfVuAuifhJW5EEQrRD1M= Subject key identifier: 9A:37:C5:06:0D:09:66:64:BB:FA:F3:33:15:4D:D3:83:1D:43:83:06 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34F1 Signing time: Fri 22 Aug 2025 14:17:40 +0000 Manifest this update: Fri 22 Aug 2025 14:17:39 +0000 Manifest next update: Fri 29 Aug 2025 14:17:39 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: dCQquDTJIyDbmo/8f6bSJCY4mmb+ZOmBcm/Ofcxk8nE=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13604 (0x3524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Aug 22 14:17:39 2025 GMT Not After : Aug 29 14:17:39 2025 GMT Subject: CN=68a87c04-fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:1c:e6:d6:5a:cb:7c:e3:71:64:b7:bf:73: 73:16:6e:04:b4:54:50:64:12:47:88:b9:25:f5:20: a8:18:53:90:c9:a3:f2:db:91:08:fc:8e:ef:98:38: 87:eb:31:7b:8e:a2:e1:a8:87:90:a6:e4:84:07:ae: 7a:28:ee:b2:12:2d:80:23:7b:98:85:6c:74:c9:21: 29:34:ec:be:b0:d5:f7:3f:0b:db:86:b0:cf:44:1b: 23:70:b0:0d:14:aa:9a:5c:21:37:aa:2e:fa:fb:d4: a7:50:a0:69:0f:97:b5:80:c6:45:ee:fc:3c:5d:b2: a0:16:3c:06:27:e4:bf:a0:18:2f:26:81:01:ff:8d: a6:6a:16:8e:41:11:dc:a3:b3:20:8f:17:f8:65:fd: 1b:b5:a5:a4:4c:3a:40:3b:b6:9d:b6:56:dc:72:85: 3a:d6:98:20:61:b7:58:ec:8d:34:1e:79:70:9e:6f: f0:2c:46:d2:80:42:2a:aa:96:dd:1f:02:d0:8a:71: ad:1b:0d:ff:4a:60:3f:79:d2:69:39:76:88:ba:82: ec:df:2d:6d:e1:65:28:fa:e8:cf:74:cb:eb:af:9c: 33:36:2b:1a:b3:76:77:65:0f:53:75:67:fd:c5:6f: eb:44:fb:8d:7d:57:03:98:59:c5:fd:ac:8d:3d:67: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:C5:06:0D:09:66:64:BB:FA:F3:33:15:4D:D3:83:1D:43:83:06 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d5:79:28:ea:22:6b:12:0f:eb:26:12:51:44:ee:85:be:0b: 9d:40:6b:11:65:b9:62:df:9f:d3:e6:e1:62:ac:d6:e2:b5:ec: 50:82:f9:b8:6d:39:65:c0:c2:f6:87:3e:cd:9b:c1:86:cc:d2: d5:63:d0:89:92:4b:2e:2b:3d:3d:fb:97:18:52:cc:97:3f:b3: 3f:02:34:5c:2d:40:18:5c:a2:2c:6d:21:f9:98:d3:8a:01:40: 88:ed:56:50:35:0f:1a:f3:1f:72:be:fd:55:20:03:41:35:d1: 10:40:9c:ee:c0:6e:1e:c2:c6:41:f4:fd:bb:15:8e:10:e3:16: 0c:b7:ac:27:e6:31:33:73:46:af:4c:b2:de:95:65:71:7b:69: 7b:7f:b6:3e:6b:f3:8b:2b:fb:4d:c4:51:1b:60:aa:84:52:d8: 6d:f3:13:d8:e4:fd:99:66:b0:c1:ea:67:bb:71:23:b4:d4:2e: f6:91:af:c3:85:42:a7:bc:2f:e9:0f:a7:55:ec:fb:7c:3e:51: f6:af:c3:80:82:7d:e0:f4:6c:5a:2b:a6:4f:87:d3:d0:c2:35: bf:ce:2b:1b:a8:39:24:7f:56:01:17:f8:9e:a0:37:3e:d2:92: f9:e7:8f:42:ef:5d:25:9e:74:57:9c:22:73:cb:35:da:c1:af: 0d:cb:b4:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwODIyMTQxNzM5WhcNMjUwODI5MTQxNzM5WjAYMRYwFAYD VQQDEw02OGE4N2MwNC1mYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUIc5tZay3zjcWS3v3NzFm4EtFRQZBJHiLkl9SCoGFOQyaPy25EI/I7vmDiH 6zF7jqLhqIeQpuSEB656KO6yEi2AI3uYhWx0ySEpNOy+sNX3PwvbhrDPRBsjcLAN FKqaXCE3qi76+9SnUKBpD5e1gMZF7vw8XbKgFjwGJ+S/oBgvJoEB/42mahaOQRHc o7Mgjxf4Zf0btaWkTDpAO7adtlbccoU61pggYbdY7I00Hnlwnm/wLEbSgEIqqpbd HwLQinGtGw3/SmA/edJpOXaIuoLs3y1t4WUo+ujPdMvrr5wzNisas3Z3ZQ9TdWf9 xW/rRPuNfVcDmFnF/ayNPWd3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo3xQYN CWZku/rzMxVN04MdQ4MGMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf1Xko6iJrEg/rJhJRRO6FvgudQGsRZbli35/T5uFirNbitexQgvm4 bTllwML2hz7Nm8GGzNLVY9CJkksuKz09+5cYUsyXP7M/AjRcLUAYXKIsbSH5mNOK AUCI7VZQNQ8a8x9yvv1VIANBNdEQQJzuwG4ewsZB9P27FY4Q4xYMt6wn5jEzc0av TLLelWVxe2l7f7Y+a/OLK/tNxFEbYKqEUtht8xPY5P2ZZrDB6me7cSO01C72ka/D hUKnvC/pD6dV7Pt8PlH2r8OAgn3g9GxaK6ZPh9PQwjW/zisbqDkkf1YBF/ieoDc+ 0pL5549C710lnnRXnCJzyzXawa8Ny7RT -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:01 2025 by rpki-client