$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: FXOttWmTSHaRPWOyVWixYUaeS9tlhR++zxKzHe0MbRk= Subject key identifier: 6C:D8:0F:17:61:57:F8:82:BA:B2:92:C5:2C:82:F2:FF:5C:54:6E:E2 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 144A Signing time: Fri 22 Aug 2025 17:02:56 +0000 Manifest this update: Fri 22 Aug 2025 17:02:55 +0000 Manifest next update: Fri 29 Aug 2025 17:02:55 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: 0kyhgzUqEPebp8ukHbqY+GJL6zyLilypVGbsC8hFzFc=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5225 (0x1469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Aug 22 17:02:55 2025 GMT Not After : Aug 29 17:02:55 2025 GMT Subject: CN=68a8a2c0-83a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:44:3f:b8:b8:13:ab:e3:dd:e6:c7:d0:e6: 15:10:1e:f0:09:cb:4e:f4:28:73:bd:eb:b7:15:e6: 5f:3a:54:33:9f:ff:0a:b9:fc:9c:81:77:35:9d:6b: 76:b3:a7:a8:c5:a2:8a:95:d1:d1:6d:4f:10:66:ad: 69:c6:d8:b2:96:3f:56:ff:17:93:7a:48:c7:63:83: 68:06:60:48:1d:9d:c6:2a:d9:af:6c:93:bd:a7:2b: 01:ca:3f:cf:3d:22:64:0d:e9:f6:33:c0:39:d8:d0: 7e:a0:f6:6f:e5:4a:41:b0:03:6b:c8:22:af:0d:62: 0f:5d:48:31:c9:18:13:59:e7:13:19:75:63:b0:9f: 6a:82:df:cb:a2:c8:13:c7:d7:cb:07:45:8c:93:c3: fb:94:15:04:20:f0:5e:73:e4:24:e2:c6:d0:42:75: 41:34:9e:ac:31:10:27:ff:26:0e:8c:94:a2:1e:42: 28:3c:3e:0d:5a:16:af:04:07:d1:c5:0c:6b:99:43: dd:53:46:e7:21:c2:89:fa:e6:36:02:9b:fb:39:99: bd:43:0d:cb:15:69:d6:45:43:b9:61:84:0b:05:4d: f9:dd:66:55:2d:3a:1e:82:be:b1:18:0b:d2:21:98: c8:cd:e7:db:ad:e4:e4:27:f3:41:c7:82:87:ab:ce: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D8:0F:17:61:57:F8:82:BA:B2:92:C5:2C:82:F2:FF:5C:54:6E:E2 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:66:df:2b:37:ab:90:e2:ce:0a:5c:8e:c3:e3:99:6a:ec:7b: ff:29:b3:fd:fc:c6:37:9e:57:57:83:3c:b6:20:49:1d:7a:c7: a1:d1:c0:e4:4b:c0:c1:fc:9f:37:4b:de:26:55:98:80:3d:22: f9:49:1f:3b:4c:69:68:f9:02:9e:03:49:4b:91:79:10:44:fb: 08:f0:8c:62:9d:aa:f5:57:6c:8d:f9:9f:ff:ae:e5:30:a9:c6: 84:f2:56:38:8e:2f:5e:ed:b8:09:d2:59:91:9c:eb:dd:d1:b7: 30:9f:ea:35:d7:76:ce:89:c4:09:55:cb:39:0f:67:2c:8e:05: a8:a2:b8:bd:0a:92:6c:83:02:a1:55:47:f4:67:64:b7:ea:a9: ec:6b:4c:81:df:41:48:7b:17:88:f8:ef:b2:c4:c5:93:96:c2: af:f2:6a:1d:7b:d6:b4:0d:35:96:3e:c4:39:66:70:99:38:f5: d0:8d:b1:6f:6e:ed:5a:ea:8e:00:87:96:06:22:56:4f:05:aa: fc:95:ce:59:c8:1d:cc:ea:0c:e2:fe:80:be:34:43:1b:98:82: 00:3a:4f:8c:b2:ca:13:30:c3:b9:a3:88:02:8c:77:48:1e:54: dd:8f:c6:6b:dc:b9:29:bc:c1:76:73:48:94:e2:c2:e0:de:30: e8:e7:26:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwODIyMTcwMjU1WhcNMjUwODI5MTcwMjU1WjAYMRYwFAYD VQQDEw02OGE4YTJjMC04M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvBEP7i4E6vj3ebH0OYVEB7wCctO9Chzveu3FeZfOlQzn/8KufycgXc1nWt2 s6eoxaKKldHRbU8QZq1pxtiylj9W/xeTekjHY4NoBmBIHZ3GKtmvbJO9pysByj/P PSJkDen2M8A52NB+oPZv5UpBsANryCKvDWIPXUgxyRgTWecTGXVjsJ9qgt/LosgT x9fLB0WMk8P7lBUEIPBec+Qk4sbQQnVBNJ6sMRAn/yYOjJSiHkIoPD4NWhavBAfR xQxrmUPdU0bnIcKJ+uY2Apv7OZm9Qw3LFWnWRUO5YYQLBU353WZVLToegr6xGAvS IZjIzefbreTkJ/NBx4KHq86jbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzYDxdh V/iCurKSxSyC8v9cVG7iMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpZt8rN6uQ4s4KXI7D45lq7Hv/KbP9/MY3nldXgzy2IEkdeseh0cDk S8DB/J83S94mVZiAPSL5SR87TGlo+QKeA0lLkXkQRPsI8Ixinar1V2yN+Z//ruUw qcaE8lY4ji9e7bgJ0lmRnOvd0bcwn+o113bOicQJVcs5D2csjgWoori9CpJsgwKh VUf0Z2S36qnsa0yB30FIexeI+O+yxMWTlsKv8mode9a0DTWWPsQ5ZnCZOPXQjbFv bu1a6o4Ah5YGIlZPBar8lc5ZyB3M6gzi/oC+NEMbmIIAOk+MssoTMMO5o4gCjHdI HlTdj8Zr3LkpvMF2c0iU4sLg3jDo5yYJ -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:57 2025 by rpki-client