$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: 5b0I87Ljuk8sM2GdyQ7ai5OIaTaeYchUmeyZOmWw7JE= Subject key identifier: C5:96:01:FC:B0:F5:15:7C:91:B5:93:FA:55:4D:78:68:3D:67:3E:F9 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0C5C Signing time: Fri 04 Jul 2025 18:42:05 +0000 Manifest this update: Fri 04 Jul 2025 18:42:05 +0000 Manifest next update: Fri 11 Jul 2025 18:42:05 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: qXeEfOU2kHmcwg7ywkBa5x0Db0nWCkZ7ri/ap/dCaQQ=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2GXsJ3lmpDTCyJ0+6RHbUPHuhr06/ng834HAohqlZ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Jul 4 18:42:05 2025 GMT Not After : Jul 11 18:42:05 2025 GMT Subject: CN=6868207d-e49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:bc:90:79:0c:10:21:55:d0:3e:8c:78:e9: 5a:bc:f6:ac:37:27:4a:a0:43:04:13:f7:55:00:cd: 9d:79:92:35:c7:65:2b:ea:90:a2:0d:39:6a:8c:b4: 6d:e3:80:ad:6d:aa:b1:33:6a:3c:25:2f:85:a6:9b: 55:82:3f:b4:f3:0f:bb:d8:15:27:36:34:18:4c:20: df:90:3e:63:82:82:d7:c1:fe:17:c4:37:71:04:77: 3a:e1:06:dd:82:b3:08:48:56:63:f0:7f:fa:0d:76: 22:f8:6c:0d:51:7a:23:fb:b5:31:59:05:f8:61:12: 2c:fd:e5:5a:37:be:58:09:c1:c5:86:d0:32:0a:2c: ed:3c:0c:99:df:b8:7d:9f:fa:57:f0:5b:04:16:f4: dc:6f:f6:3f:5d:be:e7:99:a4:da:01:d8:e6:ed:d2: 7e:cc:18:00:5d:37:46:f1:c7:4d:97:67:6f:43:b9: b2:5e:93:ef:ee:b4:d6:0e:de:ba:79:40:a7:83:90: 7d:b5:4c:ac:b8:8e:92:f9:62:bb:7b:ed:64:63:50: e4:30:ee:83:8d:4a:64:cd:55:ca:13:51:4c:55:ca: 8c:30:d2:8a:e7:21:c6:b8:2b:ee:c2:5a:6c:69:18: 30:57:e4:93:f0:33:b6:69:2c:d6:9b:a5:eb:10:95: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:01:FC:B0:F5:15:7C:91:B5:93:FA:55:4D:78:68:3D:67:3E:F9 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f4:84:e8:02:0f:c2:d7:e7:2a:c7:2f:78:c1:8d:b5:3a:e5: d4:a0:d7:24:de:50:a4:63:96:cb:6b:15:b3:63:80:57:db:a8: ea:52:2a:b1:e1:08:93:f0:f9:e3:62:4b:65:bd:ac:ec:dc:e8: ed:97:78:39:3c:40:f3:70:82:69:a5:a0:77:1b:9e:2e:f3:8d: 36:7c:f8:a1:7b:bb:97:66:b2:06:ce:f0:35:99:4c:4c:78:b1: 25:44:97:7b:1b:7a:c3:5b:5f:53:b0:e5:10:9f:7a:cc:68:66: 4c:e2:3e:7b:57:83:62:49:55:f4:27:d9:65:f0:74:4e:68:14: fd:02:1a:5e:d8:5b:57:c3:ac:e6:76:ac:c8:b3:e9:60:6b:c3: b9:de:e3:5b:12:6b:bf:aa:00:64:0b:8b:13:a9:cb:55:57:6d: 6b:2f:bb:60:1e:c8:25:f1:5c:75:2d:77:95:ca:fb:04:aa:5a: dc:9a:32:f8:3d:fb:df:a8:e4:1d:ae:2f:c6:ee:49:a8:ea:8f: cd:c1:2b:2b:b8:33:fa:90:3c:90:95:09:a3:44:5a:fc:c5:4f: 5f:e8:8d:31:3a:a7:78:d7:d5:5a:f4:b3:a5:47:88:77:6c:61: cd:3c:2f:57:a1:e8:09:1e:16:35:5b:49:69:c7:ab:f5:ca:cc: b4:64:d3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUwNzA0MTg0MjA1WhcNMjUwNzExMTg0MjA1WjAYMRYwFAYD VQQDEw02ODY4MjA3ZC1lNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LK8kHkMECFV0D6MeOlavPasNydKoEMEE/dVAM2deZI1x2Ur6pCiDTlqjLRt 44CtbaqxM2o8JS+FpptVgj+08w+72BUnNjQYTCDfkD5jgoLXwf4XxDdxBHc64Qbd grMISFZj8H/6DXYi+GwNUXoj+7UxWQX4YRIs/eVaN75YCcHFhtAyCiztPAyZ37h9 n/pX8FsEFvTcb/Y/Xb7nmaTaAdjm7dJ+zBgAXTdG8cdNl2dvQ7myXpPv7rTWDt66 eUCng5B9tUysuI6S+WK7e+1kY1DkMO6DjUpkzVXKE1FMVcqMMNKK5yHGuCvuwlps aRgwV+ST8DO2aSzWm6XrEJVixwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWWAfyw 9RV8kbWT+lVNeGg9Zz75MB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA79IToAg/C1+cqxy94wY21OuXUoNck3lCkY5bLaxWzY4BX26jqUiqx 4QiT8PnjYktlvazs3Ojtl3g5PEDzcIJppaB3G54u8402fPihe7uXZrIGzvA1mUxM eLElRJd7G3rDW19TsOUQn3rMaGZM4j57V4NiSVX0J9ll8HROaBT9Ahpe2FtXw6zm dqzIs+lga8O53uNbEmu/qgBkC4sTqctVV21rL7tgHsgl8Vx1LXeVyvsEqlrcmjL4 PfvfqOQdri/G7kmo6o/NwSsruDP6kDyQlQmjRFr8xU9f6I0xOqd419Va9LOlR4h3 bGHNPC9XoegJHhY1W0lpx6v1ysy0ZNMt -----END CERTIFICATE-----Generated at Sun Jul 6 04:10:26 2025 by rpki-client