$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: ExW+XSseDIwvm5p80GKd/Blr+r/NM0Vp7kgfmFz5PN4= Subject key identifier: 69:81:30:27:12:98:08:65:84:BC:A7:45:53:25:FD:4A:D7:D5:73:FB Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 0254 Signing time: Sat 23 Aug 2025 02:02:55 +0000 Manifest this update: Sat 23 Aug 2025 02:02:54 +0000 Manifest next update: Sat 30 Aug 2025 02:02:54 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: BPM2E5s3Z8KNld3JzCiFUr1eZ4gxlF57sB2p1XCblAM=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: XW5eQLHT9pjam4DydX+MPOf7MxBb8MiFoha5U/4pDCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Aug 23 02:02:54 2025 GMT Not After : Aug 30 02:02:54 2025 GMT Subject: CN=68a9214e-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:98:dd:8b:a7:87:95:cf:98:3e:a1:0b:6f: 5a:11:34:b2:9a:1d:e9:e9:44:e3:24:f1:38:85:47: b5:46:b5:e8:72:04:53:30:37:0d:d1:45:99:d3:23: 4a:95:f8:0c:48:0c:4b:64:7d:1f:d7:3e:f9:b5:4d: 24:b3:b1:5e:87:27:95:8a:3c:f0:8b:ae:2f:f6:36: 96:c2:9f:94:d0:61:a5:be:97:76:bd:8c:9c:83:5a: 79:0d:22:c3:87:94:6b:96:1d:1f:89:ce:d2:3d:ab: 65:46:33:98:e6:c7:1a:22:36:12:47:06:65:3b:aa: ba:5b:ef:3d:e6:35:58:06:49:31:b5:59:43:1d:85: 3f:a2:a1:5f:9d:12:d8:21:e9:b2:80:2c:58:2f:48: 93:55:40:db:b7:dc:0f:08:8b:1b:77:b6:6a:fa:2f: 35:55:e9:9f:a8:a9:7c:8f:ee:1f:4c:84:56:9a:8b: 2c:eb:24:4b:81:d2:d6:ef:2e:ef:9a:a0:9c:f0:7f: 5b:aa:19:98:94:53:3b:d5:3c:9c:f7:7a:8c:20:a3: 6d:bf:e2:f1:4b:50:a6:c3:d6:5d:36:9b:71:79:cf: 6d:e0:5e:a6:b0:99:b7:a6:f9:e6:4c:44:dc:7d:1d: c7:d2:cc:4c:94:ed:8c:02:07:da:08:85:e5:d9:d0: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:30:27:12:98:08:65:84:BC:A7:45:53:25:FD:4A:D7:D5:73:FB X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c4:7f:4f:8d:6e:23:e7:26:e2:ea:c0:d4:ca:35:ce:1d:96: c7:56:6c:11:1a:01:dc:87:b1:d3:75:3c:3d:d5:86:67:71:87: 31:6f:e1:2b:8f:a1:63:3b:1a:8f:07:97:40:88:62:bf:4f:e6: ab:f7:bf:6d:3e:2a:46:3c:97:b2:14:ea:75:98:ee:75:e4:b2: 9c:8a:64:7a:7a:b5:c0:6a:75:cb:62:33:8a:0e:9b:f0:ff:31: d5:0e:2e:50:c4:d0:f6:fa:d4:83:cf:2c:84:25:98:a1:65:e3: 45:b2:81:3a:e9:f8:15:38:a1:5b:0a:ea:c5:16:79:94:7e:97: 25:b1:be:85:39:13:c2:0d:a5:5d:48:82:23:4c:cc:3c:16:ea: 2c:39:d8:ba:6c:66:17:33:d4:35:72:4c:7c:62:ab:64:86:0d: 9d:28:e4:7e:f4:fe:be:8e:0c:5e:6c:3a:37:6f:09:19:f0:49: dc:c9:54:11:33:99:85:c3:6a:d0:e1:11:9a:48:d2:8a:94:11: b2:94:d9:96:d8:dd:12:1b:7a:70:36:46:41:ce:46:93:07:a3: ad:af:84:a9:d8:b8:da:eb:2d:b3:b5:60:98:5e:1b:60:32:37: 8f:5c:75:36:3d:eb:90:71:52:88:b8:cc:be:c2:3d:dd:e5:9b: 81:2f:d5:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUwODIzMDIwMjU0WhcNMjUwODMwMDIwMjU0WjAYMRYwFAYD VQQDEw02OGE5MjE0ZS05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gaY3Yunh5XPmD6hC29aETSymh3p6UTjJPE4hUe1RrXocgRTMDcN0UWZ0yNK lfgMSAxLZH0f1z75tU0ks7FehyeVijzwi64v9jaWwp+U0GGlvpd2vYycg1p5DSLD h5Rrlh0fic7SPatlRjOY5scaIjYSRwZlO6q6W+895jVYBkkxtVlDHYU/oqFfnRLY IemygCxYL0iTVUDbt9wPCIsbd7Zq+i81VemfqKl8j+4fTIRWmoss6yRLgdLW7y7v mqCc8H9bqhmYlFM71Tyc93qMIKNtv+LxS1Cmw9ZdNptxec9t4F6msJm3pvnmTETc fR3H0sxMlO2MAgfaCIXl2dB10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmBMCcS mAhlhLynRVMl/UrX1XP7MB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxH9PjW4j5ybi6sDUyjXOHZbHVmwRGgHch7HTdTw91YZncYcxb+Er j6FjOxqPB5dAiGK/T+ar979tPipGPJeyFOp1mO515LKcimR6erXAanXLYjOKDpvw /zHVDi5QxND2+tSDzyyEJZihZeNFsoE66fgVOKFbCurFFnmUfpclsb6FORPCDaVd SIIjTMw8FuosOdi6bGYXM9Q1ckx8Yqtkhg2dKOR+9P6+jgxebDo3bwkZ8EncyVQR M5mFw2rQ4RGaSNKKlBGylNmW2N0SG3pwNkZBzkaTB6Otr4Sp2Lja6y2ztWCYXhtg MjePXHU2PeuQcVKIuMy+wj3d5ZuBL9Ui -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:59 2025 by rpki-client