$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: 9VxgkoZy92VYb4lTzMkHNzebgfWPbHE0rUDtmwbsAv0= Subject key identifier: E8:04:8F:B9:E3:5A:6E:39:C1:76:8C:C3:D2:38:6A:80:01:99:BA:92 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 0996 Signing time: Wed 02 Jul 2025 20:19:07 +0000 Manifest this update: Wed 02 Jul 2025 20:19:06 +0000 Manifest next update: Wed 09 Jul 2025 20:19:06 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: kuuDSfNtsOsdErx6JErhjXgTOk/r4OTgecL5SvYrKK0=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Jul 2 20:19:06 2025 GMT Not After : Jul 9 20:19:06 2025 GMT Subject: CN=6865943b-4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:17:ac:ad:5c:08:1a:0c:fe:9d:15:54:6d: b1:bf:8c:d5:d8:61:fc:d0:54:27:73:8e:c0:76:b2: 6e:94:78:88:64:03:b7:16:b8:c2:28:cb:9a:96:ba: fa:1b:6c:07:81:df:87:e9:05:f7:a0:8e:b5:55:42: af:3b:c3:29:d4:17:fb:1f:cb:38:be:95:e4:7c:ca: dd:7e:cb:5e:29:dd:be:13:6f:5a:16:61:5f:4d:87: b7:d8:56:77:a3:8f:7c:ac:26:87:64:e3:97:a5:4c: 5c:65:99:aa:94:75:7e:eb:36:0f:1c:69:bd:7b:b3: e6:44:03:50:27:64:e0:a6:b2:f2:6d:ff:18:e9:40: 88:79:03:e1:e3:d1:f3:a2:a2:f2:49:0f:98:33:c5: ed:10:74:b9:f8:ee:38:01:3c:dc:88:ce:06:17:77: bb:9c:6f:88:d4:e1:93:50:65:8e:f1:16:6d:26:a5: 69:30:e5:e7:cd:2a:99:22:94:7a:9b:67:1e:9c:00: bc:54:46:ba:f6:65:be:ab:f3:c3:86:d0:5a:d3:c1: 80:9f:d6:d4:85:4d:1d:0c:d9:9a:da:2a:00:de:cd: 51:28:9d:b3:15:51:2f:da:8e:5b:5c:bd:4d:8c:38: bc:4d:ae:8a:10:a5:66:7d:0f:70:60:9e:42:ee:b8: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:8F:B9:E3:5A:6E:39:C1:76:8C:C3:D2:38:6A:80:01:99:BA:92 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cb:75:69:fc:6b:10:fd:b4:02:83:45:53:84:70:80:04:08: ec:ec:41:78:6d:ab:45:99:f7:a1:a3:26:d0:cd:b2:73:6e:3a: 9a:bd:5c:04:95:75:cc:56:ad:26:c3:a7:64:7f:88:8b:64:a8: 7a:3f:83:23:8c:01:5e:e5:30:33:00:3b:59:07:4a:d8:72:e6: 19:44:8e:39:d1:cc:1f:57:bf:69:31:a1:e3:69:f7:c4:fa:df: 61:12:2f:d7:89:8b:d0:8a:35:dd:70:d9:63:e6:e9:96:d7:41: 72:46:8d:85:a7:3f:80:4f:6c:11:25:f0:15:1f:8a:16:cb:6b: 6f:ae:e9:3c:be:98:e5:4e:52:36:54:42:12:97:cb:00:ef:7a: fa:f5:18:55:cb:8d:47:48:86:13:73:ce:97:1a:99:f2:7e:ee: e6:84:85:ed:29:b4:0d:88:e5:20:da:30:81:7e:8f:d5:27:f6: 65:c3:0b:7d:84:62:c5:a9:4f:29:63:dc:4d:53:8f:c9:f7:c2: 2d:12:83:64:ab:89:ca:5e:94:4d:6c:00:c7:b1:dd:38:a2:b9: d4:41:25:36:a7:d4:f9:aa:6d:e3:82:9c:4a:dd:d9:fc:b8:85: 9c:82:8f:da:05:a6:06:a2:c0:ad:e3:b4:de:cd:35:c9:de:d1: 37:0c:dc:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUwNzAyMjAxOTA2WhcNMjUwNzA5MjAxOTA2WjAYMRYwFAYD VQQDEw02ODY1OTQzYi00ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPIXrK1cCBoM/p0VVG2xv4zV2GH80FQnc47AdrJulHiIZAO3FrjCKMualrr6 G2wHgd+H6QX3oI61VUKvO8Mp1Bf7H8s4vpXkfMrdfsteKd2+E29aFmFfTYe32FZ3 o498rCaHZOOXpUxcZZmqlHV+6zYPHGm9e7PmRANQJ2TgprLybf8Y6UCIeQPh49Hz oqLySQ+YM8XtEHS5+O44ATzciM4GF3e7nG+I1OGTUGWO8RZtJqVpMOXnzSqZIpR6 m2cenAC8VEa69mW+q/PDhtBa08GAn9bUhU0dDNma2ioA3s1RKJ2zFVEv2o5bXL1N jDi8Ta6KEKVmfQ9wYJ5C7rhLawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgEj7nj Wm45wXaMw9I4aoABmbqSMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKy3Vp/GsQ/bQCg0VThHCABAjs7EF4batFmfehoybQzbJzbjqavVwE lXXMVq0mw6dkf4iLZKh6P4MjjAFe5TAzADtZB0rYcuYZRI450cwfV79pMaHjaffE +t9hEi/XiYvQijXdcNlj5umW10FyRo2Fpz+AT2wRJfAVH4oWy2tvruk8vpjlTlI2 VEISl8sA73r69RhVy41HSIYTc86XGpnyfu7mhIXtKbQNiOUg2jCBfo/VJ/Zlwwt9 hGLFqU8pY9xNU4/J98ItEoNkq4nKXpRNbADHsd04ornUQSU2p9T5qm3jgpxK3dn8 uIWcgo/aBaYGosCt47TezTXJ3tE3DNxu -----END CERTIFICATE-----Generated at Thu Jul 3 09:38:18 2025 by rpki-client