$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json) Hash identifier: nkzkBtwJ64vNL8uwACVjojRf31lT6zphZFFHiwjAd8w= Subject key identifier: 9B:D0:A9:B3:18:45:E2:3A:18:1C:2C:57:11:09:7A:14:DA:30:81:D3 Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Certificate serial: 0F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft Manifest number: 197F Signing time: Fri 22 Aug 2025 17:42:09 +0000 Manifest this update: Fri 22 Aug 2025 17:42:08 +0000 Manifest next update: Fri 29 Aug 2025 17:42:08 +0000 Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: XY66B/iwb0SsuNob7/kuRsjrRQJqlkTnRb86NSnEkRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Validity Not Before: Aug 22 17:42:08 2025 GMT Not After : Aug 29 17:42:08 2025 GMT Subject: CN=68a8abf0-1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:0a:25:fe:8e:c6:d1:1b:c8:42:e9:51:6c: 30:22:93:9f:79:7b:25:3d:33:f7:bf:39:ee:17:8b: a7:0d:94:e7:bc:ff:a2:40:24:fa:40:0c:42:c4:d3: 5d:26:08:8b:e3:41:ef:91:af:17:8d:d4:b3:41:af: b9:f8:d1:04:e3:66:fa:f0:77:08:dc:05:02:1c:cd: f4:6a:c2:29:9a:7f:b1:7b:af:48:b5:b9:e1:59:a1: 5a:4d:9b:fc:60:23:d2:12:92:1d:34:6a:01:20:f9: 86:50:c2:ea:cf:35:53:7c:94:ec:a5:36:f3:c7:b7: 66:51:5c:aa:84:e5:22:63:de:78:67:b0:ca:1b:54: 13:1a:1c:46:9f:70:bf:97:4a:60:3f:3b:08:a6:c6: 37:fb:15:3a:d6:4d:1d:29:1f:4a:3c:27:d2:d3:4b: 3f:57:dc:3d:dc:02:5f:57:7a:34:7b:7c:59:9f:02: 3b:0f:97:8f:ba:ab:d6:73:7f:f6:bd:3d:75:d3:48: af:6c:56:dc:55:5f:61:10:c6:f8:19:33:2b:12:b2: 41:a4:09:ff:a9:c6:bf:e0:4c:79:71:4b:28:42:30: ad:20:d9:b7:de:b3:6e:58:e4:ed:06:6b:34:36:e5: 59:4b:bc:00:a4:26:48:ff:2e:86:4a:7b:f6:7a:35: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:A9:B3:18:45:E2:3A:18:1C:2C:57:11:09:7A:14:DA:30:81:D3 X509v3 Authority Key Identifier: keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:48:6a:cd:4f:89:f0:7f:32:36:ad:ae:b4:b7:ef:96:ff:47: 2f:9f:cb:68:1c:70:ea:85:a3:ed:1b:ed:da:36:76:bd:83:05: 33:21:cb:c2:49:2e:79:10:06:d5:df:4e:8e:71:4b:c5:1e:a0: a8:22:5c:b5:9f:21:46:e2:f8:1a:a1:56:e4:dd:20:0c:88:31: 6f:8a:4c:0b:23:e7:05:28:28:84:58:42:27:0a:18:87:59:e4: c0:b0:07:6a:54:ec:5f:ab:8d:c4:20:39:8c:b6:70:ce:2e:70: e1:10:7f:2f:23:ff:88:7f:37:16:2f:ba:86:5b:66:fd:18:7f: 0c:98:b7:53:18:db:d0:7d:4e:8f:af:51:99:16:05:ee:a6:b6: 3f:16:62:bd:f1:57:53:d2:f5:3b:28:9c:bb:23:86:4d:84:82: e0:4a:60:ec:0a:54:1f:f2:42:17:bc:c0:96:ed:3a:ee:ba:b3: 51:37:16:a1:e6:6d:2f:8a:3c:fd:c7:96:4a:25:c6:78:dd:9f: ed:0b:78:26:ca:dc:e9:c2:18:e7:59:2d:78:f4:f6:28:4e:73: 75:1d:71:e1:58:56:47:45:8b:e6:fc:ab:1d:53:81:62:76:0f: 5d:d2:32:ca:64:67:3d:2f:78:5e:9b:50:d0:91:4d:f1:a4:90: a0:74:30:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0 RjgyMDE3QzkwHhcNMjUwODIyMTc0MjA4WhcNMjUwODI5MTc0MjA4WjAYMRYwFAYD VQQDEw02OGE4YWJmMC0xMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2EKJf6OxtEbyELpUWwwIpOfeXslPTP3vznuF4unDZTnvP+iQCT6QAxCxNNd JgiL40Hvka8XjdSzQa+5+NEE42b68HcI3AUCHM30asIpmn+xe69ItbnhWaFaTZv8 YCPSEpIdNGoBIPmGUMLqzzVTfJTspTbzx7dmUVyqhOUiY954Z7DKG1QTGhxGn3C/ l0pgPzsIpsY3+xU61k0dKR9KPCfS00s/V9w93AJfV3o0e3xZnwI7D5ePuqvWc3/2 vT1100ivbFbcVV9hEMb4GTMrErJBpAn/qca/4Ex5cUsoQjCtINm33rNuWOTtBms0 NuVZS7wApCZI/y6GSnv2ejVyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvQqbMY ReI6GBwsVxEJehTaMIHTMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5SGrNT4nwfzI2ra60t++W/0cvn8toHHDqhaPtG+3aNna9gwUzIcvC SS55EAbV306OcUvFHqCoIly1nyFG4vgaoVbk3SAMiDFvikwLI+cFKCiEWEInChiH WeTAsAdqVOxfq43EIDmMtnDOLnDhEH8vI/+IfzcWL7qGW2b9GH8MmLdTGNvQfU6P r1GZFgXuprY/FmK98VdT0vU7KJy7I4ZNhILgSmDsClQf8kIXvMCW7TruurNRNxah 5m0vijz9x5ZKJcZ43Z/tC3gmytzpwhjnWS149PYoTnN1HXHhWFZHRYvm/KsdU4Fi dg9d0jLKZGc9L3hem1DQkU3xpJCgdDC8 -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:50 2025 by rpki-client