$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json) Hash identifier: PJLeCn3C1RXjQRLDWQ2q48z/NBcNtgPj/uf43YQ3nQA= Subject key identifier: E0:81:A5:69:1D:37:A3:D6:0B:EB:5D:EE:13:FD:0F:12:3D:E8:8B:40 Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Certificate serial: 0F4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft Manifest number: 194B Signing time: Wed 02 Jul 2025 17:48:26 +0000 Manifest this update: Wed 02 Jul 2025 17:48:25 +0000 Manifest next update: Wed 09 Jul 2025 17:48:25 +0000 Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: Qp2pNKN0trdozzecyXwVI5pIDBy4+Q4DZQ7LJZVEy9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3914 (0xf4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Validity Not Before: Jul 2 17:48:25 2025 GMT Not After : Jul 9 17:48:25 2025 GMT Subject: CN=686570e9-d2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a9:1f:31:dd:26:2f:e4:04:34:c1:6b:41:86: fc:55:b1:e2:a4:12:3a:f2:da:96:de:26:5f:26:09: 46:05:1c:5d:4d:08:1d:6a:d0:65:a3:f5:69:83:1c: 59:96:87:c9:32:67:4c:fa:78:96:1f:ec:f0:5d:79: 21:82:44:93:4b:c7:62:d2:48:90:cd:49:29:ae:c8: 61:47:ea:1c:09:78:49:f1:3c:98:e1:b0:c1:59:16: a9:75:cc:a0:22:fa:c7:81:00:3a:9c:5d:07:68:80: 99:36:9d:3d:a1:d2:af:ce:80:da:3b:27:36:40:61: ee:23:78:c6:d5:48:c7:8d:11:98:7c:21:07:71:ae: 99:70:b8:0b:dc:21:be:4e:4a:4b:85:19:fb:48:8a: e7:12:35:77:91:7f:f5:1e:11:68:a4:ac:f9:c7:71: 6b:77:d1:21:24:3b:3f:49:39:c8:51:e9:bf:89:94: 86:da:de:1f:12:1e:6b:8b:f3:fa:21:b5:62:fd:56: a2:02:e7:e5:05:e9:3c:9b:76:12:35:08:42:5c:c5: bd:70:fa:aa:af:9f:7e:b9:f3:d0:5d:2a:c5:7b:ca: 5b:87:81:7c:e1:f6:26:fe:f1:21:cd:bc:eb:b6:6a: fa:e0:f9:0e:6f:65:cf:46:ec:5d:f8:66:1b:02:69: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:81:A5:69:1D:37:A3:D6:0B:EB:5D:EE:13:FD:0F:12:3D:E8:8B:40 X509v3 Authority Key Identifier: keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dd:6c:08:91:4f:03:a1:53:47:e3:8d:89:a7:ee:9a:f2:df: b3:5b:d3:13:02:be:34:48:83:8d:ee:68:b4:bd:7d:ad:17:d5: ab:95:16:a6:af:bb:39:ca:38:80:05:83:ef:05:e1:81:62:9b: e1:23:99:e9:28:ca:6a:fa:41:f2:95:e4:21:de:66:ed:3c:c6: d4:47:44:d1:82:ef:f0:49:7c:84:10:58:eb:8a:54:8e:58:67: 05:e6:e0:f9:a9:64:8e:9c:24:d1:be:d5:39:7f:61:a7:d0:ec: d7:82:6b:10:ae:97:4d:98:89:71:01:91:49:c7:69:20:af:e4: d3:f0:57:b7:ae:72:67:cc:23:5c:97:b6:10:c5:61:61:25:02: ae:14:4b:2d:cd:83:fd:9b:ec:5b:6c:d7:b7:01:d1:e4:f3:da: 47:a8:40:01:32:25:33:ec:39:95:71:c0:46:93:40:9e:6b:ad: 72:d5:f8:a9:d3:42:86:30:07:7b:84:a6:d0:dd:d7:b7:0b:c8: c2:6e:82:52:6a:49:1d:3d:01:59:76:d9:36:a6:73:7f:98:1d: 49:4d:6e:4d:94:d2:3c:ac:01:0d:22:f0:4d:24:d3:d5:b3:83: 6c:65:63:35:a4:35:aa:03:5b:5f:98:36:bc:b7:08:94:b3:b7: ee:cd:80:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0 RjgyMDE3QzkwHhcNMjUwNzAyMTc0ODI1WhcNMjUwNzA5MTc0ODI1WjAYMRYwFAYD VQQDEw02ODY1NzBlOS1kMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56kfMd0mL+QENMFrQYb8VbHipBI68tqW3iZfJglGBRxdTQgdatBlo/VpgxxZ lofJMmdM+niWH+zwXXkhgkSTS8di0kiQzUkprshhR+ocCXhJ8TyY4bDBWRapdcyg IvrHgQA6nF0HaICZNp09odKvzoDaOyc2QGHuI3jG1UjHjRGYfCEHca6ZcLgL3CG+ TkpLhRn7SIrnEjV3kX/1HhFopKz5x3Frd9EhJDs/STnIUem/iZSG2t4fEh5ri/P6 IbVi/VaiAuflBek8m3YSNQhCXMW9cPqqr59+ufPQXSrFe8pbh4F84fYm/vEhzbzr tmr64PkOb2XPRuxd+GYbAmm7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCBpWkd N6PWC+td7hP9DxI96ItAMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA63WwIkU8DoVNH442Jp+6a8t+zW9MTAr40SION7mi0vX2tF9WrlRam r7s5yjiABYPvBeGBYpvhI5npKMpq+kHyleQh3mbtPMbUR0TRgu/wSXyEEFjrilSO WGcF5uD5qWSOnCTRvtU5f2Gn0OzXgmsQrpdNmIlxAZFJx2kgr+TT8Fe3rnJnzCNc l7YQxWFhJQKuFEstzYP9m+xbbNe3AdHk89pHqEABMiUz7DmVccBGk0Cea61y1fip 00KGMAd7hKbQ3de3C8jCboJSakkdPQFZdtk2pnN/mB1JTW5NlNI8rAENIvBNJNPV s4NsZWM1pDWqA1tfmDa8twiUs7fuzYDh -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:35 2025 by rpki-client