$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: V8S9RgNelQDTYxRKjW5ACt50BKARjxG7ZyvPwJSi6ds= Subject key identifier: 31:47:92:2A:3F:F4:CD:A2:BD:BC:13:67:57:00:1C:0F:36:A9:80:9D Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: D8 Signing time: Sat 23 Aug 2025 05:43:52 +0000 Manifest this update: Sat 23 Aug 2025 05:43:52 +0000 Manifest next update: Sat 30 Aug 2025 05:43:52 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: CvZO+qLL05GgAKKScQvmB6jNAQ9LWpddvU/iyqCbU9k=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Aug 23 05:43:52 2025 GMT Not After : Aug 30 05:43:52 2025 GMT Subject: CN=68a95518-0c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:01:dc:bc:1f:02:63:0f:79:26:33:88:32: 62:39:ef:37:10:db:4c:60:1a:53:43:c9:ac:39:db: a0:32:a0:09:83:d0:8e:97:42:4c:6f:0e:30:c5:f0: f4:8e:c8:02:fd:a7:ab:dd:88:16:cd:4c:70:39:21: 63:f9:ec:73:f0:89:84:b8:34:4d:0f:a9:6e:ca:22: 2b:ed:8b:6a:25:8d:ce:33:de:f2:6a:51:c5:b7:b6: b8:2a:df:0c:bf:e9:d7:c7:ba:e8:a3:02:75:3b:5f: 5e:b4:bc:df:56:01:00:fe:6f:a5:40:89:e2:7f:a9: ed:87:cb:cc:28:11:43:3c:81:8a:9a:fe:7a:e8:9a: ce:51:09:95:66:65:f5:d8:0e:e0:77:57:a6:d9:ff: 8f:87:0d:98:32:28:20:46:05:07:84:bf:07:c8:bb: 6d:20:98:6d:cb:72:df:0a:0a:6d:f9:90:ed:2d:14: 2a:d5:25:c0:06:17:69:ff:e6:db:6c:a8:5c:0d:90: 8c:d1:2c:09:83:7b:d7:59:f2:14:1f:dc:e0:3b:f8: 11:ec:54:82:f9:5b:32:f8:5c:cb:e2:c8:8b:54:36: 4e:2a:3e:b3:88:0b:63:db:d3:48:c4:75:78:f6:1b: c5:9b:76:0f:f3:e9:f6:18:95:74:0d:64:23:1a:e0: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:92:2A:3F:F4:CD:A2:BD:BC:13:67:57:00:1C:0F:36:A9:80:9D X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:db:53:da:0d:dd:90:14:bb:7f:8b:03:79:25:82:9d:aa:68: 3e:a4:76:61:ba:76:be:b8:07:a1:c5:44:56:98:d2:4e:ec:4f: 13:29:7e:5e:23:7d:3b:9c:18:fe:6b:f1:49:a4:12:39:0d:a7: 5b:c4:40:e4:56:59:3a:33:b0:34:72:75:a2:4c:01:90:4d:58: 45:91:1e:3f:7f:d7:da:09:05:2d:b9:42:1c:24:c0:2b:10:88: 1e:2e:ae:a6:4c:9e:cb:da:30:db:77:fa:1c:ad:53:40:fe:0a: 93:ed:e2:6d:0a:71:7a:f0:33:77:cb:84:78:db:db:46:6d:ad: ac:34:66:36:27:ab:ab:e5:28:23:9c:e3:a9:2b:0c:38:5e:04: d2:26:e3:83:9e:94:2c:bb:f7:d6:b0:6e:60:ee:9f:26:cd:fc: 12:f9:52:12:ad:9b:61:ec:e6:a9:72:c1:41:87:10:21:80:a3: f7:d9:1b:bd:5f:c4:5c:2f:60:b5:1d:2a:81:f3:ca:57:cc:70: 6a:03:ea:0a:51:33:c2:b1:4b:74:69:23:ec:41:be:57:7f:91: db:07:9e:4d:a4:29:5c:3d:76:2c:1b:8d:b9:59:2f:77:bc:22: c7:bd:f3:e2:16:84:a7:da:9e:4c:2a:6b:8a:47:70:f5:b5:a9: bd:75:f8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUwODIzMDU0MzUyWhcNMjUwODMwMDU0MzUyWjAYMRYwFAYD VQQDEw02OGE5NTUxOC0wYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2L0B3LwfAmMPeSYziDJiOe83ENtMYBpTQ8msOdugMqAJg9COl0JMbw4wxfD0 jsgC/aer3YgWzUxwOSFj+exz8ImEuDRND6luyiIr7YtqJY3OM97yalHFt7a4Kt8M v+nXx7roowJ1O19etLzfVgEA/m+lQInif6nth8vMKBFDPIGKmv566JrOUQmVZmX1 2A7gd1em2f+Phw2YMiggRgUHhL8HyLttIJhty3LfCgpt+ZDtLRQq1SXABhdp/+bb bKhcDZCM0SwJg3vXWfIUH9zgO/gR7FSC+Vsy+FzL4siLVDZOKj6ziAtj29NIxHV4 9hvFm3YP8+n2GJV0DWQjGuBGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFHkio/ 9M2ivbwTZ1cAHA82qYCdMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO21PaDd2QFLt/iwN5JYKdqmg+pHZhuna+uAehxURWmNJO7E8TKX5e I307nBj+a/FJpBI5DadbxEDkVlk6M7A0cnWiTAGQTVhFkR4/f9faCQUtuUIcJMAr EIgeLq6mTJ7L2jDbd/ocrVNA/gqT7eJtCnF68DN3y4R429tGba2sNGY2J6ur5Sgj nOOpKww4XgTSJuODnpQsu/fWsG5g7p8mzfwS+VISrZth7OapcsFBhxAhgKP32Ru9 X8RcL2C1HSqB88pXzHBqA+oKUTPCsUt0aSPsQb5Xf5HbB55NpClcPXYsG425WS93 vCLHvfPiFoSn2p5MKmuKR3D1tam9dfgH -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:31 2025 by rpki-client