$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: VJSXQOMtY9TNQz+8HfxwwoDuNmV1Cz89XvQUTxQt+I8= Subject key identifier: 20:6D:2B:6E:09:6A:3F:59:60:21:DA:75:CF:06:3E:57:2E:1C:42:CA Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0B37 Signing time: Mon 30 Jun 2025 19:22:13 +0000 Manifest this update: Mon 30 Jun 2025 19:22:12 +0000 Manifest next update: Mon 07 Jul 2025 19:22:12 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: Ifg6/SZOSmTCU2P3XUuoLE2GFOIe52lltIvikb+arms=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: 6+05b8G0TEW8X4nNCgb84dRnZnbGJzRjWgQsJpxv0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2886 (0xb46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: Jun 30 19:22:12 2025 GMT Not After : Jul 7 19:22:12 2025 GMT Subject: CN=6862e3e4-7442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:24:0f:37:8b:4c:3b:1e:7d:57:6d:fa:1c: 74:d7:a5:79:38:e0:08:38:c9:90:b5:85:20:3b:6e: ff:85:2d:e8:bf:0c:b9:54:72:53:47:a6:a7:08:ee: 30:34:2b:cd:76:87:c3:7a:bf:ed:2a:36:6a:49:00: be:62:cd:9d:69:52:23:3c:83:d2:6e:47:56:05:3d: cc:db:7f:28:6b:6a:c1:f6:9c:e4:34:20:56:2e:0b: da:e0:b7:cb:80:52:f3:c5:d8:ab:ef:35:cf:9e:c0: 1a:a9:26:07:f1:02:a1:bc:7f:24:fd:83:28:66:25: 2f:46:32:bd:5c:44:a2:48:48:5c:06:5f:6e:13:d2: 32:08:df:ee:3a:03:26:ba:b5:ed:ce:53:12:d6:a8: d2:1f:a2:b8:42:72:83:e4:82:f8:69:65:05:09:2e: af:61:e9:c4:67:49:13:88:b6:a7:c5:f2:3f:22:6e: 15:ff:c6:ad:53:72:61:75:88:73:be:0a:e6:1c:79: 65:be:47:0a:47:94:2b:61:3d:b9:e1:20:ba:d0:8f: 98:13:07:12:94:e1:96:5d:47:58:3f:54:7b:35:24: e9:61:bc:86:24:33:e7:ca:58:c9:6e:28:4e:9d:61: d2:54:a2:ad:27:00:c7:a3:69:2b:43:a7:24:07:0d: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:2B:6E:09:6A:3F:59:60:21:DA:75:CF:06:3E:57:2E:1C:42:CA X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:0e:1d:4e:d3:00:ae:79:1f:c5:60:2b:7e:61:dc:34:ac:9b: 69:3f:63:0f:98:87:02:25:07:8b:e5:0a:9a:07:1e:b5:3e:1f: f8:b1:2d:60:97:3c:97:1f:1b:f8:99:4f:4a:a2:f5:18:8b:02: 02:16:ea:6e:d5:ea:81:ac:f1:1a:18:e5:92:d9:ef:64:b1:cd: 81:8d:94:a4:b4:90:60:f8:36:3c:10:8c:be:e9:8f:8a:31:77: 33:c5:46:ea:fd:48:e8:45:6e:7f:95:a2:9e:e2:cb:64:cb:2f: fc:6f:4f:93:41:5c:56:cb:8b:c3:7c:11:8a:4a:3c:f1:7c:c0: dd:1c:9e:22:f1:bc:60:f3:aa:bf:cb:09:89:5c:fc:07:50:04: 10:2b:7c:44:60:9d:dd:6c:66:f3:ec:6b:af:e7:9a:06:25:2d: b1:3d:8e:ec:84:5d:97:59:91:d6:51:53:42:8f:5f:8f:26:bc: f2:14:83:06:4b:dd:df:f0:62:75:10:15:5b:80:78:92:ac:71: 59:e3:73:81:f9:c5:43:fd:57:7a:77:7f:07:7c:2b:53:08:df: 35:ba:15:ad:96:33:a3:ff:c1:91:c4:63:8c:6d:ee:2f:9a:b8: 4d:aa:fb:94:78:73:fb:8f:3e:2c:85:ac:98:4a:e5:16:64:5c: 3d:63:76:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjUwNjMwMTkyMjEyWhcNMjUwNzA3MTkyMjEyWjAYMRYwFAYD VQQDEw02ODYyZTNlNC03NDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUwkDzeLTDsefVdt+hx016V5OOAIOMmQtYUgO27/hS3ovwy5VHJTR6anCO4w NCvNdofDer/tKjZqSQC+Ys2daVIjPIPSbkdWBT3M238oa2rB9pzkNCBWLgva4LfL gFLzxdir7zXPnsAaqSYH8QKhvH8k/YMoZiUvRjK9XESiSEhcBl9uE9IyCN/uOgMm urXtzlMS1qjSH6K4QnKD5IL4aWUFCS6vYenEZ0kTiLanxfI/Im4V/8atU3JhdYhz vgrmHHllvkcKR5QrYT254SC60I+YEwcSlOGWXUdYP1R7NSTpYbyGJDPnyljJbihO nWHSVKKtJwDHo2krQ6ckBw3+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBtK24J aj9ZYCHadc8GPlcuHELKMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyDh1O0wCueR/FYCt+Ydw0rJtpP2MPmIcCJQeL5QqaBx61Ph/4sS1g lzyXHxv4mU9KovUYiwICFupu1eqBrPEaGOWS2e9ksc2BjZSktJBg+DY8EIy+6Y+K MXczxUbq/UjoRW5/laKe4stkyy/8b0+TQVxWy4vDfBGKSjzxfMDdHJ4i8bxg86q/ ywmJXPwHUAQQK3xEYJ3dbGbz7Guv55oGJS2xPY7shF2XWZHWUVNCj1+PJrzyFIMG S93f8GJ1EBVbgHiSrHFZ43OB+cVD/Vd6d38HfCtTCN81uhWtljOj/8GRxGOMbe4v mrhNqvuUeHP7jz4shayYSuUWZFw9Y3b8 -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:29 2025 by rpki-client