$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: 71aKZO+iXWs5pO37yud6mWG6ruA9JV1EovW9ABviu4I= Subject key identifier: 70:7C:0D:C4:11:F2:65:54:32:EC:61:9C:8D:C2:52:04:4A:3D:C3:2D Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0B52 Signing time: Fri 22 Aug 2025 19:17:37 +0000 Manifest this update: Fri 22 Aug 2025 19:17:37 +0000 Manifest next update: Fri 29 Aug 2025 19:17:37 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: J5uE7SXibVg9iiLK1Md8275ZNNguqUC1eNhlL4LUYaw=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: 6+05b8G0TEW8X4nNCgb84dRnZnbGJzRjWgQsJpxv0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: Aug 22 19:17:37 2025 GMT Not After : Aug 29 19:17:37 2025 GMT Subject: CN=68a8c251-9ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:25:68:84:06:9b:eb:41:1a:e3:c1:76:fd: 5b:eb:a1:c5:0c:8b:b5:b6:34:02:ef:be:58:3b:b4: 5e:ea:5e:ff:c9:c4:e4:7d:9c:a8:2d:93:92:9e:6a: d7:f5:c2:a2:75:fc:1f:23:26:87:f2:3a:ce:94:b2: 90:9e:6f:2d:26:16:13:ab:4f:bc:96:77:63:2b:c1: 3b:35:df:86:3d:7d:8d:fb:a7:8d:1a:06:d2:7f:4c: 3a:57:77:eb:e5:f6:67:8a:43:59:c6:08:0d:1f:52: 41:a7:bc:be:d6:de:1f:4a:3f:e8:f5:f2:4b:f3:82: a2:61:c2:33:7d:61:63:4e:bc:3c:df:0a:83:ca:8c: a4:b8:d0:9d:44:4c:a3:ea:b2:47:d3:3c:20:07:29: cd:c4:58:64:b5:ad:ae:d6:48:20:35:5c:f7:90:08: a5:15:bf:fd:ee:76:d3:60:ec:a3:7b:a5:6b:9b:24: 9f:79:08:c7:b1:00:65:e8:68:f3:65:0f:b4:3c:de: f4:c1:81:61:fe:2c:e9:a9:88:fb:6b:f6:75:4f:ea: b1:5a:02:0f:3d:79:55:df:a8:5d:c6:61:f0:1f:a8: 09:64:4f:2b:95:ad:ba:14:64:e6:a3:d7:fb:0a:84: 60:83:22:90:d4:ae:dd:96:f4:3d:01:6b:e2:6b:47: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:0D:C4:11:F2:65:54:32:EC:61:9C:8D:C2:52:04:4A:3D:C3:2D X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4d:10:33:38:08:fd:9f:fd:b9:bf:d7:5e:a1:a0:30:21:45: c6:29:9d:58:89:ce:b7:a9:3b:80:d5:f0:15:d0:ca:8e:2e:97: 0a:4c:01:e8:ab:66:5a:11:60:8a:da:32:5c:80:02:25:a4:36: f1:b7:3e:47:07:ce:83:13:31:7b:7d:0a:a9:5c:e8:cf:e5:29: d1:93:52:ec:c9:af:be:c1:57:d2:bb:d7:1e:82:9c:9a:d1:7e: dd:53:cb:9f:6e:c3:46:03:af:b4:e7:81:67:91:a6:5f:f9:2c: 15:b2:a8:4c:85:74:f9:26:6d:f4:16:6f:87:6a:da:25:2d:89: cd:1e:72:c6:14:06:3c:c3:ff:77:72:3a:8f:b4:93:53:e3:cc: 71:af:c3:4a:25:82:83:a9:c9:10:72:e3:fb:2e:42:b2:4b:f5: 41:95:72:5b:6f:db:d7:9c:f8:54:6e:8c:45:15:f8:79:12:36: 4e:6c:14:28:84:b9:18:14:9a:c0:69:1f:96:2d:00:ba:1c:c6: a9:89:57:87:f9:43:1b:61:55:6f:e2:00:79:46:24:1e:81:07: 6e:47:d5:a7:4a:eb:b0:c6:07:54:9f:b5:a7:4f:e3:0c:e7:df: 72:41:8e:ff:75:f2:10:5a:f1:94:e4:1b:56:ac:19:2b:26:4c: 6f:4c:21:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjUwODIyMTkxNzM3WhcNMjUwODI5MTkxNzM3WjAYMRYwFAYD VQQDEw02OGE4YzI1MS05Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskolaIQGm+tBGuPBdv1b66HFDIu1tjQC775YO7Re6l7/ycTkfZyoLZOSnmrX 9cKidfwfIyaH8jrOlLKQnm8tJhYTq0+8lndjK8E7Nd+GPX2N+6eNGgbSf0w6V3fr 5fZnikNZxggNH1JBp7y+1t4fSj/o9fJL84KiYcIzfWFjTrw83wqDyoykuNCdREyj 6rJH0zwgBynNxFhkta2u1kggNVz3kAilFb/97nbTYOyje6VrmySfeQjHsQBl6Gjz ZQ+0PN70wYFh/izpqYj7a/Z1T+qxWgIPPXlV36hdxmHwH6gJZE8rla26FGTmo9f7 CoRggyKQ1K7dlvQ9AWvia0e2IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB8DcQR 8mVUMuxhnI3CUgRKPcMtMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpTRAzOAj9n/25v9deoaAwIUXGKZ1Yic63qTuA1fAV0MqOLpcKTAHo q2ZaEWCK2jJcgAIlpDbxtz5HB86DEzF7fQqpXOjP5SnRk1Lsya++wVfSu9cegpya 0X7dU8ufbsNGA6+054FnkaZf+SwVsqhMhXT5Jm30Fm+HatolLYnNHnLGFAY8w/93 cjqPtJNT48xxr8NKJYKDqckQcuP7LkKyS/VBlXJbb9vXnPhUboxFFfh5EjZObBQo hLkYFJrAaR+WLQC6HMapiVeH+UMbYVVv4gB5RiQegQduR9WnSuuwxgdUn7WnT+MM 599yQY7/dfIQWvGU5BtWrBkrJkxvTCFa -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:57 2025 by rpki-client