$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json) Hash identifier: NcVhmfBrVdGtOfQax8OCH2xngroZ2C48GDjaOZeZ9Rs= Subject key identifier: 2A:F3:9A:15:B5:BF:92:96:8E:2C:B0:4F:A9:E6:AE:6B:F6:42:B6:98 Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft Manifest number: 0879 Signing time: Fri 22 Aug 2025 20:45:28 +0000 Manifest this update: Fri 22 Aug 2025 20:45:28 +0000 Manifest next update: Fri 29 Aug 2025 20:45:27 +0000 Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: oWTlcr0JTMp4U7+huk2NS9/1mIz3KNrAafyI/kmWdg8=) 2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UBw2PoTevAndZcrQq8icn0bOX1+H9RUk7B/v/OivD1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: Aug 22 20:45:28 2025 GMT Not After : Aug 29 20:45:27 2025 GMT Subject: CN=68a8d6e8-6523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:20:9c:41:ec:be:62:28:f0:2d:12:5c:60: a1:18:2d:47:fb:e1:3f:16:02:d1:28:e5:13:de:7e: dc:8c:18:0f:26:32:dd:e4:d3:03:04:b0:a7:74:40: 96:39:a7:cf:5b:23:40:e6:20:5c:29:00:5f:71:0c: f5:2d:4c:3c:c4:c4:8e:9b:73:f5:68:0a:bb:d0:da: b5:de:f8:27:49:c4:dd:ff:31:16:48:e9:17:ba:01: e0:2c:89:61:d8:0e:fd:76:dd:95:af:a5:88:c6:8f: 15:f4:56:13:f4:ca:59:4d:a2:75:7b:63:bb:97:92: ba:84:24:eb:2e:38:d3:12:e8:e3:8e:fb:c2:55:05: b4:01:b2:4f:19:5c:e7:92:97:eb:92:35:56:37:2d: 1d:e6:93:aa:ab:a2:2b:9a:6f:2d:04:75:f7:7a:a6: 81:43:03:00:26:bf:3d:33:d9:dd:24:b3:b3:88:1b: bd:24:aa:58:c2:7b:04:41:63:90:40:2f:a4:d7:40: 70:9e:5d:58:29:f5:5e:0b:71:76:07:90:8a:d7:f6: 12:58:84:b4:32:8f:00:de:4f:f9:9a:a9:67:13:f9: 34:29:61:99:69:13:71:0b:58:8c:45:da:7d:b1:17: 33:5b:b0:bd:fe:12:93:48:b4:a1:4b:27:2d:9a:0a: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:9A:15:B5:BF:92:96:8E:2C:B0:4F:A9:E6:AE:6B:F6:42:B6:98 X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a5:01:87:19:a6:ce:f5:57:00:85:0e:69:53:60:5b:c2:31: 3f:5c:7d:20:52:12:88:79:5f:73:fa:b0:cf:cd:50:cc:b2:af: c1:ff:da:b8:5d:f2:9f:18:d1:21:63:8d:4e:c9:c9:d6:3e:8e: ae:57:96:03:4a:07:88:0b:35:d7:c9:56:3c:9c:e1:f0:72:d6: e6:19:35:bb:ca:cf:57:70:5a:b4:43:4e:0b:61:c1:a2:0f:32: dd:88:c8:1f:1d:a7:f5:22:63:74:54:4e:62:03:44:e6:09:f6: 51:c9:dc:2b:77:ef:25:30:78:0c:87:69:73:0e:a2:68:51:52: 30:bd:1a:d7:36:dc:8f:72:7b:0e:74:cc:c6:00:63:79:7a:ba: 05:d5:96:f9:1d:c2:e6:9b:22:f6:5f:68:15:0e:cf:d1:e7:cf: 5f:93:02:33:d4:c2:b0:6a:16:5d:51:cd:f0:e7:db:1e:62:7f: d5:aa:4f:d2:08:ee:9c:49:64:5b:ee:b5:87:1d:63:19:c6:25: 89:d9:f9:93:53:e7:ec:63:a2:90:e3:2b:42:b9:1a:34:76:30: 20:13:ea:a4:f2:63:e4:3b:53:b9:41:dc:f8:96:a1:36:e8:fc: 9b:ac:49:9f:17:c9:66:82:cd:20:25:d1:65:aa:75:c9:18:41: 53:6c:db:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjUwODIyMjA0NTI4WhcNMjUwODI5MjA0NTI3WjAYMRYwFAYD VQQDEw02OGE4ZDZlOC02NTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhEgnEHsvmIo8C0SXGChGC1H++E/FgLRKOUT3n7cjBgPJjLd5NMDBLCndECW OafPWyNA5iBcKQBfcQz1LUw8xMSOm3P1aAq70Nq13vgnScTd/zEWSOkXugHgLIlh 2A79dt2Vr6WIxo8V9FYT9MpZTaJ1e2O7l5K6hCTrLjjTEujjjvvCVQW0AbJPGVzn kpfrkjVWNy0d5pOqq6Irmm8tBHX3eqaBQwMAJr89M9ndJLOziBu9JKpYwnsEQWOQ QC+k10Bwnl1YKfVeC3F2B5CK1/YSWIS0Mo8A3k/5mqlnE/k0KWGZaRNxC1iMRdp9 sRczW7C9/hKTSLShSyctmgpSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrzmhW1 v5KWjiywT6nmrmv2QraYMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5 a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfpQGHGabO9VcAhQ5pU2BbwjE/XH0gUhKIeV9z+rDPzVDMsq/B/9q4 XfKfGNEhY41OycnWPo6uV5YDSgeICzXXyVY8nOHwctbmGTW7ys9XcFq0Q04LYcGi DzLdiMgfHaf1ImN0VE5iA0TmCfZRydwrd+8lMHgMh2lzDqJoUVIwvRrXNtyPcnsO dMzGAGN5eroF1Zb5HcLmmyL2X2gVDs/R589fkwIz1MKwahZdUc3w59seYn/Vqk/S CO6cSWRb7rWHHWMZxiWJ2fmTU+fsY6KQ4ytCuRo0djAgE+qk8mPkO1O5Qdz4lqE2 6PybrEmfF8lmgs0gJdFlqnXJGEFTbNtj -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:05 2025 by rpki-client