$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: 1zXU+vRC98c8Kk7iIu0gSmk6DMqnMGMD1mfFJNs+pC0= Subject key identifier: 53:43:C1:1E:8A:EB:2C:D6:6D:BE:11:E7:64:41:BB:FC:F0:60:1C:F0 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 16CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 16BF Signing time: Wed 02 Jul 2025 16:47:54 +0000 Manifest this update: Wed 02 Jul 2025 16:47:53 +0000 Manifest next update: Wed 09 Jul 2025 16:47:53 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: o02E3OzDNhS3hkkOZkypq3bJ0+wxp2Puf1TxSaDGCLg=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5834 (0x16ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Jul 2 16:47:53 2025 GMT Not After : Jul 9 16:47:53 2025 GMT Subject: CN=686562ba-7c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:cd:29:5a:bf:46:15:df:5f:07:75:4e:a1: 4a:cd:fe:6b:5b:ac:67:00:0b:25:4f:79:23:cf:5d: e7:9d:dc:81:27:e1:ed:4d:6c:40:f1:34:fb:88:4d: b0:fb:25:44:0e:69:2b:0f:43:f0:73:6f:a9:b1:11: 38:c7:d9:4e:3c:dc:d2:d8:bc:9e:2e:1d:c5:35:8f: c5:cf:b2:a8:6e:78:ba:af:45:00:43:2b:8f:01:cb: 29:3a:51:e3:82:24:c1:0e:31:65:8e:20:84:52:f9: 8d:9f:b1:4a:ca:ac:15:18:50:14:85:3d:2b:f3:33: 42:f1:46:3b:9f:ab:08:fb:73:50:f3:19:4c:bf:62: 8e:1b:2f:c7:4a:cd:60:05:a7:fa:66:8b:4e:76:bb: ed:b4:06:da:37:3a:e9:6a:6a:e5:21:10:7e:6b:63: 18:5e:0f:70:09:64:1f:21:ee:e2:f9:b9:00:32:44: 0c:a9:e8:89:1a:d6:e8:29:24:af:96:c4:c9:52:c4: 97:52:f4:28:f8:ba:43:61:06:84:be:6e:d9:05:78: 0b:33:99:99:e9:8c:b1:13:fe:8a:b8:1f:67:4f:b6: 34:e7:15:7b:7c:f3:7f:42:79:f0:ed:f9:d5:ad:35: 5b:5b:ec:36:a5:df:5e:f5:a9:9f:20:f4:72:20:88: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:C1:1E:8A:EB:2C:D6:6D:BE:11:E7:64:41:BB:FC:F0:60:1C:F0 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d5:6c:67:d8:60:25:87:47:fc:ac:32:57:e1:ef:2d:d6:3f: 9c:39:86:f4:e5:dd:a6:f7:6c:23:0f:5b:d7:7a:36:55:8c:78: 74:4e:f1:b2:72:96:d3:aa:2c:7c:00:ef:8f:18:2e:b0:eb:0f: 9c:77:91:04:8e:84:7e:c0:f2:36:8b:14:8c:83:96:c9:fb:be: 24:61:cc:55:25:f9:0f:c1:18:7e:b9:2f:04:1a:02:c3:39:f9: f5:2c:e1:c2:13:c9:ed:73:38:6a:07:df:65:e5:be:f3:db:fe: 7d:b1:c5:1b:12:2e:39:45:89:e3:c8:ea:09:81:86:3d:23:8b: 9a:a1:00:0d:34:84:ed:f8:37:28:04:5f:20:40:e7:45:67:52: 0f:b7:d2:3b:cc:05:a7:66:18:79:d8:12:70:bc:d3:3b:68:fb: fc:1f:f5:08:05:ab:03:ef:8a:16:b8:e8:d5:bb:2c:65:dc:93: 88:9d:f4:9c:ba:f6:49:a1:45:2f:89:bd:8d:80:a5:55:5b:1c: 0e:8f:60:18:db:76:d0:c7:de:2b:be:46:9e:05:c4:df:43:f2: de:d8:29:f4:29:ef:bf:f4:db:2a:f2:bf:00:3a:5b:79:82:bf: f2:1f:db:a8:a9:3a:a9:9e:53:70:5c:ea:44:db:2c:17:42:df: 01:0c:30:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUwNzAyMTY0NzUzWhcNMjUwNzA5MTY0NzUzWjAYMRYwFAYD VQQDEw02ODY1NjJiYS03YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoLNKVq/RhXfXwd1TqFKzf5rW6xnAAslT3kjz13nndyBJ+HtTWxA8TT7iE2w +yVEDmkrD0Pwc2+psRE4x9lOPNzS2LyeLh3FNY/Fz7Kobni6r0UAQyuPAcspOlHj giTBDjFljiCEUvmNn7FKyqwVGFAUhT0r8zNC8UY7n6sI+3NQ8xlMv2KOGy/HSs1g Baf6ZotOdrvttAbaNzrpamrlIRB+a2MYXg9wCWQfIe7i+bkAMkQMqeiJGtboKSSv lsTJUsSXUvQo+LpDYQaEvm7ZBXgLM5mZ6YyxE/6KuB9nT7Y05xV7fPN/Qnnw7fnV rTVbW+w2pd9e9amfIPRyIIgFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNDwR6K 6yzWbb4R52RBu/zwYBzwMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1Wxn2GAlh0f8rDJX4e8t1j+cOYb05d2m92wjD1vXejZVjHh0TvGy cpbTqix8AO+PGC6w6w+cd5EEjoR+wPI2ixSMg5bJ+74kYcxVJfkPwRh+uS8EGgLD Ofn1LOHCE8ntczhqB99l5b7z2/59scUbEi45RYnjyOoJgYY9I4uaoQANNITt+Dco BF8gQOdFZ1IPt9I7zAWnZhh52BJwvNM7aPv8H/UIBasD74oWuOjVuyxl3JOInfSc uvZJoUUvib2NgKVVWxwOj2AY23bQx94rvkaeBcTfQ/Le2Cn0Ke+/9Nsq8r8AOlt5 gr/yH9uoqTqpnlNwXOpE2ywXQt8BDDD1 -----END CERTIFICATE-----Generated at Thu Jul 3 20:43:35 2025 by rpki-client