$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: l/ZOhigpow+BbYSrBFSVZJVMryDpDuzp2IULJ3Ajhjc= Subject key identifier: 06:D5:39:BB:EA:AD:55:F6:00:A3:E6:9A:79:FE:C0:6D:87:3D:F7:F7 Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 04A0 Signing time: Sat 23 Aug 2025 00:10:37 +0000 Manifest this update: Sat 23 Aug 2025 00:10:37 +0000 Manifest next update: Sat 30 Aug 2025 00:10:37 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: w0Ez/1W4e7givvq8pwJqMzG0DQZUg1x6/56Ti97wKjY=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: Aug 23 00:10:37 2025 GMT Not After : Aug 30 00:10:37 2025 GMT Subject: CN=68a906fd-6dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:b5:4a:b8:57:ad:98:d0:7d:76:a1:8c:11: 69:78:b6:40:65:ed:61:13:85:fb:ff:96:ee:3c:f2: 81:03:f9:9c:2f:35:e1:58:d5:f1:18:a1:9d:3b:d2: b0:2d:3f:a1:2f:47:67:ff:57:60:b6:3e:34:f0:54: f6:c2:d6:42:ba:13:d9:d0:22:70:f9:8e:66:9a:57: 74:c5:f8:c9:46:88:62:71:67:a9:9f:7b:e2:ed:c5: ed:a3:da:56:e0:c6:13:09:fa:95:da:93:bd:84:84: b5:ca:82:b6:19:c3:89:45:fd:34:7f:63:60:ce:cd: 60:81:cb:e8:04:f2:98:20:dd:77:d2:be:84:85:47: 40:45:60:b6:04:1a:12:a0:3e:e2:f6:33:1a:57:ae: 3a:79:65:6b:e8:b0:ee:3c:86:cb:ca:5a:64:de:5d: 39:fc:fb:88:a8:f5:f3:5f:2a:57:2b:f4:38:f2:a5: e7:22:a4:d2:0b:1e:78:d3:8f:14:e3:44:f4:6d:b4: 69:ff:9a:20:b6:3b:e1:65:3b:1a:18:af:d6:bc:0e: df:d8:4c:59:90:d8:ac:6d:80:64:68:b4:fb:1a:ef: e1:c9:b4:bd:be:c6:89:99:0d:d5:18:59:3b:10:37: 9f:8d:e0:16:0d:78:24:a6:05:40:e9:a0:73:e4:d6: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D5:39:BB:EA:AD:55:F6:00:A3:E6:9A:79:FE:C0:6D:87:3D:F7:F7 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7e:ca:42:72:56:a3:2c:a1:80:5a:31:9e:e4:4e:6b:c4:90: 8c:0a:4d:57:45:73:b6:77:79:99:c6:cf:58:c6:db:15:ff:ed: c0:68:eb:83:e5:b3:20:c7:0a:ed:8b:80:e2:c7:17:64:d3:60: 5e:21:25:d3:e3:e4:dd:01:99:ef:42:48:7f:c3:59:e2:63:f4: 39:dd:73:85:3c:af:94:1c:b0:3a:fe:b9:c3:88:f8:64:9e:c9: 0d:39:3a:a8:b5:a3:9c:83:16:f0:16:d6:c5:ab:9b:9f:f9:ba: a6:10:8a:ce:3c:1c:2f:7a:93:6d:54:de:04:e4:fe:d2:49:12: 0d:db:80:5b:85:af:77:23:59:1c:91:28:3f:90:ae:bd:54:b9: bd:25:02:c6:7b:5a:38:b6:45:95:6d:9c:41:f7:c9:56:f5:98: 7b:19:99:50:9a:f1:ad:f4:9d:57:02:90:a8:4b:f1:f3:cc:8f: af:b6:c4:24:f4:f3:cc:d5:8a:ab:a7:e7:49:41:68:e7:7a:6c: ed:d6:5a:c3:e9:07:db:43:58:ad:87:c8:b3:d8:81:96:c1:59: 71:31:59:e1:b4:97:dc:96:7a:c0:96:bf:a8:d6:63:6d:d5:7a: 5d:30:af:0c:82:c7:09:15:45:dd:9b:bf:15:05:8b:fd:93:7e: 58:81:f8:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUwODIzMDAxMDM3WhcNMjUwODMwMDAxMDM3WjAYMRYwFAYD VQQDEw02OGE5MDZmZC02ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysu1SrhXrZjQfXahjBFpeLZAZe1hE4X7/5buPPKBA/mcLzXhWNXxGKGdO9Kw LT+hL0dn/1dgtj408FT2wtZCuhPZ0CJw+Y5mmld0xfjJRohicWepn3vi7cXto9pW 4MYTCfqV2pO9hIS1yoK2GcOJRf00f2Ngzs1ggcvoBPKYIN130r6EhUdARWC2BBoS oD7i9jMaV646eWVr6LDuPIbLylpk3l05/PuIqPXzXypXK/Q48qXnIqTSCx54048U 40T0bbRp/5ogtjvhZTsaGK/WvA7f2ExZkNisbYBkaLT7Gu/hybS9vsaJmQ3VGFk7 EDefjeAWDXgkpgVA6aBz5Na5ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbVObvq rVX2AKPmmnn+wG2HPff3MB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBifspCclajLKGAWjGe5E5rxJCMCk1XRXO2d3mZxs9YxtsV/+3AaOuD 5bMgxwrti4Dixxdk02BeISXT4+TdAZnvQkh/w1niY/Q53XOFPK+UHLA6/rnDiPhk nskNOTqotaOcgxbwFtbFq5uf+bqmEIrOPBwvepNtVN4E5P7SSRIN24Bbha93I1kc kSg/kK69VLm9JQLGe1o4tkWVbZxB98lW9Zh7GZlQmvGt9J1XApCoS/HzzI+vtsQk 9PPM1Yqrp+dJQWjnemzt1lrD6QfbQ1ith8iz2IGWwVlxMVnhtJfclnrAlr+o1mNt 1XpdMK8MgscJFUXdm78VBYv9k35YgfgF -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:27 2025 by rpki-client