$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: PbsuBpn+YP4a8qfTfUqi2z70TbsknnUGNZ8XBvryx0c= Subject key identifier: A5:62:C1:45:3F:C2:6D:21:E8:73:E6:AD:FC:43:CD:0C:EE:B3:EB:5F Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: 9A Signing time: Sat 09 Aug 2025 05:20:39 +0000 Manifest this update: Sat 09 Aug 2025 05:20:38 +0000 Manifest next update: Sat 16 Aug 2025 05:20:38 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: wXeHYIaA9rrA5AkgJ3N0F82BYk6HR8e4eydBqZfksNU=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Aug 9 05:20:38 2025 GMT Not After : Aug 16 05:20:38 2025 GMT Subject: CN=6896daa6-a61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:43:b9:8b:af:59:02:a0:80:d9:26:b9:fb: 2c:09:33:9a:66:e8:cc:16:b8:72:b3:76:9e:fe:c5: 02:10:f4:fc:b4:1e:91:ec:79:ef:58:03:61:cd:cd: d4:a9:19:36:47:53:d0:c9:0f:96:72:ac:62:61:89: 14:a0:08:6c:dd:49:be:67:6a:67:67:16:c1:77:24: 7a:6f:39:73:d5:4b:be:27:bd:eb:78:60:34:b9:18: f0:7b:34:c0:cb:1b:87:d4:6d:4f:a6:dd:75:8d:e1: 1f:00:1f:8b:ae:dc:da:3a:2e:48:7c:c0:c0:f5:3b: 29:01:2d:71:e7:9d:b6:47:e0:e9:9c:16:16:b2:6d: a3:1c:ee:6b:80:d7:b8:a7:7a:b0:a3:28:fc:f7:0b: 47:8a:59:31:cb:72:57:bc:08:f3:7f:2f:c8:00:64: 1d:93:41:b8:8b:25:de:98:19:cd:7b:31:d5:65:ef: d4:a8:73:8f:7c:f1:d0:fd:af:9e:5f:b6:b4:ba:fe: c8:d2:80:96:e4:0f:97:38:37:26:c9:52:b0:2f:e1: a2:b4:90:72:42:19:d0:d0:36:7e:43:c8:a4:c5:67: 21:9e:91:19:aa:e3:5c:07:ff:d1:0a:6c:74:40:79: 30:48:b2:d5:71:48:b5:87:9f:bf:62:1b:73:64:11: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:62:C1:45:3F:C2:6D:21:E8:73:E6:AD:FC:43:CD:0C:EE:B3:EB:5F X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:69:c8:af:40:29:32:eb:f7:e1:04:3b:2a:17:86:5b:a8: c3:92:e8:96:58:e5:dc:a9:cb:d9:b1:36:6f:a8:29:84:bc:00: b6:3b:5a:a8:c9:5e:cf:58:36:82:b8:d2:dd:10:82:1f:44:5d: b6:18:9a:dd:84:b9:88:06:60:b1:15:44:6d:15:31:25:a9:93: c7:7f:c5:18:24:50:14:ec:38:af:99:a2:5e:b6:02:6e:bf:d0: f5:06:c3:b0:61:f0:69:07:9b:1e:e9:34:ad:5f:34:00:9e:63: 46:56:7b:55:df:0d:e3:ec:12:99:9e:74:57:12:02:3d:e5:0e: 7a:f7:a3:f0:ad:91:48:db:41:fe:f1:14:17:f3:11:98:61:a6: 14:80:2e:50:b6:be:34:bc:18:00:92:54:47:b8:62:29:ab:2b: 2f:2c:c2:46:38:44:64:f1:05:a7:b6:e3:14:67:80:87:a0:dd: 86:5a:8d:f3:67:3c:c5:4d:31:06:82:c4:7a:aa:98:2d:2d:11: 58:fd:6c:25:93:aa:38:e6:e7:cf:17:ec:7e:2e:e9:e9:2f:d6: 08:b1:0c:f8:03:40:e0:bc:65:95:c6:99:e7:85:d5:5d:55:2d: e0:a1:e1:87:8d:f9:fc:47:f0:58:2c:58:3d:e5:b7:c9:9d:7f: 67:cc:bf:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5 Q0IyQUIxM0YwHhcNMjUwODA5MDUyMDM4WhcNMjUwODE2MDUyMDM4WjAYMRYwFAYD VQQDEw02ODk2ZGFhNi1hNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8tDuYuvWQKggNkmufssCTOaZujMFrhys3ae/sUCEPT8tB6R7HnvWANhzc3U qRk2R1PQyQ+WcqxiYYkUoAhs3Um+Z2pnZxbBdyR6bzlz1Uu+J73reGA0uRjwezTA yxuH1G1Ppt11jeEfAB+LrtzaOi5IfMDA9TspAS1x5522R+DpnBYWsm2jHO5rgNe4 p3qwoyj89wtHilkxy3JXvAjzfy/IAGQdk0G4iyXemBnNezHVZe/UqHOPfPHQ/a+e X7a0uv7I0oCW5A+XODcmyVKwL+GitJByQhnQ0DZ+Q8ikxWchnpEZquNcB//RCmx0 QHkwSLLVcUi1h5+/YhtzZBFkTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKViwUU/ wm0h6HPmrfxDzQzus+tfMB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93 bWt3V0dyX3QtSGVjc3FzVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPpWnIr0ApMuv34QQ7KheGW6jDkuiWWOXcqcvZsTZvqCmEvAC2O1qo yV7PWDaCuNLdEIIfRF22GJrdhLmIBmCxFURtFTElqZPHf8UYJFAU7DivmaJetgJu v9D1BsOwYfBpB5se6TStXzQAnmNGVntV3w3j7BKZnnRXEgI95Q5696PwrZFI20H+ 8RQX8xGYYaYUgC5Qtr40vBgAklRHuGIpqysvLMJGOERk8QWntuMUZ4CHoN2GWo3z ZzzFTTEGgsR6qpgtLRFY/Wwlk6o45ufPF+x+LunpL9YIsQz4A0DgvGWVxpnnhdVd VS3goeGHjfn8R/BYLFg95bfJnX9nzL/i -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:18 2025 by rpki-client