$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: dcrzkCrE8qcDUTixC3xo/WJjq7eJqB2cS/+9G43KOZw= Subject key identifier: 00:3D:9C:2E:90:9B:C4:5E:84:1B:3D:73:F4:1C:0A:41:9A:3B:25:C0 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D37 Signing time: Fri 08 Aug 2025 18:14:25 +0000 Manifest this update: Fri 08 Aug 2025 18:14:24 +0000 Manifest next update: Fri 15 Aug 2025 18:14:24 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: LtAhYLuKOlWnI5MQt2eqgV31Uq+FuEI9Ix5yiBZB7lc=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Aug 8 18:14:24 2025 GMT Not After : Aug 15 18:14:24 2025 GMT Subject: CN=68963e80-0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:3e:35:5f:28:16:64:82:9b:4b:16:80:2e: 9a:22:29:47:b2:14:7d:25:9a:a2:5a:26:0f:5d:3a: 97:99:44:03:ba:97:f9:19:8a:0f:64:2a:f7:47:df: 13:33:c7:32:bb:49:f4:d5:92:7d:0a:b9:f4:ec:5c: 25:49:c1:e7:7e:3f:65:73:db:78:76:af:36:85:1d: ad:7d:5a:6e:2f:4a:16:35:b1:ff:81:b1:38:af:13: 36:32:f2:79:de:3b:bc:97:51:a3:56:88:14:be:21: 3b:dd:51:31:26:3f:f1:d0:18:ee:9e:cf:4f:17:44: 6b:83:00:2d:eb:45:4c:82:18:d4:05:55:3b:95:6f: 0c:4b:d8:4e:f8:70:91:eb:1c:3f:f2:96:04:15:31: d3:f6:92:0c:e6:49:d6:cb:b7:9f:8f:ae:ab:f5:e2: 62:f8:94:f8:65:16:98:81:16:13:04:b2:a2:db:58: 65:5a:04:43:cf:92:76:aa:ba:30:e7:5f:de:82:0f: 8b:1b:71:2a:2f:59:ea:30:d1:f0:61:3a:ac:9c:ea: 55:28:55:9d:77:3f:d1:85:df:be:8d:4e:f2:5c:5f: 91:73:23:86:6f:d9:63:ad:fa:1e:21:94:2d:91:cd: 71:3b:34:72:24:a1:e9:67:7b:2f:24:0f:d3:59:6e: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3D:9C:2E:90:9B:C4:5E:84:1B:3D:73:F4:1C:0A:41:9A:3B:25:C0 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:08:e0:f5:44:fd:6b:44:05:5f:2e:40:ed:9c:80:d7:6e: f6:64:61:7f:6e:c7:0d:18:0e:92:9c:9a:2a:11:88:88:dc:61: 4a:6e:be:94:66:9e:b0:eb:5b:32:fc:c9:8c:ef:a8:e6:a2:a8: e0:50:b2:50:38:12:ba:99:9b:24:46:c1:8e:45:41:00:22:9d: 0f:3a:08:c2:0d:5c:87:56:0f:7b:7e:dd:d0:40:03:86:d8:11: 51:30:58:c5:5a:20:c6:bc:e7:e8:0d:f4:53:e7:90:95:3f:9c: 2d:78:6a:9a:0a:55:f1:60:8d:b5:5c:d2:63:d9:3e:33:73:a5: e1:b7:0e:66:4e:50:17:ad:bc:14:d0:15:96:d0:59:2f:45:7e: e5:6c:1c:1f:08:34:70:3a:a9:f3:04:13:4d:59:57:dc:a9:ff: 87:bc:9a:d7:7a:b7:f7:57:b9:1a:5d:45:71:f9:47:5d:dc:9d: 32:ea:b4:52:ba:b1:04:f5:83:4b:b8:a9:73:a1:63:de:e9:43: 1f:f1:4c:fb:57:34:27:15:94:34:2c:61:cf:4a:00:c8:df:fb: c3:70:f5:d3:a7:37:47:2d:a6:a8:18:b9:36:d7:ca:9d:e8:e3: b8:69:68:9c:3c:48:3a:6c:cc:37:b7:6e:24:00:a3:91:92:e6: cd:de:01:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwODA4MTgxNDI0WhcNMjUwODE1MTgxNDI0WjAYMRYwFAYD VQQDEw02ODk2M2U4MC0wNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS0+NV8oFmSCm0sWgC6aIilHshR9JZqiWiYPXTqXmUQDupf5GYoPZCr3R98T M8cyu0n01ZJ9Crn07FwlScHnfj9lc9t4dq82hR2tfVpuL0oWNbH/gbE4rxM2MvJ5 3ju8l1GjVogUviE73VExJj/x0Bjuns9PF0RrgwAt60VMghjUBVU7lW8MS9hO+HCR 6xw/8pYEFTHT9pIM5knWy7efj66r9eJi+JT4ZRaYgRYTBLKi21hlWgRDz5J2qrow 51/egg+LG3EqL1nqMNHwYTqsnOpVKFWddz/Rhd++jU7yXF+RcyOGb9ljrfoeIZQt kc1xOzRyJKHpZ3svJA/TWW4NbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA9nC6Q m8RehBs9c/QcCkGaOyXAMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB02wjg9UT9a0QFXy5A7ZyA1272ZGF/bscNGA6SnJoqEYiI3GFKbr6U Zp6w61sy/MmM76jmoqjgULJQOBK6mZskRsGORUEAIp0POgjCDVyHVg97ft3QQAOG 2BFRMFjFWiDGvOfoDfRT55CVP5wteGqaClXxYI21XNJj2T4zc6Xhtw5mTlAXrbwU 0BWW0FkvRX7lbBwfCDRwOqnzBBNNWVfcqf+HvJrXerf3V7kaXUVx+Udd3J0y6rRS urEE9YNLuKlzoWPe6UMf8Uz7VzQnFZQ0LGHPSgDI3/vDcPXTpzdHLaaoGLk218qd 6OO4aWicPEg6bMw3t24kAKORkubN3gH2 -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:18 2025 by rpki-client