$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: KbMNeNY3Dl8WclfHTEbOg97QXUGdOLe6xsUBpIquX70= Subject key identifier: 66:CB:28:E4:66:87:AB:2C:BB:66:B2:79:42:E3:36:78:C6:C3:D3:3A Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 351B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34E8 Signing time: Mon 04 Aug 2025 14:17:40 +0000 Manifest this update: Mon 04 Aug 2025 14:17:40 +0000 Manifest next update: Mon 11 Aug 2025 14:17:40 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: WNtTfEl6y8Jt1dojWgStoVkuiKDw5sPTsObXi1kPocw=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13595 (0x351b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Aug 4 14:17:40 2025 GMT Not After : Aug 11 14:17:40 2025 GMT Subject: CN=6890c104-1e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:e1:7e:b2:a3:40:cc:51:67:90:e6:dc:f2: 43:fe:c3:3f:6d:e9:79:8b:44:ab:a1:34:be:6b:7c: 4d:e3:69:d0:50:08:00:a3:94:15:41:a0:80:de:d8: 8a:f4:1e:65:0f:28:61:0e:c5:43:22:2a:f1:8a:e5: a5:09:9e:8c:6c:d3:ce:46:5d:4c:50:81:fb:64:8e: e3:97:fe:78:fa:1b:eb:84:b9:12:e8:65:b0:fd:23: 46:de:e9:1a:8b:4e:ee:e4:35:ab:4b:6c:e7:dc:88: 5b:06:21:83:fe:63:44:8f:bf:da:bd:90:01:2d:53: 53:11:25:94:cb:10:2b:c9:63:97:52:10:15:e2:70: 60:54:f0:db:2b:5e:f2:9b:69:9e:77:71:db:53:5d: a8:b7:89:6c:ed:1c:1e:47:8b:b2:c4:72:8c:ef:ca: 6b:55:58:a4:0d:30:e1:14:39:31:a7:69:15:46:21: d2:04:82:f8:71:e6:d6:7a:b5:59:69:cd:6d:da:a1: 98:cd:c6:83:55:8d:46:06:ef:37:70:57:20:de:f6: 80:dc:5f:6e:59:96:43:cd:ec:cc:e2:1d:da:ab:bb: 7c:99:3c:04:47:86:a8:aa:43:b8:db:ad:91:7b:78: b9:98:69:16:4d:23:14:6d:f9:e9:45:bf:c6:c6:97: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CB:28:E4:66:87:AB:2C:BB:66:B2:79:42:E3:36:78:C6:C3:D3:3A X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8c:3a:60:e9:87:6c:be:e5:26:20:1f:33:0c:db:c0:4a:02: 68:71:32:0d:d9:3b:ae:2c:61:3c:c7:c6:ad:89:5f:86:33:53: ff:69:f5:c5:a0:05:20:41:86:1a:06:0a:bf:52:53:63:1d:8b: 87:79:a4:4d:4d:5b:32:fd:ea:23:7a:56:06:d6:bd:5c:97:c3: e2:a5:4f:f4:09:c9:04:81:40:70:e5:c0:d6:a8:d8:94:36:9d: 9e:5a:68:6b:17:47:31:64:1e:8e:88:08:b8:e0:35:c2:1b:91: 03:ef:3f:8b:57:64:44:b9:88:db:3d:0a:66:33:57:db:6e:0b: ac:53:67:c2:b3:85:ea:72:dc:72:88:0a:6f:2e:7f:05:48:9a: 9e:7b:07:0e:21:f5:a4:4c:ef:ff:15:12:70:1c:97:70:5a:16: 46:fe:11:5f:00:9d:75:a1:5c:44:ae:ae:a3:02:ea:08:40:86: d4:a3:72:2f:9a:3b:32:05:26:f9:da:6d:a1:d6:af:7a:c1:93: 09:c3:4e:c1:16:00:29:64:1e:13:01:ac:01:8c:06:46:81:73: d7:c9:6b:63:23:e3:22:81:ce:51:16:ce:98:57:ef:f2:fc:41: a4:54:b7:78:eb:21:5a:c3:58:cb:4b:7a:cb:62:0d:fb:b5:77: cc:25:fa:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwODA0MTQxNzQwWhcNMjUwODExMTQxNzQwWjAYMRYwFAYD VQQDEw02ODkwYzEwNC0xZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxfhfrKjQMxRZ5Dm3PJD/sM/bel5i0SroTS+a3xN42nQUAgAo5QVQaCA3tiK 9B5lDyhhDsVDIirxiuWlCZ6MbNPORl1MUIH7ZI7jl/54+hvrhLkS6GWw/SNG3uka i07u5DWrS2zn3IhbBiGD/mNEj7/avZABLVNTESWUyxAryWOXUhAV4nBgVPDbK17y m2med3HbU12ot4ls7RweR4uyxHKM78prVVikDTDhFDkxp2kVRiHSBIL4cebWerVZ ac1t2qGYzcaDVY1GBu83cFcg3vaA3F9uWZZDzezM4h3aq7t8mTwER4aoqkO4262R e3i5mGkWTSMUbfnpRb/GxpeMXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbLKORm h6ssu2ayeULjNnjGw9M6MB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdjDpg6YdsvuUmIB8zDNvASgJocTIN2TuuLGE8x8atiV+GM1P/afXF oAUgQYYaBgq/UlNjHYuHeaRNTVsy/eojelYG1r1cl8PipU/0CckEgUBw5cDWqNiU Np2eWmhrF0cxZB6OiAi44DXCG5ED7z+LV2REuYjbPQpmM1fbbgusU2fCs4Xqctxy iApvLn8FSJqeewcOIfWkTO//FRJwHJdwWhZG/hFfAJ11oVxErq6jAuoIQIbUo3Iv mjsyBSb52m2h1q96wZMJw07BFgApZB4TAawBjAZGgXPXyWtjI+Migc5RFs6YV+/y /EGkVLd46yFaw1jLS3rLYg37tXfMJfo/ -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:52 2025 by rpki-client