$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: pLB+xMkHjkAOl3P0kR6j0gcNBijWz2NSishJVa8OGHM= Subject key identifier: 70:CF:2C:E1:4C:6A:0D:3D:DD:C0:B9:35:3C:B8:E8:8E:92:B3:0D:E2 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1445 Signing time: Tue 12 Aug 2025 17:01:50 +0000 Manifest this update: Tue 12 Aug 2025 17:01:50 +0000 Manifest next update: Tue 19 Aug 2025 17:01:50 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: +zDhJWM3I0sC9C0fLQRBhnteZyLjNwtcuHNVLRtw6rc=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5220 (0x1464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Aug 12 17:01:50 2025 GMT Not After : Aug 19 17:01:50 2025 GMT Subject: CN=689b737e-22c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:1e:2e:a6:ff:1d:80:78:a5:b6:cb:39:11: ef:42:fc:99:01:90:7d:b6:2f:d5:90:90:6c:04:5d: 15:32:51:4d:41:bc:11:6d:58:54:26:6c:73:86:36: c6:94:e2:93:8c:20:14:35:97:c7:fe:d4:2c:d0:c4: c6:15:f9:3e:25:dd:53:67:64:c4:92:f3:9c:dd:03: a7:be:13:69:af:2c:2b:30:aa:c2:25:c5:71:bb:81: 40:e0:66:66:4e:da:a6:21:db:34:72:40:8a:2d:65: 64:9f:84:33:5e:35:d7:85:88:0b:87:7c:bc:b8:f0: 2e:9c:9e:83:71:35:31:a6:e0:ee:18:a3:50:7b:0f: f8:a9:13:6b:7b:65:10:5f:14:4e:55:40:ef:04:af: ec:92:71:3a:30:f1:74:69:4f:88:1a:ca:e9:5e:24: 44:b6:92:0b:5b:7d:30:b8:16:00:c9:21:b9:e7:9d: 3d:5d:ee:b4:36:66:2f:42:bb:e5:30:bb:db:ad:64: d5:1f:7f:c0:32:d8:3b:f1:8f:4e:b9:19:37:1a:e1: 72:e3:42:97:93:db:06:7c:5c:f4:4a:ce:89:ce:42: aa:d5:2c:30:57:a6:07:f5:82:b2:dc:a3:1e:70:15: 56:ad:d9:6d:0b:ef:0e:fa:c4:a2:85:b7:b5:2d:fa: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:2C:E1:4C:6A:0D:3D:DD:C0:B9:35:3C:B8:E8:8E:92:B3:0D:E2 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a5:fb:4b:9a:be:17:93:e7:48:5d:38:9f:b6:18:11:e2:47: da:bd:92:ab:31:d4:02:3a:9b:aa:af:4a:73:3e:2d:21:e6:3e: a6:28:77:89:71:30:f3:4a:bb:82:f9:b7:6c:36:b6:c1:6f:40: 79:e8:80:87:ba:f7:7b:83:44:70:ef:a3:d8:60:ab:2b:e4:09: 35:52:42:ab:d7:eb:9c:3a:3a:d2:34:26:1f:f8:1d:d9:3c:a7: 74:a6:55:3a:5d:ad:c1:d1:51:8d:3f:18:04:39:70:f4:db:c2: c8:c6:ca:87:61:7e:d2:42:7f:82:76:34:b6:54:5f:e9:cc:25: 28:d4:d7:66:87:ab:a4:63:fc:59:70:ad:b9:74:00:75:4f:aa: 33:ea:f5:d0:c6:1d:a9:4d:bd:bf:d1:d3:0b:3b:a4:42:c1:81: 39:de:e9:49:b0:4c:f9:b9:ac:a8:99:60:4b:63:81:d2:48:0f: 4f:19:90:7c:29:06:87:fc:ee:17:39:f3:8d:3f:84:72:92:44: 44:40:e0:85:d0:2e:fa:8a:7b:be:f8:b2:4f:0f:cb:41:f2:4b: 15:a9:44:ca:ca:09:dd:53:bf:ce:f6:3d:f1:da:7f:c4:48:99: ce:f6:8e:1d:db:6f:1c:13:bf:95:3c:ca:da:53:a2:56:d4:28: 21:3d:a6:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwODEyMTcwMTUwWhcNMjUwODE5MTcwMTUwWjAYMRYwFAYD VQQDEw02ODliNzM3ZS0yMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKseLqb/HYB4pbbLORHvQvyZAZB9ti/VkJBsBF0VMlFNQbwRbVhUJmxzhjbG lOKTjCAUNZfH/tQs0MTGFfk+Jd1TZ2TEkvOc3QOnvhNprywrMKrCJcVxu4FA4GZm TtqmIds0ckCKLWVkn4QzXjXXhYgLh3y8uPAunJ6DcTUxpuDuGKNQew/4qRNre2UQ XxROVUDvBK/sknE6MPF0aU+IGsrpXiREtpILW30wuBYAySG55509Xe60NmYvQrvl MLvbrWTVH3/AMtg78Y9OuRk3GuFy40KXk9sGfFz0Ss6JzkKq1SwwV6YH9YKy3KMe cBVWrdltC+8O+sSihbe1LfpxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDPLOFM ag093cC5NTy46I6Ssw3iMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWpftLmr4Xk+dIXTifthgR4kfavZKrMdQCOpuqr0pzPi0h5j6mKHeJ cTDzSruC+bdsNrbBb0B56ICHuvd7g0Rw76PYYKsr5Ak1UkKr1+ucOjrSNCYf+B3Z PKd0plU6Xa3B0VGNPxgEOXD028LIxsqHYX7SQn+CdjS2VF/pzCUo1Ndmh6ukY/xZ cK25dAB1T6oz6vXQxh2pTb2/0dMLO6RCwYE53ulJsEz5uayomWBLY4HSSA9PGZB8 KQaH/O4XOfONP4RykkREQOCF0C76inu++LJPD8tB8ksVqUTKygndU7/O9j3x2n/E SJnO9o4d228cE7+VPMraU6JW1CghPabh -----END CERTIFICATE-----Generated at Tue Aug 12 22:55:33 2025 by rpki-client