$ rpki-client -vvf rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft File: dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft (raw, json) Hash identifier: xVLaVC97D++n2umwvBMiPkfye3VH2x6NgLhl8DgTqeg= Subject key identifier: 2F:A9:9E:A5:CD:5D:1A:6B:10:E7:D2:0A:CA:6E:1C:32:2B:80:1C:FE Authority key identifier: 76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D Certificate issuer: /CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft Manifest number: 0434 Signing time: Mon 11 Aug 2025 00:30:25 +0000 Manifest this update: Mon 11 Aug 2025 00:30:25 +0000 Manifest next update: Mon 18 Aug 2025 00:30:25 +0000 Files and hashes: 1: dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl (hash: O4IWZyygs146XYWYlyhtJfDBGRez+k8YhDgUEwO1rUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147526, serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D Validity Not Before: Aug 11 00:30:25 2025 GMT Not After : Aug 18 00:30:25 2025 GMT Subject: CN=689939a1-6b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:fe:de:5e:24:b8:3b:ee:4e:8f:33:81:47: 89:1e:13:37:6d:85:f0:4b:9c:c1:a3:90:91:5e:79: 6d:b2:af:19:f8:e8:c0:37:49:86:ff:48:54:0c:ee: 64:d2:f1:1e:83:48:bf:74:7a:5d:bc:fc:4d:4d:d9: d3:a5:34:7d:df:4a:4f:b0:b0:71:40:15:b5:0c:52: c4:7f:58:28:35:00:48:24:92:29:8b:fd:ba:f9:bb: c9:ef:43:50:5b:8c:f5:65:47:1e:5b:48:da:18:52: e5:47:51:b9:66:e3:fd:9d:a4:82:56:b1:4e:e5:be: 28:04:23:1a:b8:75:14:7a:d2:8c:e3:37:0a:49:78: ef:1b:a1:d4:d1:f9:f5:a3:e3:13:f0:96:12:1a:fb: e1:f9:cf:a9:b7:28:cc:7f:9b:c5:31:c6:50:ca:52: 88:2d:5d:14:88:b8:34:5d:fa:1a:22:d7:8c:04:c8: 21:44:4b:3c:90:f7:ff:87:3f:ce:d9:92:34:b6:42: fb:fd:43:06:2d:27:4e:b0:58:67:8f:07:4a:c1:dd: 5e:82:04:63:61:22:d7:77:aa:28:44:df:69:ae:1b: ce:8d:16:6a:46:db:71:4d:92:de:a3:7c:d7:16:2b: 55:05:1f:5e:84:21:54:b7:6f:47:d2:1b:92:05:47: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:9E:A5:CD:5D:1A:6B:10:E7:D2:0A:CA:6E:1C:32:2B:80:1C:FE X509v3 Authority Key Identifier: keyid:76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:65:85:4a:0b:23:9d:12:63:a2:9b:15:b9:51:48:89:17:a4: 2e:60:35:32:39:af:c2:1a:7d:7d:0b:e1:74:fe:e9:1e:b2:9c: 88:47:09:5f:3c:85:81:56:0f:d7:64:db:29:62:fc:15:c0:44: 45:96:38:ec:9a:b6:22:7d:04:6e:a7:7a:2c:63:19:0e:94:fb: 5c:17:9e:24:30:e2:a7:e7:db:57:7d:36:54:05:60:53:84:8f: d9:01:de:b0:17:a7:df:78:32:e4:9c:f5:55:b6:b7:25:79:5d: e4:6b:cb:3f:24:ec:28:3a:72:d8:ff:b5:93:45:a8:eb:84:8f: 9a:d3:91:9e:7a:cc:e3:2c:a6:7f:a3:a6:39:e2:cf:47:5c:0e: 94:e1:36:8b:5c:58:63:a7:6a:66:73:b6:b5:da:9f:72:e1:ac: fa:8f:70:50:4c:f8:8f:62:a9:c2:6e:cd:0c:b4:6a:93:8d:00: 7a:7f:57:77:ce:65:b4:b7:1d:c1:87:a5:de:1a:50:a3:45:1a: b7:9f:ee:3a:fa:67:79:12:c4:8e:9e:14:78:67:2b:59:ba:dc: 04:33:8c:02:97:b4:44:b1:83:87:8e:26:a1:72:b1:8b:b2:a5: da:21:d5:36:da:ee:75:07:07:f8:29:12:b8:d5:20:3b:2c:e4: f0:84:7f:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1MjYxMTAvBgNVBAUTKDc2REY4NDZFNjU1NEM3MENDQUI3OEI4RjhBNUE3NDYz RTkzMEFDMEQwHhcNMjUwODExMDAzMDI1WhcNMjUwODE4MDAzMDI1WjAYMRYwFAYD VQQDEw02ODk5MzlhMS02Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzv+3l4kuDvuTo8zgUeJHhM3bYXwS5zBo5CRXnltsq8Z+OjAN0mG/0hUDO5k 0vEeg0i/dHpdvPxNTdnTpTR930pPsLBxQBW1DFLEf1goNQBIJJIpi/26+bvJ70NQ W4z1ZUceW0jaGFLlR1G5ZuP9naSCVrFO5b4oBCMauHUUetKM4zcKSXjvG6HU0fn1 o+MT8JYSGvvh+c+ptyjMf5vFMcZQylKILV0UiLg0XfoaIteMBMghREs8kPf/hz/O 2ZI0tkL7/UMGLSdOsFhnjwdKwd1eggRjYSLXd6ooRN9prhvOjRZqRttxTZLeo3zX FitVBR9ehCFUt29H0huSBUf8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+pnqXN XRprEOfSCspuHDIrgBz+MB8GA1UdIwQYMBaAFHbfhG5lVMcMyreLj4padGPpMKwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzUyNi80QjE0OTU0ODc0 NEMxMUVDOUI1ODMwN0FDNEY5QUUwMi9kdC1FYm1WVXh3ekt0NHVQaWxwMFkta3dy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0LUVibVZVeHd6S3Q0dVBpbHAwWS1rd3JBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzUyNi80QjE0OTU0ODc0NEMxMUVDOUI1ODMwN0FDNEY5QUUwMi9kdC1FYm1WVXh3 ekt0NHVQaWxwMFkta3dyQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuZYVKCyOdEmOimxW5UUiJF6QuYDUyOa/CGn19C+F0/ukespyIRwlf PIWBVg/XZNspYvwVwERFljjsmrYifQRup3osYxkOlPtcF54kMOKn59tXfTZUBWBT hI/ZAd6wF6ffeDLknPVVtrcleV3ka8s/JOwoOnLY/7WTRajrhI+a05GeeszjLKZ/ o6Y54s9HXA6U4TaLXFhjp2pmc7a12p9y4az6j3BQTPiPYqnCbs0MtGqTjQB6f1d3 zmW0tx3Bh6XeGlCjRRq3n+46+md5EsSOnhR4ZytZutwEM4wCl7REsYOHjiahcrGL sqXaIdU22u51Bwf4KRK41SA7LOTwhH/T -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:16 2025 by rpki-client