$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: 2lEpSrQpfH7YE4SWgGwYcQqJ8gfyLEpPqhPaYYrnlls= Subject key identifier: 80:D2:E1:91:2B:DB:AF:1C:F4:0E:3F:E6:0B:A7:C0:66:C8:BA:F5:B3 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 0185 Signing time: Mon 11 Aug 2025 03:42:16 +0000 Manifest this update: Mon 11 Aug 2025 03:42:15 +0000 Manifest next update: Mon 18 Aug 2025 03:42:15 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: CQIQvQoDr8cldpdMcLCfpWCUOPTLD+crRAYgoTAcrtg=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: k+tzt38gMzmau0c2rmQWNYzVDcpA9LwBPBlXy9g9UUQ=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Aug 11 03:42:15 2025 GMT Not After : Aug 18 03:42:15 2025 GMT Subject: CN=68996698-f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:4f:02:04:55:bc:06:40:b2:c6:fe:44:c1: ac:8c:cf:ef:d3:c1:ce:11:41:d8:6f:ba:94:94:88: eb:aa:13:31:08:4c:21:7f:33:11:94:62:3a:10:aa: f6:da:b2:d9:d0:15:32:68:8b:0d:20:e0:92:93:47: 19:77:7e:aa:1a:d0:e0:74:c9:c3:3c:bb:15:d4:d3: e9:fa:3c:49:97:06:51:0a:d5:c4:dc:27:33:1f:7e: cb:de:fb:16:96:e9:dd:3f:ff:f4:84:1c:41:36:83: b9:56:56:76:4c:53:8b:9c:1b:d3:54:93:03:28:79: 23:0f:7d:aa:b8:ca:27:97:8e:60:08:3c:b6:90:57: 7b:42:20:09:cf:05:14:91:c2:b7:e3:12:cd:02:60: e6:0e:cb:26:7a:ef:be:3b:dc:2e:34:06:34:41:8b: cd:d1:b1:f2:c0:6b:47:7d:23:0c:21:88:e6:d5:77: 11:9a:f9:c0:18:54:8f:97:ab:62:da:a5:14:4b:a1: cb:c8:08:5c:38:f6:31:82:1b:2c:c1:e6:68:3e:52: 27:d2:4d:f9:78:a7:a7:14:91:30:1e:ca:c0:a4:96: 95:a3:5b:7b:1e:ae:e6:64:5c:29:09:6a:6c:10:85: fe:67:79:94:68:f2:63:31:ae:14:32:ed:83:4c:8a: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:E1:91:2B:DB:AF:1C:F4:0E:3F:E6:0B:A7:C0:66:C8:BA:F5:B3 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e2:e3:c3:16:0c:9f:65:a0:21:9d:89:5b:1f:de:43:7c:bc: 2d:05:53:12:31:61:45:2d:6d:60:f1:74:6c:64:08:78:b3:1e: 5e:51:3c:a9:81:b8:37:b4:b5:84:89:2d:cf:51:7e:d4:21:8f: 74:c0:e0:77:81:a3:a2:f9:b2:07:a7:b4:67:b8:95:74:de:d5: 7b:2f:09:e9:0b:5b:0f:65:69:d5:b0:25:b8:c0:24:32:30:c3: ae:89:dc:70:8c:88:aa:56:79:5e:05:9f:dc:4d:82:29:d9:50: e2:dc:26:7b:d8:be:dd:13:38:79:22:08:64:bd:ff:3e:e5:30: c9:78:e8:3b:b7:ce:32:2c:66:a2:22:23:62:14:15:23:78:03: 37:88:a9:ee:86:c8:46:c8:0e:f9:d1:3d:ea:5b:a6:71:ed:68: 83:94:a8:36:40:31:85:75:84:5e:f6:7f:c9:da:1d:dd:52:e0: 54:8e:f7:7e:6f:be:75:71:37:c9:7b:56:9e:c8:60:b7:ab:5d: 4c:a1:e0:09:25:17:94:34:7e:3a:ee:dd:15:42:cc:e7:17:c4: 35:45:e7:95:57:90:1b:0e:5c:b2:4c:e2:ac:08:1e:16:41:74: d1:fd:d6:1c:70:21:4c:40:7e:a6:4b:f3:4e:a7:e6:31:c8:0a: 12:4a:4e:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwODExMDM0MjE1WhcNMjUwODE4MDM0MjE1WjAYMRYwFAYD VQQDEw02ODk5NjY5OC1mMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuBPAgRVvAZAssb+RMGsjM/v08HOEUHYb7qUlIjrqhMxCEwhfzMRlGI6EKr2 2rLZ0BUyaIsNIOCSk0cZd36qGtDgdMnDPLsV1NPp+jxJlwZRCtXE3CczH37L3vsW lundP//0hBxBNoO5VlZ2TFOLnBvTVJMDKHkjD32quMonl45gCDy2kFd7QiAJzwUU kcK34xLNAmDmDssmeu++O9wuNAY0QYvN0bHywGtHfSMMIYjm1XcRmvnAGFSPl6ti 2qUUS6HLyAhcOPYxghssweZoPlIn0k35eKenFJEwHsrApJaVo1t7Hq7mZFwpCWps EIX+Z3mUaPJjMa4UMu2DTIo9ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDS4ZEr 268c9A4/5gunwGbIuvWzMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH4uPDFgyfZaAhnYlbH95DfLwtBVMSMWFFLW1g8XRsZAh4sx5eUTyp gbg3tLWEiS3PUX7UIY90wOB3gaOi+bIHp7RnuJV03tV7LwnpC1sPZWnVsCW4wCQy MMOuidxwjIiqVnleBZ/cTYIp2VDi3CZ72L7dEzh5Ighkvf8+5TDJeOg7t84yLGai IiNiFBUjeAM3iKnuhshGyA750T3qW6Zx7WiDlKg2QDGFdYRe9n/J2h3dUuBUjvd+ b751cTfJe1aeyGC3q11MoeAJJReUNH467t0VQsznF8Q1ReeVV5AbDlyyTOKsCB4W QXTR/dYccCFMQH6mS/NOp+YxyAoSSk4e -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:51 2025 by rpki-client