$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: q52XTtZ6HtIdD7La0DNimFi0eHn1jaJJ73YfWy1R/pA= Subject key identifier: 8F:E7:A2:F4:13:1A:89:59:CC:87:52:B5:06:59:54:E6:0B:25:7D:EF Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: D0 Signing time: Thu 07 Aug 2025 06:13:39 +0000 Manifest this update: Thu 07 Aug 2025 06:13:39 +0000 Manifest next update: Thu 14 Aug 2025 06:13:39 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: P6IZkj4G1DrKQ65pYlxPi3kZK2CB1Ohu6Z+ukvOQCvk=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Aug 7 06:13:39 2025 GMT Not After : Aug 14 06:13:39 2025 GMT Subject: CN=68944413-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:27:b9:cf:90:70:11:9f:a4:90:28:6f:60:c2: 8c:73:97:b9:35:67:33:20:82:09:55:98:29:58:60: 36:4c:83:29:ea:03:f8:40:3d:23:ba:f1:8a:d4:ad: 01:d8:04:ec:7c:b2:40:21:35:f9:c8:0a:17:16:bd: af:22:e2:27:e3:1d:e3:2d:34:51:b0:25:88:a0:e2: 87:57:37:69:33:e4:cb:a2:b9:12:54:16:27:4e:f3: c6:87:9d:4d:58:39:98:74:50:be:19:11:db:09:10: a1:22:95:aa:7c:8c:03:27:b4:30:08:d9:c7:0f:f8: ef:fa:89:d9:8d:2f:d2:0f:d7:2f:a0:08:2f:64:13: 46:e6:98:e4:c0:b3:6e:a0:60:b7:b2:59:4d:68:77: ca:96:57:35:e8:73:6a:78:ec:30:e0:b1:7f:dd:41: 75:a7:09:6b:39:a9:cb:a6:54:5c:b6:1a:a4:36:02: 95:84:bd:2c:1e:af:8e:63:ad:f9:ea:0f:66:7b:6e: 40:db:a7:9d:40:dc:16:c3:c3:fc:1c:4e:e3:13:b7: 91:01:5b:82:72:0e:f5:b9:12:91:74:ac:05:24:f6: 94:a0:28:e3:11:db:bc:48:2f:af:20:2c:6c:27:79: 82:89:24:a9:ff:67:59:b5:43:cf:e8:5b:39:ce:27: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:A2:F4:13:1A:89:59:CC:87:52:B5:06:59:54:E6:0B:25:7D:EF X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9e:04:76:65:d4:19:1e:19:1f:29:40:c1:90:ee:bb:40:b3: 49:63:9b:0e:e6:3c:9d:2e:1d:06:1f:46:af:c8:e1:98:70:b9: c3:0b:6f:23:54:f6:0f:6d:61:e7:3d:de:e1:22:dd:41:bb:f9: 66:00:ae:18:95:8b:d9:66:98:45:19:87:7d:a0:de:07:0b:fe: 03:ae:2b:25:1d:27:3f:13:80:4a:9b:c9:05:b7:bb:b8:7a:a5: 68:2a:c2:ad:6e:b3:60:15:32:32:34:12:67:ee:99:cc:32:e4: d5:a4:c3:63:dc:87:e9:4e:90:b0:e5:7c:79:31:12:40:c5:64: 92:8f:11:53:bd:0d:59:21:cc:b7:aa:c0:c2:48:33:13:da:a6: 3a:09:7e:f7:56:fb:da:6a:93:c9:e3:7e:03:ed:7f:3a:cb:29: 78:cf:45:b5:9b:4a:6d:c3:60:0b:74:ac:14:93:76:f3:53:8b: d7:44:f2:a2:23:cc:b5:e7:28:1f:19:8a:c9:19:19:26:83:aa: 73:05:c1:ca:c3:c6:d4:bf:68:94:ab:a9:01:84:31:96:c0:be: a1:3a:99:e3:09:40:86:3a:86:9d:c1:c0:60:60:2d:5f:53:d6: ec:8d:9c:a9:7f:ad:70:8b:1d:ed:50:36:05:fb:96:23:50:9c: c8:b1:c9:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUwODA3MDYxMzM5WhcNMjUwODE0MDYxMzM5WjAYMRYwFAYD VQQDEw02ODk0NDQxMy01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Ce5z5BwEZ+kkChvYMKMc5e5NWczIIIJVZgpWGA2TIMp6gP4QD0juvGK1K0B 2ATsfLJAITX5yAoXFr2vIuIn4x3jLTRRsCWIoOKHVzdpM+TLorkSVBYnTvPGh51N WDmYdFC+GRHbCRChIpWqfIwDJ7QwCNnHD/jv+onZjS/SD9cvoAgvZBNG5pjkwLNu oGC3sllNaHfKllc16HNqeOww4LF/3UF1pwlrOanLplRcthqkNgKVhL0sHq+OY635 6g9me25A26edQNwWw8P8HE7jE7eRAVuCcg71uRKRdKwFJPaUoCjjEdu8SC+vICxs J3mCiSSp/2dZtUPP6Fs5zicilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/novQT GolZzIdStQZZVOYLJX3vMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYngR2ZdQZHhkfKUDBkO67QLNJY5sO5jydLh0GH0avyOGYcLnDC28j VPYPbWHnPd7hIt1Bu/lmAK4YlYvZZphFGYd9oN4HC/4DrislHSc/E4BKm8kFt7u4 eqVoKsKtbrNgFTIyNBJn7pnMMuTVpMNj3IfpTpCw5Xx5MRJAxWSSjxFTvQ1ZIcy3 qsDCSDMT2qY6CX73VvvaapPJ434D7X86yyl4z0W1m0ptw2ALdKwUk3bzU4vXRPKi I8y15ygfGYrJGRkmg6pzBcHKw8bUv2iUq6kBhDGWwL6hOpnjCUCGOoadwcBgYC1f U9bsjZypf61wix3tUDYF+5YjUJzIscky -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:06 2025 by rpki-client