$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json) Hash identifier: ucRxkue1zQH8CIviMnsqaVOTshiWtxXCSJcjMp563yA= Subject key identifier: 49:E7:06:F5:88:04:6F:9C:15:96:B9:31:7E:1B:DA:F8:3D:DD:78:6B Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft Manifest number: 0339 Signing time: Thu 07 Aug 2025 01:40:17 +0000 Manifest this update: Thu 07 Aug 2025 01:40:17 +0000 Manifest next update: Thu 14 Aug 2025 01:40:17 +0000 Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: ZCTZPWAWSHNytbcTDjcLuSr/hWkNQvp5SrTz3lpaG2I=) 2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: 0uCjW0GPDpZBOo9X1hFG0KRIzIvMOnBTLzlDMrS+8IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Aug 7 01:40:17 2025 GMT Not After : Aug 14 01:40:17 2025 GMT Subject: CN=68940401-0c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:c4:ca:d2:a7:20:aa:6b:92:43:10:93:35: b3:7e:5e:95:6c:60:65:0d:cb:1e:cc:c8:42:57:f7: 87:91:70:eb:97:21:f5:38:10:f4:43:fd:d8:8f:6b: 64:39:31:d9:1a:0f:9a:d6:3b:fe:40:54:9e:e7:12: 6b:80:db:78:b7:09:97:e9:d2:40:60:c2:ae:d8:ae: 0a:63:4c:c5:dc:53:9b:d8:89:ed:cf:dd:51:89:07: 94:c3:33:35:21:fb:c3:17:24:30:71:cc:a2:0f:0a: 6b:a8:f7:9f:1b:9f:1f:ec:95:34:95:e1:f5:74:77: af:d3:17:8a:38:ef:b7:16:56:cd:f4:e7:8b:8b:fb: 8b:cd:28:0d:ad:3d:07:6f:49:af:0c:b5:3f:5e:c6: 2f:1a:b6:f7:e5:ba:fc:ac:c8:9d:3a:4c:61:c1:84: ba:9d:64:b3:07:fa:33:4d:ed:43:04:d7:c7:94:19: 49:2f:83:26:15:e4:7d:fe:e3:67:0f:55:7f:59:70: cd:28:7b:07:74:12:35:e7:f6:10:5d:78:e3:30:90: e3:8e:13:88:6e:12:2b:3b:8f:7c:51:81:f1:6b:4b: d1:a3:71:d8:6d:20:4b:8e:7b:46:6c:ed:fd:c5:2e: 38:f2:a1:67:8c:1c:de:d8:ee:ff:f7:dd:5f:ab:7b: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E7:06:F5:88:04:6F:9C:15:96:B9:31:7E:1B:DA:F8:3D:DD:78:6B X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3e:a3:4b:20:71:0a:bb:fd:79:0c:38:38:02:99:94:b8:c0: 5a:6d:f3:64:e7:78:f5:39:dc:3a:27:d6:65:99:3e:4f:12:c9: d0:4e:bd:6c:3c:87:ae:40:be:59:bc:bf:a1:a9:1d:6e:e6:81: df:1b:b1:5d:0d:8b:57:22:1f:72:94:f8:28:bb:93:ff:6e:6c: e5:3c:9f:9f:77:45:51:0a:da:21:16:ff:a7:ba:3f:66:4d:ee: 04:3a:fa:cb:85:d7:3c:d5:41:69:d6:3f:60:42:2e:e9:ae:3c: 79:4d:ac:5c:fd:4d:1c:06:8e:8e:f4:0d:ab:1a:bc:1f:a6:55: cb:cb:bb:97:f1:08:df:13:e7:ee:6b:f5:cf:41:7f:81:8c:20: 6d:3c:2b:65:8d:6b:e2:85:61:6f:b7:9d:34:62:c8:a5:63:9d: 82:80:35:86:e1:c8:f0:82:d8:a8:2c:1f:35:b3:d6:b6:b3:3a: 00:78:63:83:75:89:65:dc:25:04:93:cf:31:26:8a:f0:f2:b5: 51:b7:de:1d:89:c8:ab:50:46:69:dc:0e:97:16:f5:cb:89:c0: 74:3b:cc:c2:73:58:2d:f8:9c:8c:e1:1d:d3:d5:fd:2f:14:c0: 7a:ae:6e:c6:8b:1b:df:d5:ec:fb:cc:04:d3:64:1e:e5:5a:a8: 87:be:d7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjUwODA3MDE0MDE3WhcNMjUwODE0MDE0MDE3WjAYMRYwFAYD VQQDEw02ODk0MDQwMS0wYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFbEytKnIKprkkMQkzWzfl6VbGBlDcsezMhCV/eHkXDrlyH1OBD0Q/3Yj2tk OTHZGg+a1jv+QFSe5xJrgNt4twmX6dJAYMKu2K4KY0zF3FOb2Intz91RiQeUwzM1 IfvDFyQwccyiDwprqPefG58f7JU0leH1dHev0xeKOO+3FlbN9OeLi/uLzSgNrT0H b0mvDLU/XsYvGrb35br8rMidOkxhwYS6nWSzB/ozTe1DBNfHlBlJL4MmFeR9/uNn D1V/WXDNKHsHdBI15/YQXXjjMJDjjhOIbhIrO498UYHxa0vRo3HYbSBLjntGbO39 xS448qFnjBze2O7/991fq3vk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnnBvWI BG+cFZa5MX4b2vg93XhrMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS WUdTM21STnd6SlpNUFM4NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7PqNLIHEKu/15DDg4ApmUuMBabfNk53j1Odw6J9ZlmT5PEsnQTr1s PIeuQL5ZvL+hqR1u5oHfG7FdDYtXIh9ylPgou5P/bmzlPJ+fd0VRCtohFv+nuj9m Te4EOvrLhdc81UFp1j9gQi7prjx5Taxc/U0cBo6O9A2rGrwfplXLy7uX8QjfE+fu a/XPQX+BjCBtPCtljWvihWFvt500YsilY52CgDWG4cjwgtioLB81s9a2szoAeGOD dYll3CUEk88xJorw8rVRt94dicirUEZp3A6XFvXLicB0O8zCc1gt+JyM4R3T1f0v FMB6rm7Gixvf1ez7zATTZB7lWqiHvtfd -----END CERTIFICATE-----Generated at Fri Aug 8 20:41:07 2025 by rpki-client