$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: FKSDgyyY5eg2uFpqnkhWcfujXRE2cVWfAjWdv+Qczs0= Subject key identifier: AE:69:59:4F:95:6B:47:C9:AC:A9:BF:86:CB:75:6A:6F:09:FB:BF:24 Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 03D0 Signing time: Sat 09 Aug 2025 01:08:13 +0000 Manifest this update: Sat 09 Aug 2025 01:08:13 +0000 Manifest next update: Sat 16 Aug 2025 01:08:13 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: /HWJupyUfor9an9OJp0S1vqosufasMZWvdDx45APDh8=) 2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: qw+A+BnLOmGwGidGoi7dHOK2xbb/S+TCMScy/km8BDQ=) 3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: n+2sXe4f0iVt9C4wbyP1cXDc9FlPGl6NGcrzJRe+w7U=) 4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: u6+Gbtl2iv9JRXTumN5Ye5SMQrPpCaTXinSOYRqNVkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Aug 9 01:08:13 2025 GMT Not After : Aug 16 01:08:13 2025 GMT Subject: CN=68969f7d-4c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:4d:81:7b:67:2c:ab:93:9f:b5:c6:0f:a1: 6a:d6:dc:15:7a:41:c4:e8:7e:2f:f1:ab:18:0f:a1: c8:b4:d3:28:e5:6a:c3:9a:7b:5a:68:eb:ff:76:e4: 0f:bc:9c:61:ec:ea:99:3b:bd:95:4e:e1:3d:d7:42: 2f:6b:09:08:8c:49:51:33:3f:f8:c4:4e:48:fa:64: bb:d1:29:46:54:d2:d3:00:bf:cc:c4:e4:60:94:b5: de:c0:77:58:a0:12:e4:1a:3c:1c:27:55:05:4a:bf: a2:7b:f0:40:42:93:c4:b7:7e:58:6e:bf:3b:62:b1: 8b:bd:8c:1c:31:57:f2:9d:44:38:6e:8b:46:31:e0: 04:2a:79:a3:63:46:6d:cd:1b:1a:6d:2f:7d:c2:f7: 60:67:a0:fe:53:47:d6:12:33:fe:18:6e:a3:26:8e: ed:1a:13:b8:1c:b4:c6:88:4c:82:12:c1:4c:98:a5: 80:af:56:8c:5e:a6:20:fb:e7:88:eb:e5:4c:1d:aa: 3e:2c:da:cc:62:ac:35:e7:47:fc:15:18:77:9d:b9: 3e:93:d3:50:ec:97:45:eb:9d:fe:bd:a4:ef:9a:00: 90:db:d4:0e:bd:2a:96:3a:e7:39:de:fd:a6:4b:0c: e2:8b:17:2a:84:f6:bf:d0:e3:11:cf:6e:6e:15:2b: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:59:4F:95:6B:47:C9:AC:A9:BF:86:CB:75:6A:6F:09:FB:BF:24 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c7:ee:9d:9d:47:3a:db:b6:03:4f:7c:a5:a1:d6:47:b1:6a: 68:c6:32:a8:cc:89:bd:b3:60:d5:79:ab:e4:d6:cc:68:dd:87: 4b:e2:f6:7d:31:4f:43:7a:6d:7b:c2:0b:d1:70:6f:67:c7:43: 7a:cc:cd:c8:d9:47:68:de:b0:00:a8:89:6b:87:5d:f0:bd:a4: 26:e8:b1:79:a1:fe:d6:ae:0e:1b:4c:64:01:71:50:d8:32:08: 5b:fe:b5:c2:3a:76:5b:a5:15:fe:1f:3a:4c:b1:76:01:83:06: a0:e3:fd:8a:b7:a4:c3:cd:67:0e:8e:62:12:83:78:8d:b0:71: 63:98:4d:2c:03:28:b6:50:6e:37:6f:32:73:41:72:de:4a:3f: ba:c8:e4:3a:d4:e9:29:54:8e:4d:1a:f3:d4:9a:a6:44:07:68: 85:e3:52:0e:04:66:f4:c7:3f:ec:15:19:4e:4c:09:8f:f5:62: d9:cf:dd:c2:f1:84:0f:51:03:3f:a6:ec:1c:6d:34:26:87:67: 6e:ac:00:4a:85:37:45:14:ea:d7:ba:24:02:8b:b6:33:63:bc: e6:c4:8b:a2:27:d6:9e:5b:ca:ac:69:ab:11:6c:49:1d:53:fe: 0d:f5:b2:6c:21:21:09:3e:f8:3e:cf:44:d3:6d:9d:a8:fe:e8: eb:58:30:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjUwODA5MDEwODEzWhcNMjUwODE2MDEwODEzWjAYMRYwFAYD VQQDEw02ODk2OWY3ZC00YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7pNgXtnLKuTn7XGD6Fq1twVekHE6H4v8asYD6HItNMo5WrDmntaaOv/duQP vJxh7OqZO72VTuE910IvawkIjElRMz/4xE5I+mS70SlGVNLTAL/MxORglLXewHdY oBLkGjwcJ1UFSr+ie/BAQpPEt35Ybr87YrGLvYwcMVfynUQ4botGMeAEKnmjY0Zt zRsabS99wvdgZ6D+U0fWEjP+GG6jJo7tGhO4HLTGiEyCEsFMmKWAr1aMXqYg++eI 6+VMHao+LNrMYqw150f8FRh3nbk+k9NQ7JdF653+vaTvmgCQ29QOvSqWOuc53v2m SwziixcqhPa/0OMRz25uFSs/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5pWU+V a0fJrKm/hst1am8J+78kMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApx+6dnUc627YDT3ylodZHsWpoxjKozIm9s2DVeavk1sxo3YdL4vZ9 MU9Dem17wgvRcG9nx0N6zM3I2Udo3rAAqIlrh13wvaQm6LF5of7Wrg4bTGQBcVDY Mghb/rXCOnZbpRX+HzpMsXYBgwag4/2Kt6TDzWcOjmISg3iNsHFjmE0sAyi2UG43 bzJzQXLeSj+6yOQ61OkpVI5NGvPUmqZEB2iF41IOBGb0xz/sFRlOTAmP9WLZz93C 8YQPUQM/puwcbTQmh2durABKhTdFFOrXuiQCi7YzY7zmxIuiJ9aeW8qsaasRbEkd U/4N9bJsISEJPvg+z0TTbZ2o/ujrWDA3 -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:12 2025 by rpki-client