$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: r4GT4RPiiUNJy4mHUieR3RzF/LLoZO04kXYOCNu2wRw= Subject key identifier: DE:04:42:EB:60:84:08:BC:B8:06:1D:FC:C4:FC:E8:AB:4F:05:18:1D Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 16DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 16D3 Signing time: Sun 10 Aug 2025 16:38:19 +0000 Manifest this update: Sun 10 Aug 2025 16:38:18 +0000 Manifest next update: Sun 17 Aug 2025 16:38:18 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: E5RtfRtjCvhnL+3mRlQHT/e7Yx1W6CH/uEOz8bzoZw8=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 16:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5854 (0x16de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Aug 10 16:38:18 2025 GMT Not After : Aug 17 16:38:18 2025 GMT Subject: CN=6898cafb-ce7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:d3:44:52:9e:b5:d9:0e:5b:c1:31:eb:0d: 96:fb:9f:b4:78:51:bf:75:bc:0b:f4:9d:9f:33:ae: 16:c6:fe:91:81:03:a8:27:ce:51:fb:a1:56:89:1c: 9a:f0:cd:bf:11:07:92:aa:68:61:b5:01:1e:96:cd: 15:7e:e0:9a:51:8e:ce:c6:b2:60:37:2b:c9:a7:f9: bf:af:16:7f:14:3e:75:96:3a:05:ba:b1:ad:e6:46: af:80:5c:66:f8:25:54:ea:65:2a:43:d4:f1:12:73: 77:c9:d2:fe:a6:fe:10:8c:3e:3e:6c:d8:b3:3b:cc: e9:f5:3c:e8:45:f0:b5:77:11:95:ef:b5:54:eb:8c: b4:b7:f9:82:c3:d6:92:05:ce:f5:26:cf:74:97:87: 2b:d0:f7:97:78:1a:4b:4c:50:cd:82:79:e4:0f:0c: 28:ff:ee:45:7a:f6:0e:2a:8c:52:d2:87:9f:76:a9: 1b:28:36:25:1f:4f:d7:c5:04:34:37:d4:91:0c:3f: a1:ad:7f:40:1e:7a:b9:6b:e3:ac:96:3d:1b:e0:be: 0a:c5:aa:20:cb:c1:cb:c3:60:6f:dd:c3:0e:5f:00: d4:c0:46:62:fb:bb:d1:89:01:14:d3:a0:ff:c2:71: 21:49:4c:0e:22:bf:4f:3e:08:b8:5e:b4:d8:38:93: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:42:EB:60:84:08:BC:B8:06:1D:FC:C4:FC:E8:AB:4F:05:18:1D X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e0:ff:a0:b7:a3:79:f8:c9:d4:20:04:3c:bf:34:59:0e:31: 91:9a:b5:8a:a2:3c:f4:64:72:df:8d:16:f3:c8:8e:9d:48:5a: 96:d2:c9:3b:8f:ad:c6:da:d0:79:c9:c8:20:e5:0e:63:5d:ad: c8:24:15:5b:da:54:3d:f9:66:a9:bc:6c:68:87:1d:26:25:5e: 9b:dc:8c:6b:52:d3:b0:01:a2:f2:e9:91:9f:89:cc:7e:b5:17: a5:e0:e1:9f:8a:27:6d:50:2a:bf:ea:c7:5e:e3:4d:86:84:9c: f9:82:31:de:d0:29:fe:25:4d:e7:bf:b1:d1:16:49:02:69:1f: 64:d1:ee:bd:c3:7e:24:2f:a9:1a:02:8e:a2:0a:7f:b2:c8:19: 8f:a3:89:f5:0f:f7:97:63:32:d9:07:00:46:86:3f:9f:51:43: 57:b1:d3:e7:ae:72:24:35:24:b4:c8:25:ef:a9:c3:ee:f4:5e: b6:55:d0:d3:01:b5:5b:7d:59:f5:8c:5d:bf:33:bd:69:30:25: 63:d5:71:ed:d9:a3:58:b6:88:b5:97:aa:01:bc:a7:58:f1:39: fb:e1:78:4d:37:b1:2f:f6:41:c0:d4:4a:7d:dc:72:a4:22:33: 61:43:b8:88:69:eb:19:7e:db:0c:e7:bb:c3:f0:30:11:05:74: 94:1e:3d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUwODEwMTYzODE4WhcNMjUwODE3MTYzODE4WjAYMRYwFAYD VQQDEw02ODk4Y2FmYi1jZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyPTRFKetdkOW8Ex6w2W+5+0eFG/dbwL9J2fM64Wxv6RgQOoJ85R+6FWiRya 8M2/EQeSqmhhtQEels0VfuCaUY7OxrJgNyvJp/m/rxZ/FD51ljoFurGt5kavgFxm +CVU6mUqQ9TxEnN3ydL+pv4QjD4+bNizO8zp9TzoRfC1dxGV77VU64y0t/mCw9aS Bc71Js90l4cr0PeXeBpLTFDNgnnkDwwo/+5FevYOKoxS0oefdqkbKDYlH0/XxQQ0 N9SRDD+hrX9AHnq5a+Oslj0b4L4Kxaogy8HLw2Bv3cMOXwDUwEZi+7vRiQEU06D/ wnEhSUwOIr9PPgi4XrTYOJPuOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4EQutg hAi8uAYd/MT86KtPBRgdMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr4P+gt6N5+MnUIAQ8vzRZDjGRmrWKojz0ZHLfjRbzyI6dSFqW0sk7 j63G2tB5ycgg5Q5jXa3IJBVb2lQ9+WapvGxohx0mJV6b3IxrUtOwAaLy6ZGficx+ tRel4OGfiidtUCq/6sde402GhJz5gjHe0Cn+JU3nv7HRFkkCaR9k0e69w34kL6ka Ao6iCn+yyBmPo4n1D/eXYzLZBwBGhj+fUUNXsdPnrnIkNSS0yCXvqcPu9F62VdDT AbVbfVn1jF2/M71pMCVj1XHt2aNYtoi1l6oBvKdY8Tn74XhNN7Ev9kHA1Ep93HKk IjNhQ7iIaesZftsM57vD8DARBXSUHj08 -----END CERTIFICATE-----Generated at Tue Aug 12 13:51:21 2025 by rpki-client