$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: cH+RX0DJkbvVMvTpmBWsohvG+YuZxnBl+amOtbumIVs= Subject key identifier: 7E:AD:07:D1:B5:C2:92:08:43:A2:B6:B3:26:1E:13:79:94:48:3B:0B Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 16C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 16B6 Signing time: Sat 14 Jun 2025 16:37:22 +0000 Manifest this update: Sat 14 Jun 2025 16:37:22 +0000 Manifest next update: Sat 21 Jun 2025 16:37:22 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: NLprsL94YkN49HZYL72ku87pWe5lq8lFFpZzECmmPd8=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5825 (0x16c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Jun 14 16:37:22 2025 GMT Not After : Jun 21 16:37:22 2025 GMT Subject: CN=684da542-00d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:4d:9e:f1:f4:5c:23:6b:7d:00:9e:4a:d9: 2b:81:41:a2:3d:4d:3f:42:f8:60:89:29:da:dd:b6: 96:40:a7:a2:48:71:a1:ab:59:96:d9:51:bc:98:5d: 54:9d:9b:42:68:cf:22:2a:95:7d:8c:e8:90:04:d0: 9e:44:b4:c6:d5:9f:ce:a2:58:d6:84:69:9b:cf:e4: 5d:ab:86:12:e9:c7:10:27:93:5a:61:02:2c:89:41: e8:11:9e:fb:c8:7b:ba:40:4e:b8:db:d2:87:16:ba: 81:b9:ec:ed:18:a2:cf:e9:97:bd:e0:ca:79:cc:1b: 57:66:e5:c6:b7:0f:44:8f:ee:9d:08:b5:2f:29:63: bd:f4:c5:37:f8:c4:2c:42:6b:f6:18:7d:4e:48:66: 1e:3d:db:84:57:53:1d:82:20:ce:9a:c2:8b:e6:69: ba:1f:1e:db:a3:3e:49:b7:85:7e:2e:f9:33:fc:ac: a1:57:cf:5e:69:21:a1:e7:7a:3f:c1:a9:8f:0a:fa: 95:d3:6b:a0:bc:04:50:ae:97:c9:6d:f8:a8:b6:b6: 3d:5b:f2:c4:33:01:fb:47:a8:ee:76:a3:fe:eb:08: bf:1e:b3:aa:b2:ba:db:27:04:57:c7:21:c4:13:27: 9e:28:be:43:3a:1d:7e:72:29:9d:ae:2d:7d:5d:a8: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:07:D1:B5:C2:92:08:43:A2:B6:B3:26:1E:13:79:94:48:3B:0B X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ae:6d:e4:b1:89:78:82:6a:8d:98:52:5f:94:90:05:ae:fd: c1:00:39:d9:8e:e4:ce:32:8b:02:02:5e:2f:e4:74:cb:99:e4: ee:d6:d6:34:bf:36:14:c1:b1:58:34:d0:80:4e:67:66:ff:c6: 93:81:90:b4:15:10:4c:81:7e:44:9b:92:2e:91:30:d3:9d:a5: 71:f5:64:b4:62:45:11:d0:5c:d8:1f:5b:88:11:30:7a:1d:51: 51:cb:e5:11:b3:90:f1:b7:8e:91:52:f5:bc:3d:5f:b4:0b:96: f2:1c:f9:11:0a:7a:3c:72:41:e3:c8:f7:e7:1c:18:9c:72:be: 82:97:8b:27:fe:67:a7:10:05:7d:70:b0:33:dc:99:5b:15:70: 5b:a6:99:11:e1:6d:64:56:48:3e:6a:57:39:11:50:57:3e:51: 19:f4:f4:b0:a5:e6:57:28:cb:46:af:46:fb:39:28:82:2e:07: 6d:23:df:dd:6b:d3:f3:3b:3d:7b:bc:e4:06:37:07:43:2e:ca: 00:f2:b4:84:5a:16:4a:56:04:47:c2:cf:d9:00:77:e8:60:da: 73:ec:2d:30:12:6b:be:60:7b:87:99:a3:65:ef:52:97:49:0b: 1f:71:0d:49:3b:4f:f6:d0:b4:67:af:77:11:61:fc:72:73:6c: 0c:fb:2a:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUwNjE0MTYzNzIyWhcNMjUwNjIxMTYzNzIyWjAYMRYwFAYD VQQDEw02ODRkYTU0Mi0wMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw49NnvH0XCNrfQCeStkrgUGiPU0/QvhgiSna3baWQKeiSHGhq1mW2VG8mF1U nZtCaM8iKpV9jOiQBNCeRLTG1Z/OoljWhGmbz+Rdq4YS6ccQJ5NaYQIsiUHoEZ77 yHu6QE6429KHFrqBueztGKLP6Ze94Mp5zBtXZuXGtw9Ej+6dCLUvKWO99MU3+MQs Qmv2GH1OSGYePduEV1MdgiDOmsKL5mm6Hx7boz5Jt4V+Lvkz/KyhV89eaSGh53o/ wamPCvqV02ugvARQrpfJbfiotrY9W/LEMwH7R6judqP+6wi/HrOqsrrbJwRXxyHE EyeeKL5DOh1+cimdri19Xaio/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6tB9G1 wpIIQ6K2syYeE3mUSDsLMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVrm3ksYl4gmqNmFJflJAFrv3BADnZjuTOMosCAl4v5HTLmeTu1tY0 vzYUwbFYNNCATmdm/8aTgZC0FRBMgX5Em5IukTDTnaVx9WS0YkUR0FzYH1uIETB6 HVFRy+URs5Dxt46RUvW8PV+0C5byHPkRCno8ckHjyPfnHBiccr6Cl4sn/menEAV9 cLAz3JlbFXBbppkR4W1kVkg+alc5EVBXPlEZ9PSwpeZXKMtGr0b7OSiCLgdtI9/d a9PzOz17vOQGNwdDLsoA8rSEWhZKVgRHws/ZAHfoYNpz7C0wEmu+YHuHmaNl71KX SQsfcQ1JO0/20LRnr3cRYfxyc2wM+ypR -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:51 2025 by rpki-client