$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: hC0NTsNzguAAZTU166trnaDg1CL9z6/G5/qZbX+SAUs= Subject key identifier: C1:87:29:9A:B4:98:C3:4C:9F:DA:7B:8E:CC:8E:83:03:54:41:75:33 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 0129 Signing time: Mon 21 Jul 2025 04:44:50 +0000 Manifest this update: Mon 21 Jul 2025 04:44:50 +0000 Manifest next update: Mon 28 Jul 2025 04:44:50 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: 6QIa2SwFpoB9D8erdwlmq4vvMm8jzitl3MLPVl5WyIE=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Jul 21 04:44:50 2025 GMT Not After : Jul 28 04:44:50 2025 GMT Subject: CN=687dc5c2-a4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:93:80:d3:7a:53:a9:2a:61:9b:7e:ea:9a: d7:ab:af:a2:64:1f:97:85:03:ee:10:f2:e6:e8:e3: 62:64:2a:23:62:32:b5:56:de:aa:e4:aa:35:d5:38: 44:24:41:82:fb:32:ca:c4:af:78:63:50:88:d1:71: 0d:c4:6c:a1:d2:d7:e8:cc:74:50:38:dc:3a:8c:88: eb:15:ed:71:3e:8c:fe:ae:77:0d:92:bf:68:3c:d2: d4:61:5e:28:8a:df:fa:76:cb:16:ef:34:74:60:06: dd:d0:92:72:1c:10:a8:e5:92:89:87:44:2e:ee:81: 74:bb:86:97:9a:bb:33:bd:52:f5:a9:ac:68:61:1a: 3d:4c:2e:c5:f7:46:d6:ba:61:7b:03:cd:0b:cb:ec: 7b:e0:60:51:d1:db:dd:e0:4f:e2:70:c9:f7:7e:17: f6:99:44:87:db:98:f8:f6:8e:3e:93:3a:5f:d1:ae: e6:ed:75:b6:a7:ad:40:2a:00:42:b4:15:9e:48:2a: 8d:8e:ac:40:41:3a:71:c8:0f:83:67:20:91:89:21: d2:04:d2:db:30:7e:af:41:b9:7f:63:48:72:9d:46: 55:24:e6:1e:0a:89:75:5b:1f:3a:4f:75:9b:cb:38: 11:09:16:f5:45:b3:23:32:9a:73:cf:5f:93:af:da: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:29:9A:B4:98:C3:4C:9F:DA:7B:8E:CC:8E:83:03:54:41:75:33 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:b3:69:d9:95:81:8d:f5:f6:5b:93:cd:42:30:eb:22:9f:10: 6d:f5:3a:59:d7:34:43:1e:11:b2:ba:a4:a3:fc:f4:52:21:d8: a2:65:7b:89:9d:52:77:56:a6:10:97:04:90:85:d8:ae:09:10: 87:d6:d5:4a:d4:08:74:fc:ab:ce:be:82:75:6b:1b:ce:41:bf: 9c:d1:93:ab:7d:0a:44:83:42:2e:03:91:30:e3:de:35:a9:4e: 56:30:28:d5:2e:a2:53:32:2c:c3:74:11:16:c3:c1:71:c7:99: 3d:52:cb:36:b7:84:f9:a6:bc:85:f8:75:52:06:d6:fd:d6:df: c3:11:fe:01:7b:ca:f9:76:01:9d:f7:7e:70:45:30:b1:d1:97: cb:6f:b8:ec:7f:69:f9:c2:85:e1:39:ba:ac:5e:a3:4a:34:50: 70:4a:2f:2e:83:97:2e:6b:fd:a8:77:ad:58:ae:60:ce:24:8a: 9b:d9:c6:5d:d0:ff:80:7e:0e:0d:5c:4c:04:3c:61:da:75:e4: 5e:48:32:8f:9b:b2:a3:df:d0:bf:d4:8c:cb:eb:7a:a7:0b:44: 07:0f:de:2a:3b:4a:a5:70:69:7f:1e:27:db:02:3b:ca:da:75: 3c:3b:d3:2d:30:b6:55:6b:90:5d:8c:0a:e9:70:5b:a8:1a:87: a3:a0:0c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUwNzIxMDQ0NDUwWhcNMjUwNzI4MDQ0NDUwWjAYMRYwFAYD VQQDEw02ODdkYzVjMi1hNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJaTgNN6U6kqYZt+6prXq6+iZB+XhQPuEPLm6ONiZCojYjK1Vt6q5Ko11ThE JEGC+zLKxK94Y1CI0XENxGyh0tfozHRQONw6jIjrFe1xPoz+rncNkr9oPNLUYV4o it/6dssW7zR0YAbd0JJyHBCo5ZKJh0Qu7oF0u4aXmrszvVL1qaxoYRo9TC7F90bW umF7A80Ly+x74GBR0dvd4E/icMn3fhf2mUSH25j49o4+kzpf0a7m7XW2p61AKgBC tBWeSCqNjqxAQTpxyA+DZyCRiSHSBNLbMH6vQbl/Y0hynUZVJOYeCol1Wx86T3Wb yzgRCRb1RbMjMppzz1+Tr9oaswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGHKZq0 mMNMn9p7jsyOgwNUQXUzMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDus2nZlYGN9fZbk81CMOsinxBt9TpZ1zRDHhGyuqSj/PRSIdiiZXuJ nVJ3VqYQlwSQhdiuCRCH1tVK1Ah0/KvOvoJ1axvOQb+c0ZOrfQpEg0IuA5Ew4941 qU5WMCjVLqJTMizDdBEWw8Fxx5k9Uss2t4T5pryF+HVSBtb91t/DEf4Be8r5dgGd 935wRTCx0ZfLb7jsf2n5woXhObqsXqNKNFBwSi8ug5cua/2od61YrmDOJIqb2cZd 0P+Afg4NXEwEPGHadeReSDKPm7Kj39C/1IzL63qnC0QHD94qO0qlcGl/HifbAjvK 2nU8O9MtMLZVa5BdjArpcFuoGoejoAzE -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:26 2025 by rpki-client