$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: R5n0Cf/c0jPlOWKRfzaAiOU9fWKA3FsSzr6zpFrFz0o= Subject key identifier: 22:14:1A:5F:AD:0D:3F:D1:F0:8D:2F:E2:9D:49:A9:29:C9:A8:A1:D0 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D2E Signing time: Tue 22 Jul 2025 18:13:08 +0000 Manifest this update: Tue 22 Jul 2025 18:13:07 +0000 Manifest next update: Tue 29 Jul 2025 18:13:07 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: e8QEWXgpqYr8E2/oukToXGlO+4zA1Nmo6FYdbuneo+E=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3390 (0xd3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Jul 22 18:13:07 2025 GMT Not After : Jul 29 18:13:07 2025 GMT Subject: CN=687fd4b4-dfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:ff:b8:32:ab:d8:24:f6:55:44:3b:da:aa: 7f:16:62:7a:a7:b9:71:51:ab:12:49:4b:02:87:ff: 1e:bb:18:56:82:17:38:cd:25:0f:90:68:bd:4c:4e: 3c:d2:70:eb:30:48:30:92:76:7f:24:1e:02:37:35: 43:dc:7c:2d:18:da:a5:60:80:28:73:75:7c:2c:93: 8a:b2:3a:96:02:ca:74:e4:ed:78:9c:12:64:c9:2d: db:c0:08:34:90:71:07:ea:dc:a6:f3:cd:eb:bd:c6: ec:53:b6:c4:82:ff:8d:e8:9a:18:ce:61:2f:86:66: 5c:7e:5d:42:46:93:5a:01:97:98:34:78:9f:0e:bc: 9a:41:79:5e:3f:73:22:8f:04:56:f3:60:fb:2a:2d: 59:e8:7f:c8:f8:f1:03:18:e1:2f:09:d9:4d:c4:57: a7:82:5b:d4:f5:af:6b:e1:55:5e:98:b7:ef:2b:25: 4d:d8:0b:35:c0:50:04:9a:35:b3:c2:80:0c:e2:0e: 8e:c0:d8:f3:ab:d2:6c:96:e2:3d:36:c2:c4:0c:dd: 09:79:48:f7:3b:a3:ea:a7:51:13:55:4f:68:bb:0b: 29:2d:92:5d:ce:62:90:2c:3c:d0:db:c2:3a:5d:ca: 97:be:bc:b3:91:32:83:4a:30:2a:89:b1:44:ff:b6: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:14:1A:5F:AD:0D:3F:D1:F0:8D:2F:E2:9D:49:A9:29:C9:A8:A1:D0 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9d:e3:b2:64:06:10:62:15:dd:fd:96:99:9c:2b:bc:fe:22: 1b:ac:14:c9:b0:55:a9:9f:2f:63:5d:d4:75:eb:3f:be:5e:b9: 0b:81:a4:87:77:5b:70:b5:cd:55:ba:b3:d3:78:4f:bd:62:4e: 57:f5:a1:95:cc:be:c9:df:a6:80:ac:3e:cf:ba:32:15:32:79: 96:79:dc:f7:39:a9:17:15:8e:7e:44:12:0b:37:e7:24:37:91: f5:51:54:9f:dd:94:1b:9f:8c:27:71:62:ba:cd:f5:13:b9:28: 0a:4b:08:2f:48:38:fe:1a:79:6a:36:d8:9e:e8:ce:6e:5c:aa: e1:f9:af:c3:46:9b:ac:b7:f7:e5:02:23:fa:50:98:ec:4d:5d: d0:30:c6:2b:80:91:27:5b:ab:df:79:ac:9e:da:42:e7:10:b2: 55:f2:02:54:be:6a:0d:f1:30:b9:67:c2:1d:8a:44:67:89:fe: 20:09:a2:dd:ce:6f:d8:97:bb:2a:de:04:3b:33:c1:00:1b:48: 22:87:0c:c9:bc:e3:b1:62:25:82:f8:4b:c0:e2:11:31:da:e5: 96:26:2b:9c:f9:d6:c1:f1:88:08:db:f5:c9:ef:d1:7f:cd:08: b5:53:61:cd:f8:5a:30:34:67:41:75:6b:13:04:88:38:66:9d: 1c:65:c7:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNzIyMTgxMzA3WhcNMjUwNzI5MTgxMzA3WjAYMRYwFAYD VQQDEw02ODdmZDRiNC1kZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszr/uDKr2CT2VUQ72qp/FmJ6p7lxUasSSUsCh/8euxhWghc4zSUPkGi9TE48 0nDrMEgwknZ/JB4CNzVD3HwtGNqlYIAoc3V8LJOKsjqWAsp05O14nBJkyS3bwAg0 kHEH6tym883rvcbsU7bEgv+N6JoYzmEvhmZcfl1CRpNaAZeYNHifDryaQXleP3Mi jwRW82D7Ki1Z6H/I+PEDGOEvCdlNxFenglvU9a9r4VVemLfvKyVN2As1wFAEmjWz woAM4g6OwNjzq9JsluI9NsLEDN0JeUj3O6Pqp1ETVU9ouwspLZJdzmKQLDzQ28I6 XcqXvryzkTKDSjAqibFE/7bNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIUGl+t DT/R8I0v4p1JqSnJqKHQMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtneOyZAYQYhXd/ZaZnCu8/iIbrBTJsFWpny9jXdR16z++XrkLgaSH d1twtc1VurPTeE+9Yk5X9aGVzL7J36aArD7PujIVMnmWedz3OakXFY5+RBILN+ck N5H1UVSf3ZQbn4wncWK6zfUTuSgKSwgvSDj+GnlqNtie6M5uXKrh+a/DRpust/fl AiP6UJjsTV3QMMYrgJEnW6vfeaye2kLnELJV8gJUvmoN8TC5Z8IdikRnif4gCaLd zm/Yl7sq3gQ7M8EAG0gihwzJvOOxYiWC+EvA4hEx2uWWJiuc+dbB8YgI2/XJ79F/ zQi1U2HN+FowNGdBdWsTBIg4Zp0cZcfu -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:53 2025 by rpki-client