$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: pSZnLYWVhiPQpXlW/MdgudYuSSK9nnX08R4SlW8mKkw= Subject key identifier: D8:01:51:2B:7A:45:37:DC:99:53:60:F7:C4:5C:22:77:F2:18:E9:8A Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 03C5 Signing time: Sat 19 Jul 2025 01:04:07 +0000 Manifest this update: Sat 19 Jul 2025 01:04:06 +0000 Manifest next update: Sat 26 Jul 2025 01:04:06 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: 0Y4NnB7L00CjotIImXBgPq9P9baMjohxQmYn0j0Ac9s=) 2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: qw+A+BnLOmGwGidGoi7dHOK2xbb/S+TCMScy/km8BDQ=) 3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: n+2sXe4f0iVt9C4wbyP1cXDc9FlPGl6NGcrzJRe+w7U=) 4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: u6+Gbtl2iv9JRXTumN5Ye5SMQrPpCaTXinSOYRqNVkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Jul 19 01:04:06 2025 GMT Not After : Jul 26 01:04:06 2025 GMT Subject: CN=687aef07-4937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:8e:6c:58:81:d6:54:17:f4:73:e9:43:ee: 16:37:f4:60:c1:1f:1b:21:1e:3a:8e:ef:92:74:57: 68:30:11:bb:93:bc:62:e2:fa:cb:c0:12:6b:e2:f0: 5a:f9:22:36:be:2b:de:33:d6:0f:4b:db:65:68:32: ef:ed:fa:47:f1:74:2b:30:51:82:33:07:e1:8d:1c: 70:45:1c:fe:07:a8:61:f6:b1:4c:bc:45:eb:52:c6: 3b:78:8f:3d:bd:7f:a0:2e:e3:a2:70:6a:58:f5:ec: cf:f7:4a:05:9b:35:00:ce:d7:c4:89:6b:83:89:dd: a3:85:bb:64:4c:0c:2f:67:99:c6:24:0d:6d:dd:02: 2e:b1:bb:df:ce:88:39:62:9d:55:c5:c3:7c:09:a9: 54:71:b3:98:aa:59:36:99:54:fe:09:dd:5f:77:53: 29:75:6d:26:59:3a:76:e4:3d:9b:e0:52:d7:e3:c3: 8c:b5:95:2a:62:0b:82:03:7e:9e:a1:18:10:84:94: a1:3b:7a:12:b0:ee:ca:bd:41:ec:90:d4:ee:19:f6: 02:91:d8:ff:4a:f8:a9:13:9d:2f:3f:a3:f2:1b:d6: 3c:a0:64:a0:46:de:7c:57:be:97:00:70:10:7a:49: 7f:4e:2e:22:6b:0c:a7:91:f0:c4:c5:bd:6c:44:51: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:51:2B:7A:45:37:DC:99:53:60:F7:C4:5C:22:77:F2:18:E9:8A X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:8f:ff:48:d2:5e:3b:21:eb:b3:ac:42:ce:f7:c5:44:be:a6: e3:2f:c0:11:d5:33:7d:cf:82:b8:dc:bb:8d:2f:f7:bb:07:e4: 3f:9f:c1:78:b6:2f:fb:7f:9b:ba:a7:8c:52:c5:db:39:d3:b2: 64:dd:bf:19:15:c4:0e:af:8f:c4:0e:c0:64:9a:b1:33:76:7f: 28:23:e9:fe:7c:8e:e5:ab:f0:14:79:b5:6e:83:1e:22:f6:de: 5c:1c:e9:7e:34:ba:b1:03:8f:bf:05:89:4e:a3:8a:73:f7:a5: 5e:c2:55:8b:cf:07:7d:45:21:6a:72:02:c9:f0:74:f4:e8:3c: 8e:41:57:d3:27:2e:6c:f2:0a:7d:4d:03:ed:c8:52:01:15:ef: 37:a2:4a:7a:be:c4:aa:5b:93:ba:c1:c2:01:62:36:4a:40:14: ed:ca:56:2c:34:d3:d4:b2:b6:11:f4:fd:67:d6:3d:5e:03:11: f2:ad:f2:aa:c9:7c:46:0c:e8:e3:a5:6a:be:56:e3:50:c0:1c: 84:b2:9e:61:74:01:6f:76:cf:ac:08:f7:1f:07:60:b7:bb:b2: 26:4a:fa:16:5e:7c:3a:a3:dc:44:fb:e4:79:26:61:99:7e:5c: 00:00:13:29:90:ce:19:1d:e9:2e:ea:65:be:06:b2:8d:61:e3: 8a:96:88:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjUwNzE5MDEwNDA2WhcNMjUwNzI2MDEwNDA2WjAYMRYwFAYD VQQDEw02ODdhZWYwNy00OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIGObFiB1lQX9HPpQ+4WN/RgwR8bIR46ju+SdFdoMBG7k7xi4vrLwBJr4vBa +SI2viveM9YPS9tlaDLv7fpH8XQrMFGCMwfhjRxwRRz+B6hh9rFMvEXrUsY7eI89 vX+gLuOicGpY9ezP90oFmzUAztfEiWuDid2jhbtkTAwvZ5nGJA1t3QIusbvfzog5 Yp1VxcN8CalUcbOYqlk2mVT+Cd1fd1MpdW0mWTp25D2b4FLX48OMtZUqYguCA36e oRgQhJShO3oSsO7KvUHskNTuGfYCkdj/SvipE50vP6PyG9Y8oGSgRt58V76XAHAQ ekl/Ti4iawynkfDExb1sRFGzlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgBUSt6 RTfcmVNg98RcInfyGOmKMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmj/9I0l47IeuzrELO98VEvqbjL8AR1TN9z4K43LuNL/e7B+Q/n8F4 ti/7f5u6p4xSxds507Jk3b8ZFcQOr4/EDsBkmrEzdn8oI+n+fI7lq/AUebVugx4i 9t5cHOl+NLqxA4+/BYlOo4pz96VewlWLzwd9RSFqcgLJ8HT06DyOQVfTJy5s8gp9 TQPtyFIBFe83okp6vsSqW5O6wcIBYjZKQBTtylYsNNPUsrYR9P1n1j1eAxHyrfKq yXxGDOjjpWq+VuNQwByEsp5hdAFvds+sCPcfB2C3u7ImSvoWXnw6o9xE++R5JmGZ flwAABMpkM4ZHeku6mW+BrKNYeOKlohI -----END CERTIFICATE-----Generated at Sun Jul 20 07:58:01 2025 by rpki-client