$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: 3qSAJvj3Nka56sACyWW13zYXLEQ96vJJs+toirIWddM= Subject key identifier: BA:24:90:7F:6E:5D:1B:1F:0F:C5:86:F5:DE:46:ED:5F:1C:98:24:D4 Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 0491 Signing time: Fri 25 Jul 2025 00:21:44 +0000 Manifest this update: Fri 25 Jul 2025 00:21:43 +0000 Manifest next update: Fri 01 Aug 2025 00:21:43 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: A0k/cVk6vV6cEy3dP8FLvDZEob7ldnNQxBQjC1OAOJ4=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 00:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: Jul 25 00:21:43 2025 GMT Not After : Aug 1 00:21:43 2025 GMT Subject: CN=6882ce18-b2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:bb:49:c4:9e:f5:43:91:87:6b:11:d8:26: 41:0c:f3:99:04:4d:dc:0e:b9:a3:a4:e2:e4:3d:38: 90:e1:43:86:94:fb:3e:08:7d:34:88:3a:30:ea:fd: 3e:b8:bf:73:8c:19:24:20:cf:0d:99:67:ee:00:22: 27:2d:02:c1:2d:1e:0d:8d:71:6e:11:99:cb:99:27: 91:ea:44:69:8a:18:d1:30:fe:cb:4f:1b:bc:43:1d: 4b:82:84:c4:45:f4:19:66:c5:d8:af:c8:95:66:17: 95:71:ca:ba:80:6e:79:ef:29:23:aa:26:3e:59:a1: c6:c0:32:6c:4d:34:3b:db:7d:a8:1d:76:6a:49:10: 29:e1:34:3d:04:63:19:6b:1d:9b:20:76:a2:6d:ab: ed:17:24:6c:b1:ef:48:4c:36:af:61:15:f6:b1:1b: 07:4c:66:d7:63:3e:e0:a3:b8:6f:d2:22:d0:b1:a2: 48:df:cc:d6:fb:c1:cb:1a:fe:79:1d:73:f1:bd:41: 82:58:ae:1e:89:f9:4f:0f:65:90:04:90:49:e5:cb: 24:09:5d:a1:df:05:95:c2:e9:26:78:11:05:75:07: 78:9a:1a:c7:7a:64:d1:65:4f:e1:2d:5b:52:4f:fe: 3f:f6:be:3d:b4:e7:96:80:0f:03:7b:49:a8:fe:1c: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:24:90:7F:6E:5D:1B:1F:0F:C5:86:F5:DE:46:ED:5F:1C:98:24:D4 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e9:71:3e:33:29:e7:8f:c8:f3:0a:9d:38:c8:d9:61:2b:75: 2c:f7:14:fc:af:d0:3d:e7:9a:15:3f:a2:de:2f:3b:e0:b0:08: 09:69:15:d6:50:35:b1:18:91:b9:16:2c:ab:0b:86:bb:dc:0a: 33:bb:5a:cc:dc:96:a1:16:df:d9:a4:16:fb:c3:1a:f3:4a:e1: c3:29:bb:db:d6:ea:f3:7e:19:1d:b1:6b:29:3a:62:d7:7f:e3: 87:f6:27:20:5e:e7:aa:3f:c6:75:29:fb:bc:d9:d2:fa:be:32: c3:0e:d0:3c:77:23:bb:95:cf:c4:96:c4:77:cf:d2:73:84:ee: a7:09:6a:44:20:2d:25:08:c8:59:f6:5a:76:c2:a2:e6:d1:fd: 38:d2:69:02:c3:a4:d2:42:6c:c2:b7:0e:c2:1b:52:66:17:b1: 5a:aa:15:11:07:47:7e:04:0c:fb:19:54:24:ea:72:13:61:07: 60:9d:88:75:57:c1:40:df:62:1a:8c:8b:ca:b0:89:1a:43:16: a7:f2:60:01:11:30:2b:5a:12:76:f2:bd:c3:ae:04:96:60:25: bf:f8:91:79:18:3a:95:c8:3d:92:df:6d:ec:fb:44:56:77:28: 21:cd:16:e0:1c:27:36:3e:8c:2e:4f:71:33:72:cd:de:e3:b5: 86:e7:d7:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUwNzI1MDAyMTQzWhcNMjUwODAxMDAyMTQzWjAYMRYwFAYD VQQDEw02ODgyY2UxOC1iMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeW7ScSe9UORh2sR2CZBDPOZBE3cDrmjpOLkPTiQ4UOGlPs+CH00iDow6v0+ uL9zjBkkIM8NmWfuACInLQLBLR4NjXFuEZnLmSeR6kRpihjRMP7LTxu8Qx1LgoTE RfQZZsXYr8iVZheVccq6gG557ykjqiY+WaHGwDJsTTQ7232oHXZqSRAp4TQ9BGMZ ax2bIHaibavtFyRsse9ITDavYRX2sRsHTGbXYz7go7hv0iLQsaJI38zW+8HLGv55 HXPxvUGCWK4eiflPD2WQBJBJ5cskCV2h3wWVwukmeBEFdQd4mhrHemTRZU/hLVtS T/4/9r49tOeWgA8De0mo/hwoBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLokkH9u XRsfD8WG9d5G7V8cmCTUMB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc6XE+Mynnj8jzCp04yNlhK3Us9xT8r9A955oVP6LeLzvgsAgJaRXW UDWxGJG5FiyrC4a73Aozu1rM3JahFt/ZpBb7wxrzSuHDKbvb1urzfhkdsWspOmLX f+OH9icgXueqP8Z1Kfu82dL6vjLDDtA8dyO7lc/ElsR3z9JzhO6nCWpEIC0lCMhZ 9lp2wqLm0f040mkCw6TSQmzCtw7CG1JmF7FaqhURB0d+BAz7GVQk6nITYQdgnYh1 V8FA32IajIvKsIkaQxan8mABETArWhJ28r3DrgSWYCW/+JF5GDqVyD2S323s+0RW dyghzRbgHCc2PowuT3Ezcs3e47WG59dT -----END CERTIFICATE-----Generated at Sat Jul 26 00:55:02 2025 by rpki-client