$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: TLromuZ0kBTLnRJ/SQx2nsMZiOWJtReasVFjpJXy/gU= Subject key identifier: 3E:AA:A5:54:A1:BE:C3:CC:C6:CB:6F:9B:BF:57:4F:1D:79:86:94:EE Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 146A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 144B Signing time: Sun 24 Aug 2025 16:53:36 +0000 Manifest this update: Sun 24 Aug 2025 16:53:36 +0000 Manifest next update: Sun 31 Aug 2025 16:53:36 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: T95Lo3cHJTKmBC3GabKr3jCXuYt6TdUa/Cd+owVSL7o=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Aug 24 16:53:36 2025 GMT Not After : Aug 31 16:53:36 2025 GMT Subject: CN=68ab4390-ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:94:0a:61:42:8e:f8:97:d3:4f:57:8f:11: 7d:66:8b:6e:23:95:6d:f1:19:de:04:e8:45:6a:24: e8:75:23:0d:76:22:79:2f:ed:ed:ca:f0:31:65:1e: 41:21:48:17:63:33:8b:f7:f4:df:bc:4f:67:c7:fe: 09:f9:09:07:3f:ca:ef:8e:11:5a:25:92:5b:67:88: 08:e2:ff:b1:ae:6d:86:e1:ad:2e:fc:ac:e3:cd:99: c4:a6:2a:02:2f:a5:98:88:ea:cb:b5:43:4d:b8:02: 51:a8:fd:ea:45:77:fb:af:00:bb:ff:99:2f:f7:ce: 2d:c4:7b:f7:8d:c3:a8:1c:71:7b:03:c4:c9:82:c3: 50:d7:58:fc:9b:b4:e4:75:79:35:11:6f:1c:e6:b2: b7:14:9f:4c:cc:22:cb:59:1b:ca:f3:30:31:3f:1a: b4:3c:c8:bb:0b:17:ca:90:d1:09:19:d7:bb:de:e4: 04:0d:93:66:83:e0:ac:fc:9c:9a:d0:c1:9f:00:09: 01:cf:65:45:79:b7:63:ad:ce:61:cd:1a:0f:62:e5: d4:b6:92:0c:64:c8:d4:c5:b5:59:4d:b7:2c:02:65: 0e:e8:67:8d:17:fa:98:64:e3:e0:e4:b5:b5:7b:b8: af:a2:c4:45:c1:7e:ba:1e:7f:d8:4c:81:4b:cc:ab: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:A5:54:A1:BE:C3:CC:C6:CB:6F:9B:BF:57:4F:1D:79:86:94:EE X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:30:d4:0f:bc:3a:0c:4e:b3:9f:f9:8a:d6:60:5d:b7:df:9e: 7b:05:7f:f2:2e:48:b4:72:b5:68:8b:11:f8:af:e5:f4:0a:79: 86:c5:7c:e1:be:69:e2:b0:e2:37:87:84:1b:82:cb:a9:0c:bb: c2:7c:56:56:ac:a5:61:c9:04:8d:49:59:8d:5a:89:52:9d:1d: 1c:50:f5:94:07:83:12:28:f1:e6:70:db:9d:62:e3:ef:6e:19: 8d:d3:69:c4:f0:5b:6d:d2:15:4b:44:5f:9d:a8:98:3b:31:32: 09:c5:15:5f:68:6a:b7:cd:cc:08:39:6f:43:a7:1c:4b:7c:08: 33:fb:10:60:84:97:6c:ed:1f:ce:f6:68:b8:bf:e0:8b:f2:32: 05:89:cf:9f:84:b6:95:55:fb:62:c5:cd:79:2a:c2:e4:5c:9a: 49:8b:68:4c:49:71:b4:f3:4d:9d:09:8e:c9:e3:83:e6:42:7e: 77:4d:a6:14:03:11:02:6a:31:ab:6c:ac:a7:5a:52:9a:c9:d8: 7f:d5:f6:87:73:c5:34:91:93:f8:39:8f:ac:58:21:fc:6c:64: f9:56:be:2d:86:48:e6:3a:a5:0c:b6:9d:fc:b9:f4:85:99:b3: 52:8f:2b:0e:71:8f:5e:60:72:0e:33:03:de:a6:a7:85:43:33: 6b:2c:51:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwODI0MTY1MzM2WhcNMjUwODMxMTY1MzM2WjAYMRYwFAYD VQQDEw02OGFiNDM5MC1lYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7OUCmFCjviX009XjxF9ZotuI5Vt8RneBOhFaiTodSMNdiJ5L+3tyvAxZR5B IUgXYzOL9/TfvE9nx/4J+QkHP8rvjhFaJZJbZ4gI4v+xrm2G4a0u/KzjzZnEpioC L6WYiOrLtUNNuAJRqP3qRXf7rwC7/5kv984txHv3jcOoHHF7A8TJgsNQ11j8m7Tk dXk1EW8c5rK3FJ9MzCLLWRvK8zAxPxq0PMi7CxfKkNEJGde73uQEDZNmg+Cs/Jya 0MGfAAkBz2VFebdjrc5hzRoPYuXUtpIMZMjUxbVZTbcsAmUO6GeNF/qYZOPg5LW1 e7ivosRFwX66Hn/YTIFLzKtlxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6qpVSh vsPMxstvm79XTx15hpTuMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGMNQPvDoMTrOf+YrWYF233557BX/yLki0crVoixH4r+X0CnmGxXzh vmnisOI3h4QbgsupDLvCfFZWrKVhyQSNSVmNWolSnR0cUPWUB4MSKPHmcNudYuPv bhmN02nE8Ftt0hVLRF+dqJg7MTIJxRVfaGq3zcwIOW9DpxxLfAgz+xBghJds7R/O 9mi4v+CL8jIFic+fhLaVVftixc15KsLkXJpJi2hMSXG0802dCY7J44PmQn53TaYU AxECajGrbKynWlKaydh/1faHc8U0kZP4OY+sWCH8bGT5Vr4thkjmOqUMtp38ufSF mbNSjysOcY9eYHIOMwPepqeFQzNrLFEL -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:15 2025 by rpki-client