$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: MT5b7Re2cDAiZStg8T001g5bvEti8xwmKG7NQBchmLA= Subject key identifier: 83:64:59:C1:D2:68:69:B6:27:1D:FB:62:8F:DA:9D:7B:02:6E:A1:E3 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0C65 Signing time: Tue 22 Jul 2025 18:33:27 +0000 Manifest this update: Tue 22 Jul 2025 18:33:27 +0000 Manifest next update: Tue 29 Jul 2025 18:33:27 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: nfU4Yqtmt1rftpWdJLElxxAoGCICtvkJ+UlxGb22KLs=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2GXsJ3lmpDTCyJ0+6RHbUPHuhr06/ng834HAohqlZ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Jul 22 18:33:27 2025 GMT Not After : Jul 29 18:33:27 2025 GMT Subject: CN=687fd977-85ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:6e:41:5f:38:a2:f4:b5:48:d5:4b:4b:e2: 42:85:83:06:58:63:bb:2b:2a:7d:ef:8d:18:20:4e: ea:b4:a2:71:99:ab:16:f7:54:2e:15:0d:99:92:9f: 87:41:ba:45:1c:fd:80:9b:12:ae:ef:0c:88:3e:90: 8e:45:e3:4c:ba:f3:11:34:b3:02:47:c0:fe:aa:e4: 61:34:fb:dd:a9:f1:1d:5e:7d:84:b3:71:d5:b7:41: 3b:a0:8d:90:f4:d8:5c:ce:9c:d2:63:05:d6:c6:0f: 62:5c:b2:9f:6b:6a:e7:cc:8c:90:91:93:bc:34:63: 33:26:24:84:ef:1a:b4:84:03:cd:45:0b:8d:d5:39: 80:a0:06:25:fb:c8:fa:65:60:76:3d:d5:5f:d9:a7: 77:9e:3c:1c:73:2e:44:86:17:a1:05:5c:66:51:3b: 93:69:1b:b3:e5:43:e4:58:8a:89:63:74:75:f6:9f: 77:3e:eb:0a:0f:2c:4b:82:7a:a9:95:22:f0:17:71: 85:81:fc:b4:6a:fb:54:6a:e9:08:99:d1:0c:bb:ab: bb:f0:3c:c7:66:a7:be:a1:84:39:ca:ea:b6:a4:d6: 22:99:ce:00:c2:c6:a8:65:15:02:32:94:94:76:2c: be:9b:5e:ae:e5:e3:0b:a0:53:5f:d3:5e:c5:4c:ff: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:59:C1:D2:68:69:B6:27:1D:FB:62:8F:DA:9D:7B:02:6E:A1:E3 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2d:99:8d:82:f6:85:f8:1d:4f:35:2e:89:02:f0:9e:4c:e1: 30:ce:4e:e0:55:e5:f3:76:66:3e:0a:bb:09:1e:da:13:dd:8c: b7:05:eb:f8:2c:bb:18:1c:bb:0c:ad:da:4f:04:06:1a:fe:1d: bd:f1:4f:ae:d6:59:20:56:63:ac:dd:1f:e3:b1:76:76:6b:6c: 7d:ec:ec:27:39:97:dd:c8:34:6f:2f:2b:c2:ee:40:60:20:48: f8:a8:d7:02:65:3f:ea:cb:47:55:32:1c:df:c1:f8:64:0a:0b: 43:46:2e:78:a0:28:e3:3b:fe:5d:d4:d8:21:6f:20:08:5b:7e: 2e:64:7b:f3:ee:e7:28:02:e5:1e:5a:73:8c:32:ab:6c:65:90: cf:a7:4d:12:f4:fb:f9:0f:28:08:f1:f8:0f:b1:54:b7:c1:66: 7c:5d:ff:96:77:f6:d3:21:bc:54:6b:17:27:b3:9e:05:7d:81: 45:73:73:5b:3a:74:72:2c:c2:51:8e:8c:50:6a:c2:06:b5:93: e2:56:b8:3b:e9:bf:e8:d8:9f:8c:c8:ca:a7:47:89:89:ea:ac: 1d:32:9f:f2:25:ba:d4:ad:7a:3c:f9:5f:65:1f:d4:cd:ce:34: 55:d6:d7:79:12:b7:f0:46:58:20:b5:54:f8:4e:cc:4a:82:24: 18:a8:e3:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUwNzIyMTgzMzI3WhcNMjUwNzI5MTgzMzI3WjAYMRYwFAYD VQQDEw02ODdmZDk3Ny04NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdZuQV84ovS1SNVLS+JChYMGWGO7Kyp9740YIE7qtKJxmasW91QuFQ2Zkp+H QbpFHP2AmxKu7wyIPpCOReNMuvMRNLMCR8D+quRhNPvdqfEdXn2Es3HVt0E7oI2Q 9NhczpzSYwXWxg9iXLKfa2rnzIyQkZO8NGMzJiSE7xq0hAPNRQuN1TmAoAYl+8j6 ZWB2PdVf2ad3njwccy5EhhehBVxmUTuTaRuz5UPkWIqJY3R19p93PusKDyxLgnqp lSLwF3GFgfy0avtUaukImdEMu6u78DzHZqe+oYQ5yuq2pNYimc4AwsaoZRUCMpSU diy+m16u5eMLoFNf017FTP9NTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINkWcHS aGm2Jx37Yo/anXsCbqHjMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLZmNgvaF+B1PNS6JAvCeTOEwzk7gVeXzdmY+CrsJHtoT3Yy3Bev4 LLsYHLsMrdpPBAYa/h298U+u1lkgVmOs3R/jsXZ2a2x97OwnOZfdyDRvLyvC7kBg IEj4qNcCZT/qy0dVMhzfwfhkCgtDRi54oCjjO/5d1NghbyAIW34uZHvz7ucoAuUe WnOMMqtsZZDPp00S9Pv5DygI8fgPsVS3wWZ8Xf+Wd/bTIbxUaxcns54FfYFFc3Nb OnRyLMJRjoxQasIGtZPiVrg76b/o2J+MyMqnR4mJ6qwdMp/yJbrUrXo8+V9lH9TN zjRV1td5ErfwRlggtVT4TsxKgiQYqOMR -----END CERTIFICATE-----Generated at Thu Jul 24 00:27:57 2025 by rpki-client