$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: JUloPNzjV+1BdfDkNscLeTQ3kg09tBspVMxw0KbviNc= Subject key identifier: A9:7D:13:3E:37:CF:45:AA:E5:1D:5E:D0:A8:B9:AD:C7:C1:79:E4:8E Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 09AF Signing time: Wed 20 Aug 2025 20:05:34 +0000 Manifest this update: Wed 20 Aug 2025 20:05:33 +0000 Manifest next update: Wed 27 Aug 2025 20:05:33 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: rlOtidytjACGPvNKaC7no+olwdOlc5mCvzD86gtIKMY=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Aug 20 20:05:33 2025 GMT Not After : Aug 27 20:05:33 2025 GMT Subject: CN=68a62a8d-94a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:44:16:87:b6:41:63:42:00:c7:9f:6f:e9:a9: c8:32:20:0f:ae:a1:c9:59:62:56:ed:0b:62:3b:67: ff:fc:7b:89:1b:4b:21:c4:ca:2a:da:ad:88:19:87: 59:6e:78:7d:05:a8:6f:a7:0d:53:5e:e1:3a:2e:f1: 95:ad:bb:cf:91:1e:b2:b8:e1:dc:58:9f:6a:6d:81: 42:6b:c8:2b:f2:9a:18:9d:c0:6d:33:8f:99:45:a8: 33:50:48:46:f1:52:6f:d9:de:b8:7e:40:67:64:7a: cc:f8:a5:d5:df:da:d4:90:88:22:46:78:dc:3e:15: fe:f1:19:3a:fe:56:4a:03:6b:d2:63:ea:00:37:41: 16:37:f0:16:a1:61:7d:32:52:73:36:cb:20:2a:08: 8c:d7:b6:9a:ca:ad:33:3c:e3:9b:f2:90:6f:a1:a5: 54:ce:54:a9:77:96:f7:72:f8:cc:d4:d4:cb:58:d6: 16:aa:51:48:c3:b4:8c:68:c4:61:06:cb:b2:46:39: 1f:d7:5f:fc:de:0a:49:cf:81:9e:a8:21:7d:d7:14: 61:4b:8f:30:ad:06:0e:b0:79:c2:80:5a:98:9f:c2: 50:7d:be:a7:a5:5e:77:7d:16:63:bb:46:d2:5d:ac: d6:dd:e7:04:6c:bb:87:84:d9:c4:d6:d1:83:cd:d9: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:13:3E:37:CF:45:AA:E5:1D:5E:D0:A8:B9:AD:C7:C1:79:E4:8E X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:aa:3a:e8:61:71:f9:f1:2d:dd:bb:f1:9e:61:a1:fd:11:22: 66:33:be:cd:f9:d6:21:5d:9f:a8:35:79:85:31:e5:b3:1e:ae: 0c:b1:fe:c4:46:b5:77:fc:e3:90:8c:75:a2:5e:30:cb:26:bb: 2b:d8:3d:98:69:67:8a:34:87:6f:64:76:92:14:e5:25:94:87: e8:b6:45:2a:24:4d:21:66:d5:d8:23:8d:3d:c0:57:43:df:74: 19:3e:cb:e9:20:e5:bf:dd:1c:6d:15:b4:40:b7:11:78:64:ac: 88:a0:fc:44:a5:d0:8e:bb:63:18:5f:a1:02:ba:c7:fa:ba:c7: a3:90:aa:de:1e:9d:85:de:44:a1:fd:ac:36:e8:36:e6:1c:1f: 4e:db:07:93:d5:a7:ea:30:d4:6d:5f:56:94:fc:0b:88:be:40: 0d:bb:0f:cd:9f:6d:ee:fe:99:6b:8f:b9:2f:ad:bc:65:15:bd: 28:7d:22:9f:db:49:2a:dd:e8:41:bf:84:4e:a3:27:58:1b:64: 67:95:9a:1a:ad:d9:85:35:ba:ae:a1:74:00:0f:93:3b:7d:93: 3a:3e:fb:f7:bb:78:40:34:a7:75:8c:3b:b5:93:97:10:0d:05: 39:35:14:fa:73:34:1f:6f:71:74:a7:45:9a:17:43:12:d3:0e: e4:5c:ac:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUwODIwMjAwNTMzWhcNMjUwODI3MjAwNTMzWjAYMRYwFAYD VQQDEw02OGE2MmE4ZC05NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kQWh7ZBY0IAx59v6anIMiAPrqHJWWJW7QtiO2f//HuJG0shxMoq2q2IGYdZ bnh9Bahvpw1TXuE6LvGVrbvPkR6yuOHcWJ9qbYFCa8gr8poYncBtM4+ZRagzUEhG 8VJv2d64fkBnZHrM+KXV39rUkIgiRnjcPhX+8Rk6/lZKA2vSY+oAN0EWN/AWoWF9 MlJzNssgKgiM17aayq0zPOOb8pBvoaVUzlSpd5b3cvjM1NTLWNYWqlFIw7SMaMRh BsuyRjkf11/83gpJz4GeqCF91xRhS48wrQYOsHnCgFqYn8JQfb6npV53fRZju0bS XazW3ecEbLuHhNnE1tGDzdkuTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl9Ez43 z0Wq5R1e0Ki5rcfBeeSOMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqjroYXH58S3du/GeYaH9ESJmM77N+dYhXZ+oNXmFMeWzHq4Msf7E RrV3/OOQjHWiXjDLJrsr2D2YaWeKNIdvZHaSFOUllIfotkUqJE0hZtXYI409wFdD 33QZPsvpIOW/3RxtFbRAtxF4ZKyIoPxEpdCOu2MYX6ECusf6usejkKreHp2F3kSh /aw26DbmHB9O2weT1afqMNRtX1aU/AuIvkANuw/Nn23u/plrj7kvrbxlFb0ofSKf 20kq3ehBv4ROoydYG2RnlZoardmFNbquoXQAD5M7fZM6Pvv3u3hANKd1jDu1k5cQ DQU5NRT6czQfb3F0p0WaF0MS0w7kXKzp -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client