$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: a8prfPwH6jLXOx6uTvyKtQTVBTthUtEPM9H0muz2a4A= Subject key identifier: 60:1A:E6:C9:0E:72:91:02:13:A6:51:E3:20:1D:94:79:60:AA:55:5C Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 16ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 16E2 Signing time: Mon 08 Sep 2025 16:40:00 +0000 Manifest this update: Mon 08 Sep 2025 16:39:59 +0000 Manifest next update: Mon 15 Sep 2025 16:39:59 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: o6itcA8c0KOQkbng421hEwruhnyUUSRiIoM1TaUGwSg=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5869 (0x16ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Sep 8 16:39:59 2025 GMT Not After : Sep 15 16:39:59 2025 GMT Subject: CN=68bf06df-821c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:89:b4:de:dd:07:96:9f:da:93:52:e9:3a: 46:a9:d7:54:eb:ec:4b:ba:15:9f:9e:49:89:39:1e: 09:9f:31:82:f3:f6:0a:c4:a7:f6:d6:06:4f:2d:a0: 31:e6:a0:39:d8:74:c0:ec:f3:24:5a:cd:5a:b2:57: 93:6d:99:99:3c:85:10:48:e1:05:60:d5:32:50:d6: 7f:29:18:d1:d6:fa:41:41:9b:c7:2c:40:0a:bd:9f: 8a:4e:15:57:7f:09:06:8b:e9:18:78:14:c1:f8:5d: 22:e5:5f:d2:88:d2:14:33:6b:10:77:29:1a:0e:7d: 5a:57:b8:c4:df:a4:bd:28:e0:61:a2:13:62:a2:46: 97:33:1e:7c:8b:00:de:2b:ae:19:ca:52:20:cf:ee: c1:26:aa:e3:43:31:93:ca:be:30:3e:e3:c5:ac:6a: 6b:04:e1:33:5e:e2:c0:14:32:3a:06:91:b2:ea:ac: 21:0d:75:65:c0:0a:a6:a8:ba:0c:e4:65:16:1e:87: 38:a9:df:9c:63:5e:59:99:0a:e2:ac:55:31:94:58: 5a:e2:69:40:21:e5:82:44:6b:f3:5f:aa:56:f7:1a: 67:3c:db:88:51:84:c2:bc:46:be:c7:99:9d:a2:1f: 26:07:80:3e:42:eb:48:ad:a9:ec:61:cc:0a:04:c3: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1A:E6:C9:0E:72:91:02:13:A6:51:E3:20:1D:94:79:60:AA:55:5C X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:14:65:0d:8d:9f:a8:8a:b7:10:27:07:0f:33:4a:ce:8b:51: b7:01:61:c1:94:35:44:32:58:ee:da:8e:e9:62:38:a2:43:ee: 5a:65:3e:6a:6e:45:64:88:10:88:df:a6:ef:56:19:52:14:40: 62:a0:9b:81:4f:b7:bc:69:91:ce:44:e5:7c:b8:00:56:0e:85: 03:ed:f6:1a:21:ab:1a:6e:76:9d:0a:95:fa:bf:cd:0c:2c:09: c0:81:e2:4f:57:15:de:4c:ec:02:b2:f4:52:de:b7:7d:72:fb: 5f:50:81:f6:60:0e:f0:3c:6b:f6:eb:db:a7:c5:a8:76:23:ce: 72:fc:d5:da:47:76:4b:65:fe:a0:10:c9:16:a3:ca:6d:96:6e: 48:2a:38:56:9b:11:7d:79:05:ad:87:b7:4a:18:3d:46:86:e3: 5c:16:0d:e7:ce:3c:b1:73:ff:b8:42:66:8d:fb:7b:9b:7c:db: c3:60:59:34:c7:92:dd:d7:b6:97:de:1b:b4:b2:03:59:53:ce: 55:e2:25:39:70:12:58:fd:87:14:7d:4c:3d:cd:ca:40:f7:74: 5e:9e:17:cf:ec:18:f2:7f:49:9b:e4:38:c6:e5:ae:9b:b6:de: 05:8a:9a:71:f7:9b:a2:bc:5e:0e:b6:56:b5:22:ff:3d:e9:e6: d3:52:cb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUwOTA4MTYzOTU5WhcNMjUwOTE1MTYzOTU5WjAYMRYwFAYD VQQDEw02OGJmMDZkZi04MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DqJtN7dB5af2pNS6TpGqddU6+xLuhWfnkmJOR4JnzGC8/YKxKf21gZPLaAx 5qA52HTA7PMkWs1asleTbZmZPIUQSOEFYNUyUNZ/KRjR1vpBQZvHLEAKvZ+KThVX fwkGi+kYeBTB+F0i5V/SiNIUM2sQdykaDn1aV7jE36S9KOBhohNiokaXMx58iwDe K64ZylIgz+7BJqrjQzGTyr4wPuPFrGprBOEzXuLAFDI6BpGy6qwhDXVlwAqmqLoM 5GUWHoc4qd+cY15ZmQrirFUxlFha4mlAIeWCRGvzX6pW9xpnPNuIUYTCvEa+x5md oh8mB4A+QutIransYcwKBMOhnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAa5skO cpECE6ZR4yAdlHlgqlVcMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5FGUNjZ+oircQJwcPM0rOi1G3AWHBlDVEMlju2o7pYjiiQ+5aZT5q bkVkiBCI36bvVhlSFEBioJuBT7e8aZHOROV8uABWDoUD7fYaIasabnadCpX6v80M LAnAgeJPVxXeTOwCsvRS3rd9cvtfUIH2YA7wPGv269unxah2I85y/NXaR3ZLZf6g EMkWo8ptlm5IKjhWmxF9eQWth7dKGD1GhuNcFg3nzjyxc/+4QmaN+3ubfNvDYFk0 x5Ld17aX3hu0sgNZU85V4iU5cBJY/YcUfUw9zcpA93RenhfP7Bjyf0mb5DjG5a6b tt4Fippx95uivF4Otla1Iv896ebTUsuW -----END CERTIFICATE-----Generated at Wed Sep 10 13:07:18 2025 by rpki-client