$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json) Hash identifier: DpEGo80bHS522TqMs0hpuabW8L+ltbxtzFi82SDjMZg= Subject key identifier: 02:1F:D4:CE:3B:1A:F9:6A:F3:51:7C:1F:06:C2:5A:57:76:66:EF:5F Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 14:57:16 +0000 Manifest this update: Fri 22 Aug 2025 14:57:15 +0000 Manifest next update: Fri 29 Aug 2025 14:57:15 +0000 Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: GvISB9d0umx5ibwH5OC8NHCMKRMWaFgNTZRrW4X+N0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Validity Not Before: Aug 22 14:57:15 2025 GMT Not After : Aug 29 14:57:15 2025 GMT Subject: CN=68a8854c-625f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:a7:63:cb:45:53:e7:77:f5:24:c2:85:ff: df:8c:38:48:25:27:07:e1:9d:f0:ec:e4:a4:4e:24: 7f:93:a9:cf:df:65:7a:6b:58:99:af:57:19:b6:10: 42:65:35:57:22:93:a9:37:8c:b4:64:69:55:6f:86: aa:ba:26:48:27:55:37:2d:5d:2d:b9:61:2e:ab:30: 18:c0:22:ff:76:9a:1c:f5:09:05:f6:cf:77:42:9d: 76:83:e9:88:1b:e5:7c:a0:a3:49:4b:eb:f6:a6:23: 29:1c:eb:54:6b:57:5d:36:fa:2a:61:55:2c:e7:8f: 46:89:4b:d9:4e:0f:aa:6b:a6:19:4e:2b:c8:e1:55: c6:64:de:b7:26:2b:20:bf:e3:14:c4:02:ba:70:3b: b4:7a:8f:9d:d5:97:49:9a:54:c0:75:83:87:3e:31: fa:81:95:96:55:7f:43:6b:53:a5:72:d6:9a:4d:0e: c1:7e:a6:f2:96:bf:e7:ee:ba:49:b0:51:a7:c7:ba: 55:1f:e9:e3:b4:5c:db:ba:53:e1:b8:bc:f9:90:be: af:b2:84:1b:5d:83:c4:d3:57:df:ee:07:66:43:e5: 27:17:23:bc:64:3a:94:9a:c9:17:88:73:d9:53:5d: d0:02:8b:16:85:97:5d:d6:64:71:e1:0c:2a:1a:67: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:D4:CE:3B:1A:F9:6A:F3:51:7C:1F:06:C2:5A:57:76:66:EF:5F X509v3 Authority Key Identifier: keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:10:6b:74:26:37:75:6b:38:53:e2:4f:e2:4e:e7:fa:06: f1:c7:2e:d7:ff:65:58:bd:72:87:d9:89:59:2f:bf:de:75:f5: 26:99:a9:2a:fe:26:30:e9:ec:45:b8:15:45:97:f4:3a:52:53: 00:e0:d1:c7:6d:52:18:b5:f0:c2:e7:9c:8d:d8:b3:25:4e:50: f7:a5:4c:b1:22:e9:34:ed:ad:19:63:2c:eb:49:94:88:fe:69: ad:c7:de:10:2d:b9:61:98:b1:62:45:5c:1c:1e:6a:bc:1c:49: 41:44:3b:38:57:c1:21:72:3c:9d:5f:5e:30:e3:cb:4b:58:c9: 9b:08:e8:fe:35:13:0c:54:74:81:d0:33:29:5b:90:f6:19:a3: 6a:aa:b2:d2:7e:38:25:0d:58:20:05:15:27:51:c1:ca:7d:26: 4b:6f:b8:46:85:39:71:57:b7:5a:ed:a9:c7:c5:77:70:9e:a4: e4:62:3c:2f:d0:53:07:fe:c2:98:88:3b:37:95:a2:00:3a:84: 7b:13:25:16:8e:fd:52:99:52:aa:36:fb:07:3c:66:98:59:da: 84:60:8e:cd:6d:9a:a8:52:a4:20:d0:34:d2:a1:5c:b5:02:18: 88:a8:52:db:c6:ca:7e:23:d5:45:7b:a7:f5:d5:a3:91:a2:06: 8f:bd:f6:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5 MkQ5RTZFQzMwHhcNMjUwODIyMTQ1NzE1WhcNMjUwODI5MTQ1NzE1WjAYMRYwFAYD VQQDEw02OGE4ODU0Yy02MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncqnY8tFU+d39STChf/fjDhIJScH4Z3w7OSkTiR/k6nP32V6a1iZr1cZthBC ZTVXIpOpN4y0ZGlVb4aquiZIJ1U3LV0tuWEuqzAYwCL/dpoc9QkF9s93Qp12g+mI G+V8oKNJS+v2piMpHOtUa1ddNvoqYVUs549GiUvZTg+qa6YZTivI4VXGZN63Jisg v+MUxAK6cDu0eo+d1ZdJmlTAdYOHPjH6gZWWVX9Da1OlctaaTQ7Bfqbylr/n7rpJ sFGnx7pVH+njtFzbulPhuLz5kL6vsoQbXYPE01ff7gdmQ+UnFyO8ZDqUmskXiHPZ U13QAosWhZdd1mRx4QwqGmcXOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIf1M47 Gvlq81F8HwbCWld2Zu9fMB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkxxBrdCY3dWs4U+JP4k7n+gbxxy7X/2VYvXKH2YlZL7/edfUmmakq /iYw6exFuBVFl/Q6UlMA4NHHbVIYtfDC55yN2LMlTlD3pUyxIuk07a0ZYyzrSZSI /mmtx94QLblhmLFiRVwcHmq8HElBRDs4V8EhcjydX14w48tLWMmbCOj+NRMMVHSB 0DMpW5D2GaNqqrLSfjglDVggBRUnUcHKfSZLb7hGhTlxV7da7anHxXdwnqTkYjwv 0FMH/sKYiDs3laIAOoR7EyUWjv1SmVKqNvsHPGaYWdqEYI7NbZqoUqQg0DTSoVy1 AhiIqFLbxsp+I9VFe6f11aORogaPvfZc -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:38 2025 by rpki-client