$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft File: dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json) Hash identifier: GbvD9KvCrzuJFnzK4CelUQ6F//+LviPEckDJa+m4Vc4= Subject key identifier: E0:F2:6C:93:C7:22:7A:41:07:90:C4:68:BB:B8:F1:DF:21:9D:4E:F2 Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E Certificate issuer: /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft Manifest number: 0C72 Signing time: Wed 02 Jul 2025 18:50:49 +0000 Manifest this update: Wed 02 Jul 2025 18:50:48 +0000 Manifest next update: Wed 09 Jul 2025 18:50:48 +0000 Files and hashes: 1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: vHVRcvKRIs5etnTXCZFofZw4icRX7lSkM0PKk4Ax3ps=) 2: 6AAE9EC03C6D11F0890C1546C4F9AE02.roa (hash: Fjs0TU9gzU04QRaG0LDDD3BWVYWiyk2BOJBnhSA8Uzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Validity Not Before: Jul 2 18:50:48 2025 GMT Not After : Jul 9 18:50:48 2025 GMT Subject: CN=68657f89-0c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:be:7c:0f:32:e9:9c:eb:e5:13:a9:c3:e1: 9c:62:54:38:ae:83:ab:30:42:9d:b6:19:2a:17:44: 45:12:bc:d1:15:1e:52:84:fd:76:4a:e2:74:cb:2e: 1a:c4:d4:fd:83:3e:3d:68:41:de:0c:19:83:41:52: 4a:7c:ee:21:e3:6f:d9:76:2f:e2:22:b7:fa:cf:e6: ac:ae:ef:4c:07:37:b2:38:3d:23:f1:30:e0:36:47: 53:00:01:71:72:4b:ff:f5:e1:6e:17:8b:7a:e7:cb: e4:ad:31:ea:b6:e5:d0:b8:29:ee:31:df:bc:51:50: 47:e0:5c:7b:4f:1f:18:f3:c1:85:0c:2d:43:e7:6c: 5b:68:c2:02:54:c0:d6:6d:6a:b7:e6:08:9a:c2:11: a6:3f:2a:21:1b:50:39:f6:f0:44:33:9b:19:ef:82: e4:b6:6a:f5:29:ba:5b:9d:95:ba:51:45:27:57:53: 59:56:eb:4f:ed:ed:4e:8c:e0:e1:ed:4d:73:a5:b5: 3b:2f:2b:20:f6:06:48:3f:f2:ae:d0:85:f1:85:9d: 8c:c5:d1:e5:19:02:d1:28:0b:ef:6a:7b:7c:1e:d0: c0:71:ab:cf:2b:32:c6:ea:ae:dc:65:b0:14:ba:05: 0b:10:eb:8b:62:8c:4c:f6:02:92:fd:37:40:b0:16: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:6C:93:C7:22:7A:41:07:90:C4:68:BB:B8:F1:DF:21:9D:4E:F2 X509v3 Authority Key Identifier: keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7c:d1:69:26:bb:d9:22:8b:2a:5a:3b:cc:a4:ba:c6:b2:b9: b7:7f:c7:9f:a0:03:bd:16:a9:4b:cd:86:3f:e7:c8:6f:44:ac: 70:ec:5c:a5:8d:33:2f:90:c9:ec:c2:db:da:dc:bc:37:97:6d: 02:84:1c:54:ef:ae:05:0e:5c:be:f5:8e:6d:78:72:36:d0:c5: 7f:4f:83:ff:25:e4:73:75:c4:a0:0a:8c:2f:b9:79:b7:d8:42: 80:b8:4f:86:cc:b5:8b:8c:a3:de:64:79:30:b9:52:6f:9e:b9: ae:81:07:15:d7:3d:66:5e:b0:8b:6e:de:d6:7b:3f:2c:e3:c6: b0:3a:39:d3:e7:f7:ce:23:12:69:c9:6e:ca:98:a9:a1:f4:39: 82:77:29:47:42:4a:67:ec:0f:07:1c:9d:90:e7:57:c7:ef:03: 93:10:7b:99:68:96:42:e2:91:37:ec:2b:d1:10:68:3f:75:7c: 58:cf:29:f8:2d:71:12:8e:c4:d4:0f:3e:5a:11:09:ec:8e:38: 75:74:73:6f:c3:12:a7:65:b9:c2:19:c5:a5:1e:a2:69:fd:67: e3:8f:77:75:f2:54:41:03:9e:50:b3:af:af:9e:bb:51:71:f1: ff:f3:49:cd:83:60:08:37:ea:64:a1:cc:11:80:8f:5f:4c:f9: ea:41:4e:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTAxMDExMC8GA1UEBRMoNzUxQThCM0Q1QjYyRTgxRjQ2QTRDN0JENDY5NUJGM0E4 MDY5Q0EzRTAeFw0yNTA3MDIxODUwNDhaFw0yNTA3MDkxODUwNDhaMBgxFjAUBgNV BAMTDTY4NjU3Zjg5LTBjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK5758DzLpnOvlE6nD4ZxiVDiug6swQp22GSoXREUSvNEVHlKE/XZK4nTLLhrE 1P2DPj1oQd4MGYNBUkp87iHjb9l2L+Iit/rP5qyu70wHN7I4PSPxMOA2R1MAAXFy S//14W4Xi3rny+StMeq25dC4Ke4x37xRUEfgXHtPHxjzwYUMLUPnbFtowgJUwNZt arfmCJrCEaY/KiEbUDn28EQzmxnvguS2avUpuludlbpRRSdXU1lW60/t7U6M4OHt TXOltTsvKyD2Bkg/8q7QhfGFnYzF0eUZAtEoC+9qe3we0MBxq88rMsbqrtxlsBS6 BQsQ64tijEz2ApL9N0CwFgrXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4PJsk8ci ekEHkMRou7jx3yGdTvIwHwYDVR0jBBgwFoAUdRqLPVti6B9GpMe9RpW/OoBpyj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MDEwLzZBN0U5NDBBMEMz QTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5R3BNZTlScFdfT29CcHlq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFJxTFBWdGk2QjlHcE1lOVJwV19Pb0JweWo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MDEwLzZBN0U5NDBBMEMzQTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5 R3BNZTlScFdfT29CcHlqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABF80Wkmu9kiiypaO8ykusayubd/x5+gA70WqUvNhj/nyG9ErHDsXKWN My+QyezC29rcvDeXbQKEHFTvrgUOXL71jm14cjbQxX9Pg/8l5HN1xKAKjC+5ebfY QoC4T4bMtYuMo95keTC5Um+eua6BBxXXPWZesItu3tZ7PyzjxrA6OdPn984jEmnJ bsqYqaH0OYJ3KUdCSmfsDwccnZDnV8fvA5MQe5lolkLikTfsK9EQaD91fFjPKfgt cRKOxNQPPloRCeyOOHV0c2/DEqdlucIZxaUeomn9Z+OPd3XyVEEDnlCzr6+eu1Fx 8f/zSc2DYAg36mShzBGAj19M+epBTmU= -----END CERTIFICATE-----Generated at Wed Jul 2 23:11:26 2025 by rpki-client