$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: Aby1OP9de6GyD/bkiovIwj4G28kk3iVsl6EnWjh5wQ8= Subject key identifier: 3C:BE:D2:CD:EB:AA:ED:C4:49:7D:86:91:45:E0:79:88:8F:3F:69:73 Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 0442 Signing time: Sat 23 Aug 2025 00:31:35 +0000 Manifest this update: Sat 23 Aug 2025 00:31:35 +0000 Manifest next update: Sat 30 Aug 2025 00:31:35 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: ZizqY8tCnCYCJwUAOAj9xQTN/sBGVTFgBFmdqhYKIGQ=) 2: 79B9645874F911F0BD52962FC4F9AE02.roa (hash: wu+Dox9IU3hwRlFzpqIU7gx86wEYNjyUbkdxdJNUmAk=) 3: A4819EE074F811F0B6925F6DC4F9AE02.roa (hash: ZoO9/vgjXlzY6ba7aXl9T6bpn7UBr556K0Ew0N0yuz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Aug 23 00:31:35 2025 GMT Not After : Aug 30 00:31:35 2025 GMT Subject: CN=68a90be7-5efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:fd:a1:18:d9:6d:67:c9:32:a8:67:ca:84: 83:b5:6e:6b:6d:c8:cc:8a:78:23:8e:12:06:ec:02: 3e:a6:22:24:5a:9e:88:c2:8f:2e:40:a8:a9:49:dc: 5e:5c:bf:df:61:f4:88:9a:68:a6:df:78:8e:a2:f6: 4e:3f:b8:0d:c3:96:b9:b4:b5:00:78:04:4f:d5:8f: 74:b3:fa:85:5c:fe:fc:9f:12:20:4f:33:82:13:3a: 23:b1:70:94:9a:bb:88:ff:f4:b6:a9:7b:7a:ad:30: 71:90:83:52:50:17:81:e6:24:31:8c:fa:0c:5f:f6: 81:18:db:40:ed:05:a9:71:93:4d:38:fb:20:8b:57: 6a:86:04:42:83:ed:58:08:2c:42:a2:f5:e9:db:ae: 29:66:d6:cc:0c:d7:95:62:0e:b5:79:e8:6b:ca:3c: e4:95:1a:ce:b4:b1:a6:3d:22:75:b1:87:cf:66:1e: 81:ec:0d:70:dc:e9:62:cc:97:20:85:70:a4:b3:9b: 22:87:d3:c2:24:78:9c:b8:1b:37:b7:5a:45:53:60: d8:59:23:67:ff:95:8a:c1:9f:0c:7d:5b:4d:1d:e7: 77:83:ee:50:6d:e4:3e:13:65:5a:f1:ab:28:fc:04: 71:be:49:fb:69:b7:4d:39:a4:eb:9e:76:73:84:c6: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BE:D2:CD:EB:AA:ED:C4:49:7D:86:91:45:E0:79:88:8F:3F:69:73 X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1b:7f:88:a1:04:00:be:84:a9:ae:d2:34:50:08:f2:9b:78: 1f:97:f5:5a:90:18:c7:da:11:10:b3:12:e9:f5:a7:80:85:25: 4e:3c:1f:cc:59:02:85:c2:35:27:e2:20:4c:d8:9b:01:15:c7: 90:78:7b:63:a6:3f:68:3a:74:c7:34:4f:f1:ed:99:d3:92:6b: 6b:29:ca:23:7e:83:e0:1a:1d:88:ca:1d:e3:2b:86:91:a6:a9: 7b:2d:a5:23:01:11:7a:b9:a1:ea:5d:75:d1:e1:51:f3:a7:95: 6a:4b:98:0a:f3:c7:7c:34:ed:fa:93:cc:d2:ec:7a:64:1d:39: 65:73:bf:5b:0c:63:68:d0:fb:6f:78:c3:33:8e:80:35:16:c5: 00:f9:2f:50:1a:11:bf:63:43:e7:3b:71:3e:7f:f8:c3:71:0b: 24:d7:71:35:a6:ed:d0:83:20:98:d7:81:07:e9:1f:e2:d9:81: 94:49:44:a3:59:2c:45:0e:e6:dd:f6:35:20:39:71:7e:ba:45: 55:92:18:91:b9:34:a0:88:b1:49:eb:a7:02:34:0e:24:a3:f1: f3:71:81:21:7e:d9:00:0b:b4:50:c8:a8:a6:ba:f5:fe:ff:01: 2e:ed:15:c4:df:e2:5a:16:23:a8:be:e5:64:7c:6a:1b:4f:42: 2f:fb:8f:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjUwODIzMDAzMTM1WhcNMjUwODMwMDAzMTM1WjAYMRYwFAYD VQQDEw02OGE5MGJlNy01ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrD9oRjZbWfJMqhnyoSDtW5rbcjMingjjhIG7AI+piIkWp6Iwo8uQKipSdxe XL/fYfSImmim33iOovZOP7gNw5a5tLUAeARP1Y90s/qFXP78nxIgTzOCEzojsXCU mruI//S2qXt6rTBxkINSUBeB5iQxjPoMX/aBGNtA7QWpcZNNOPsgi1dqhgRCg+1Y CCxCovXp264pZtbMDNeVYg61eehryjzklRrOtLGmPSJ1sYfPZh6B7A1w3OlizJcg hXCks5sih9PCJHicuBs3t1pFU2DYWSNn/5WKwZ8MfVtNHed3g+5QbeQ+E2Va8aso /ARxvkn7abdNOaTrnnZzhMaiWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy+0s3r qu3ESX2GkUXgeYiPP2lzMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOG3+IoQQAvoSprtI0UAjym3gfl/VakBjH2hEQsxLp9aeAhSVOPB/M WQKFwjUn4iBM2JsBFceQeHtjpj9oOnTHNE/x7ZnTkmtrKcojfoPgGh2Iyh3jK4aR pql7LaUjARF6uaHqXXXR4VHzp5VqS5gK88d8NO36k8zS7HpkHTllc79bDGNo0Ptv eMMzjoA1FsUA+S9QGhG/Y0PnO3E+f/jDcQsk13E1pu3QgyCY14EH6R/i2YGUSUSj WSxFDubd9jUgOXF+ukVVkhiRuTSgiLFJ66cCNA4ko/HzcYEhftkAC7RQyKimuvX+ /wEu7RXE3+JaFiOovuVkfGobT0Iv+4+w -----END CERTIFICATE-----Generated at Sun Aug 24 07:16:09 2025 by rpki-client