$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft File: dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json) Hash identifier: 5joF+bK2dco1RSyCR0+DUIUIEPg6T6PmE05ODToJrGw= Subject key identifier: 85:87:10:26:90:47:F0:0F:32:B9:FF:52:FB:EF:0C:9E:2E:08:FA:80 Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 Certificate issuer: /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft Manifest number: 0679 Signing time: Fri 22 Aug 2025 14:48:35 +0000 Manifest this update: Fri 22 Aug 2025 14:48:34 +0000 Manifest next update: Fri 29 Aug 2025 14:48:34 +0000 Files and hashes: 1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: Xy7Wmkkg7N1jrEyfqaBd0VyKvQ8a/QCXIMEKDU6pUh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Validity Not Before: Aug 22 14:48:34 2025 GMT Not After : Aug 29 14:48:34 2025 GMT Subject: CN=68a88343-9473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:8b:e9:e2:1a:0e:cc:eb:f7:08:f6:50:b4: cf:ef:b3:9c:3c:bb:0f:8e:d8:37:67:70:c3:db:3a: 95:d0:6b:d9:e2:f4:44:5a:0f:d5:57:80:bd:c4:1e: 00:04:2e:97:99:65:38:20:b4:f4:ed:4c:22:7b:af: ca:b6:b5:30:32:91:1b:ce:f0:84:06:22:2b:a5:43: 8c:73:b6:c5:c2:fe:aa:c3:3c:e5:ab:a6:03:71:e3: 65:dc:4d:aa:0a:52:de:89:51:c0:81:a9:b2:3c:0f: b2:77:f5:8d:8f:d7:f4:ec:a5:35:24:73:f9:6a:f7: b6:2a:fa:ff:34:bf:4d:7e:3f:71:ed:68:d2:9f:4f: 7c:9a:1e:31:35:8c:eb:c9:fb:30:93:09:7b:d3:33: 43:a7:f2:e8:25:d6:63:83:36:7f:82:5c:61:33:60: 70:1b:76:7c:c3:a1:24:5c:e8:00:bd:39:3b:08:f7: 4d:9e:71:aa:34:36:13:42:04:28:5e:c7:39:84:f7: b5:47:b0:e6:aa:36:b5:64:2f:f3:8c:5c:92:73:c5: 81:37:37:99:b8:ff:02:69:6b:f4:38:04:95:e9:f0: b1:72:d2:f9:bc:e0:07:8b:00:b7:7f:ee:5f:a5:ba: 21:00:41:60:4b:68:bf:71:60:68:fa:f8:f5:c6:ff: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:10:26:90:47:F0:0F:32:B9:FF:52:FB:EF:0C:9E:2E:08:FA:80 X509v3 Authority Key Identifier: keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8c:a1:7d:b1:a9:e2:56:d0:2e:28:cd:4e:32:3e:88:ce:2d: fe:8f:22:0d:f7:0f:b3:82:f8:c2:06:78:c9:dc:cb:75:d9:f7: 65:83:c1:ff:72:74:37:89:8a:3b:99:0a:30:69:cb:64:80:f8: ba:17:a3:6d:5d:6f:33:81:6c:c7:19:bc:58:a8:8b:43:e8:b1: 34:4f:ed:e5:2a:51:be:c5:2a:2f:e0:29:50:f2:03:88:25:7e: 38:00:8a:97:a3:eb:11:50:8f:ea:98:a3:cc:29:fa:91:4d:a3: e3:44:bf:bf:7c:87:16:9c:86:9b:64:9f:16:d3:ad:24:b5:f1: a5:87:53:0d:30:b3:03:71:19:72:45:c2:56:04:f7:50:23:92: 60:77:72:8a:98:02:8f:88:04:de:14:04:35:d1:92:59:c5:79: f9:30:b4:f4:86:25:3d:26:25:af:7b:79:88:bf:27:14:e6:49: 98:e9:fa:e6:3a:8e:63:7a:fb:9a:1c:37:55:ba:09:95:bb:8c: 8c:e6:e5:42:92:64:58:de:a6:50:07:1f:13:16:17:1d:2f:c7: a6:6e:21:bd:50:bf:3a:1a:2e:df:14:ce:56:e6:0e:3d:fa:d4: 91:a2:5e:ff:c6:00:c5:84:23:3a:de:cf:67:f5:c5:3d:82:bc: b4:51:bc:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFFMTMxMTAvBgNVBAUTKDc0RTFDQjgzMzYyNjg3MzQ3ODkzMkNBMjExODhBODhG REYyRTlERTAwHhcNMjUwODIyMTQ0ODM0WhcNMjUwODI5MTQ0ODM0WjAYMRYwFAYD VQQDEw02OGE4ODM0My05NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vyL6eIaDszr9wj2ULTP77OcPLsPjtg3Z3DD2zqV0GvZ4vREWg/VV4C9xB4A BC6XmWU4ILT07Uwie6/KtrUwMpEbzvCEBiIrpUOMc7bFwv6qwzzlq6YDceNl3E2q ClLeiVHAgamyPA+yd/WNj9f07KU1JHP5ave2Kvr/NL9Nfj9x7WjSn098mh4xNYzr yfswkwl70zNDp/LoJdZjgzZ/glxhM2BwG3Z8w6EkXOgAvTk7CPdNnnGqNDYTQgQo Xsc5hPe1R7Dmqja1ZC/zjFySc8WBNzeZuP8CaWv0OASV6fCxctL5vOAHiwC3f+5f pbohAEFgS2i/cWBo+vj1xv+RfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWHECaQ R/APMrn/UvvvDJ4uCPqAMB8GA1UdIwQYMBaAFHThy4M2Joc0eJMsohGIqI/fLp3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUUxMy8xODNGOTlGQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6UjRreXlpRVlpb2o5OHVu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPSExnelltaHpSNGt5eWlFWWlvajk4dW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUUxMy8xODNGOTlGQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6 UjRreXlpRVlpb2o5OHVuZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjKF9saniVtAuKM1OMj6Izi3+jyIN9w+zgvjCBnjJ3Mt12fdlg8H/ cnQ3iYo7mQowactkgPi6F6NtXW8zgWzHGbxYqItD6LE0T+3lKlG+xSov4ClQ8gOI JX44AIqXo+sRUI/qmKPMKfqRTaPjRL+/fIcWnIabZJ8W060ktfGlh1MNMLMDcRly RcJWBPdQI5Jgd3KKmAKPiATeFAQ10ZJZxXn5MLT0hiU9JiWve3mIvycU5kmY6frm Oo5jevuaHDdVugmVu4yM5uVCkmRY3qZQBx8TFhcdL8embiG9UL86Gi7fFM5W5g49 +tSRol7/xgDFhCM63s9n9cU9gry0UbzX -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:48 2025 by rpki-client