$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: 4jpiRv4N5bgU8OsfxxuxltsXfi8kB/RgeFvGs61L7Fc= Subject key identifier: A0:B6:54:D3:EF:30:86:A2:3F:77:A6:3D:0C:0A:35:50:AB:BE:91:98 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E79 Signing time: Fri 22 Aug 2025 17:51:01 +0000 Manifest this update: Fri 22 Aug 2025 17:51:01 +0000 Manifest next update: Fri 29 Aug 2025 17:51:01 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: cyjiZWui+Q12Rr44nha2Mr+p836Zcs7TCk+6BPjiADw=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3723 (0xe8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Aug 22 17:51:01 2025 GMT Not After : Aug 29 17:51:01 2025 GMT Subject: CN=68a8ae05-677f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:04:c5:4b:0c:2c:65:c7:48:71:45:1d:dd: fa:1c:a9:98:41:42:e3:05:b4:a2:bf:ed:e4:b1:44: c3:31:a1:15:22:a9:cc:2e:d3:ce:6f:ce:3c:06:ba: e8:7a:c2:04:0d:c7:76:43:a9:5d:57:be:39:a3:26: 22:62:b5:eb:83:63:b2:01:7b:86:d9:ba:7c:92:fe: 79:4d:9a:71:21:14:dc:74:be:ae:0e:a4:cd:ba:9e: 8c:34:8d:d1:81:38:ad:80:84:10:75:2c:1a:60:e4: 32:b4:c3:f0:8e:40:d8:71:73:ff:48:a6:57:02:c5: b4:8a:78:15:f7:a0:07:d7:57:4d:a2:4a:47:9c:6f: f3:c8:31:1f:46:4f:c5:a6:86:19:4e:d1:7b:f1:78: ca:8c:2d:54:66:c5:86:4e:b0:29:29:63:06:c9:ce: 2f:6f:34:b6:35:0a:93:0b:38:c8:de:99:ee:61:92: a3:71:09:b8:1e:df:dc:77:08:31:7c:1f:1a:26:b6: c0:b4:ab:66:1d:ad:60:1c:6f:0b:74:8c:b0:a3:06: 1b:18:49:ef:b0:ef:6a:bc:6b:d8:6b:86:59:20:6f: 46:10:e5:77:86:5f:a5:a0:9b:c1:6c:25:d2:20:17: 6b:77:7e:bf:1c:2a:73:18:3f:92:7b:c2:67:69:65: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:54:D3:EF:30:86:A2:3F:77:A6:3D:0C:0A:35:50:AB:BE:91:98 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a2:28:4b:ef:d2:76:ec:55:66:ef:f6:2b:7e:c1:0d:3d:51: 92:14:80:53:1b:5c:4f:d5:fd:4b:80:7d:ab:d3:53:9c:70:fd: 3d:0b:4f:74:fa:ab:db:93:19:f2:41:08:19:eb:1d:d8:7f:e8: 2d:e4:6c:18:d5:28:93:b4:05:ea:8d:05:b1:37:4c:e9:0f:d4: 1e:a8:07:1e:60:ea:0a:5e:a0:6b:f1:4f:be:46:a5:80:02:39: 8a:bd:6a:43:9e:8a:c0:5c:af:49:89:a8:0f:fb:b0:49:24:0b: de:c0:3a:7f:dd:91:47:60:45:b5:9e:47:f2:b8:b8:af:c7:b1: 05:94:ad:42:02:f0:a6:2f:c2:7f:ad:94:ff:f9:ce:67:74:5b: 4c:1b:cc:b5:34:e2:fd:b8:09:13:7a:8a:03:20:6c:6f:17:b8: db:9a:37:33:5c:44:7e:45:51:ae:9a:28:25:dc:69:92:22:6d: 34:e8:0d:d3:21:27:cb:fb:38:12:5d:08:64:2d:a5:ce:1a:bb: 40:22:0a:d4:99:2b:ed:a0:13:8e:58:ae:e0:72:ef:8f:b4:4b: bc:7b:09:0d:fa:60:4b:67:b5:b9:16:f9:36:81:16:a6:ba:48: 7a:a1:f3:6f:56:c7:1f:27:2b:41:fd:ab:a0:3a:13:62:ae:89: f1:c6:12:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwODIyMTc1MTAxWhcNMjUwODI5MTc1MTAxWjAYMRYwFAYD VQQDEw02OGE4YWUwNS02NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3gExUsMLGXHSHFFHd36HKmYQULjBbSiv+3ksUTDMaEVIqnMLtPOb848Brro esIEDcd2Q6ldV745oyYiYrXrg2OyAXuG2bp8kv55TZpxIRTcdL6uDqTNup6MNI3R gTitgIQQdSwaYOQytMPwjkDYcXP/SKZXAsW0ingV96AH11dNokpHnG/zyDEfRk/F poYZTtF78XjKjC1UZsWGTrApKWMGyc4vbzS2NQqTCzjI3pnuYZKjcQm4Ht/cdwgx fB8aJrbAtKtmHa1gHG8LdIywowYbGEnvsO9qvGvYa4ZZIG9GEOV3hl+loJvBbCXS IBdrd36/HCpzGD+Se8JnaWV0DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC2VNPv MIaiP3emPQwKNVCrvpGYMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsoihL79J27FVm7/YrfsENPVGSFIBTG1xP1f1LgH2r01OccP09C090 +qvbkxnyQQgZ6x3Yf+gt5GwY1SiTtAXqjQWxN0zpD9QeqAceYOoKXqBr8U++RqWA AjmKvWpDnorAXK9JiagP+7BJJAvewDp/3ZFHYEW1nkfyuLivx7EFlK1CAvCmL8J/ rZT/+c5ndFtMG8y1NOL9uAkTeooDIGxvF7jbmjczXER+RVGumigl3GmSIm006A3T ISfL+zgSXQhkLaXOGrtAIgrUmSvtoBOOWK7gcu+PtEu8ewkN+mBLZ7W5Fvk2gRam ukh6ofNvVscfJytB/augOhNironxxhJG -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:39 2025 by rpki-client