$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: Zwb0bnrmhVUR4xtBGcKsTbDuESSpkPw+2itfIMT8gr4= Subject key identifier: 54:C1:D8:BD:7C:A5:31:FE:D4:8B:86:B0:34:83:77:5C:F8:12:A1:56 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E96 Signing time: Sat 18 Oct 2025 18:20:33 +0000 Manifest this update: Sat 18 Oct 2025 18:20:32 +0000 Manifest next update: Sat 25 Oct 2025 18:20:32 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: s8igbtjvOfVk1GGkYAnOyiuyJlMZeowgeHzI4/OxkSA=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Oct 18 18:20:32 2025 GMT Not After : Oct 25 18:20:32 2025 GMT Subject: CN=68f3da70-5afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:45:06:6a:f2:be:7b:95:f0:34:b2:cd:e4: ed:22:c6:c3:30:88:a6:a6:81:7b:a7:57:19:4d:1d: ae:d6:e4:19:07:3c:23:e2:77:94:ae:7a:96:5b:87: f0:ea:2d:74:d0:8e:f9:33:b4:a4:53:ac:a2:fb:a4: 48:94:fc:c0:4c:d2:25:4b:7d:15:de:87:7d:77:04: d0:6c:7b:19:72:f4:55:6f:d7:0e:66:88:d2:7a:88: 39:a0:d6:f4:42:b5:57:34:7a:19:0b:30:4a:12:07: da:c6:49:2d:51:ba:fe:19:46:86:58:a0:cf:09:c4: 7e:83:5d:a3:a9:33:c1:55:3c:bd:3f:68:4e:26:bf: 72:3d:1e:82:62:47:04:da:c5:71:59:19:d6:47:42: 80:0d:78:62:7a:4f:99:58:d9:d9:07:d3:71:75:eb: f2:71:8e:1f:af:2e:98:24:bd:98:77:51:49:97:99: ea:df:35:4b:b8:9a:88:4c:47:2d:24:7a:35:80:0f: 03:ff:1a:97:11:f3:68:85:31:42:18:5c:42:13:da: c4:26:57:81:e8:98:d5:55:11:3c:2a:fd:5e:07:d2: ba:11:8f:7d:87:e0:52:57:4e:65:0d:ef:56:41:22: f5:19:b7:34:94:3a:b6:19:14:e9:3c:95:25:64:86: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:D8:BD:7C:A5:31:FE:D4:8B:86:B0:34:83:77:5C:F8:12:A1:56 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:21:de:57:f8:e8:ab:d2:b0:41:28:fd:27:42:7d:07:12:2b: 2c:1f:5a:4c:2c:33:0e:bd:09:f3:48:ee:fd:4b:7e:46:6a:92: c4:ad:df:4c:fb:c5:a8:59:b0:62:79:27:b2:f5:6e:fa:51:b2: 8a:ec:96:16:5e:0f:40:31:b0:51:ac:8e:a2:25:b7:93:7e:bc: 42:9f:51:a8:ed:41:27:bf:6f:50:3f:cb:5e:31:70:bd:09:8c: e8:8a:9e:36:17:ec:a8:42:6a:4c:b2:24:dc:08:e4:63:6c:23: b8:6f:01:91:03:c9:04:48:de:1b:ba:b9:84:ef:5e:e0:d1:00: 6a:e6:20:f9:fd:90:c3:29:5a:ad:20:34:84:c3:b3:4c:3c:54: 8b:6d:be:9d:c5:50:a7:63:48:33:45:0b:35:a6:ac:64:a4:cc: b8:4f:89:7f:2d:fd:0f:52:16:cd:f6:d5:79:78:a2:1f:e6:5f: a4:31:af:b7:ce:50:68:ae:22:0b:6c:8b:c3:eb:ed:a6:de:ee: c0:4e:3f:c7:6e:c7:86:77:e6:e1:9b:36:14:20:8c:83:a5:7c: eb:81:3e:c4:15:f6:71:79:81:7a:d3:af:93:f2:ce:fb:97:0f: bb:02:b1:d8:4a:6d:63:4c:39:5b:dd:5a:19:e1:19:8f:a4:ea: f4:fd:8e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUxMDE4MTgyMDMyWhcNMjUxMDI1MTgyMDMyWjAYMRYwFAYD VQQDEw02OGYzZGE3MC01YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qRFBmryvnuV8DSyzeTtIsbDMIimpoF7p1cZTR2u1uQZBzwj4neUrnqWW4fw 6i100I75M7SkU6yi+6RIlPzATNIlS30V3od9dwTQbHsZcvRVb9cOZojSeog5oNb0 QrVXNHoZCzBKEgfaxkktUbr+GUaGWKDPCcR+g12jqTPBVTy9P2hOJr9yPR6CYkcE 2sVxWRnWR0KADXhiek+ZWNnZB9NxdevycY4fry6YJL2Yd1FJl5nq3zVLuJqITEct JHo1gA8D/xqXEfNohTFCGFxCE9rEJleB6JjVVRE8Kv1eB9K6EY99h+BSV05lDe9W QSL1Gbc0lDq2GRTpPJUlZIaRZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTB2L18 pTH+1IuGsDSDd1z4EqFWMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQId5X+Oir0rBBKP0nQn0HEissH1pMLDMOvQnzSO79S35GapLErd9M +8WoWbBieSey9W76UbKK7JYWXg9AMbBRrI6iJbeTfrxCn1Go7UEnv29QP8teMXC9 CYzoip42F+yoQmpMsiTcCORjbCO4bwGRA8kESN4burmE717g0QBq5iD5/ZDDKVqt IDSEw7NMPFSLbb6dxVCnY0gzRQs1pqxkpMy4T4l/Lf0PUhbN9tV5eKIf5l+kMa+3 zlBoriILbIvD6+2m3u7ATj/HbseGd+bhmzYUIIyDpXzrgT7EFfZxeYF606+T8s77 lw+7ArHYSm1jTDlb3VoZ4RmPpOr0/Y5v -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:55 2025 by rpki-client