$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json) Hash identifier: ICaPlAwYgJCPfO+ruBpxqfybing7R31oF/5/eku5WEU= Subject key identifier: 27:65:30:AE:57:6F:99:15:AD:9D:75:C0:4D:35:48:93:9A:6B:92:B7 Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft Manifest number: 010B Signing time: Thu 03 Jul 2025 05:17:09 +0000 Manifest this update: Thu 03 Jul 2025 05:17:08 +0000 Manifest next update: Thu 10 Jul 2025 05:17:08 +0000 Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: sJOC/YjruBauV4gsMCTDUkOrIhqsDOWmbrKJC5W2N/Y=) 2: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: v+1b4BSfVaZyzyzYkzqzeT7Ee1I3/7A+8jt9kQpxCPc=) 3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: A9dIkj8J76tWHGXSX/3Ud9jZf1nkfnJcE726ptgm7cw=) 4: 79F7221E892911EF896D1145C4F9AE02.roa (hash: hGdMrY8+O6zApibMjg/vy58aibxku7iV/ch2aVDa82w=) 5: F278C026892911EFB08D7746C4F9AE02.roa (hash: Vz6AnYUqxQMrtm1fqPuY9YKct5u+kfmwLL8MJ80Qjc4=) 6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: 1Q/6I9YvTdRroG4PgU/vX7AvoYDmVeBiDmXzSwZyFRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Validity Not Before: Jul 3 05:17:08 2025 GMT Not After : Jul 10 05:17:08 2025 GMT Subject: CN=68661254-3a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:34:0b:6b:64:3e:77:40:b7:86:b6:32:d2: 86:9b:3f:57:1f:10:62:ad:0c:dc:3c:b3:5a:01:f2: 64:44:58:fc:65:a8:d2:33:5d:e5:47:93:4a:64:3f: b8:04:e3:63:ab:e7:03:45:ec:c3:a0:43:13:ee:c0: 1e:ee:85:d0:a6:ae:a1:01:ea:09:de:83:86:5e:5d: 25:02:86:5d:3b:12:76:2c:79:ec:0a:5b:34:ad:79: d5:18:34:ff:23:45:e7:6e:4a:0b:c4:b6:af:a9:fa: 1e:a1:0a:fa:4a:99:64:9c:62:e7:dd:5f:62:18:6b: 2b:30:03:59:79:e1:01:4e:83:a9:ac:1a:ae:6e:3c: 12:74:aa:e4:44:e1:16:1c:e8:23:5a:03:ac:fd:a2: f5:09:d1:e7:77:44:18:c6:13:0f:19:df:1d:9a:f8: 67:81:39:59:c0:49:e7:be:c4:a7:8e:54:57:0c:55: f5:56:03:ab:89:a5:d5:e5:14:59:5a:a1:61:93:fa: 26:0f:bf:34:dc:65:b4:39:d7:2d:bd:37:e9:40:dd: f7:07:df:dc:c5:5f:a2:b2:03:e2:a4:1c:39:3f:52: 50:93:6a:9c:3b:66:0f:a0:11:20:1a:ac:03:de:a5: e2:58:be:a5:2b:3d:78:71:3d:31:d6:61:28:99:4c: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:65:30:AE:57:6F:99:15:AD:9D:75:C0:4D:35:48:93:9A:6B:92:B7 X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:05:14:f0:2f:06:83:69:64:8d:56:03:0b:f6:ed:2b:d2: e9:75:18:9d:b6:98:dc:1c:99:87:1b:45:93:eb:9e:11:c3:c3: eb:0f:a9:1a:87:73:3a:ee:d7:07:a9:7b:91:51:57:40:3e:13: 4c:5d:3d:82:bc:76:e4:6a:31:62:64:b8:cb:e2:14:a0:db:8b: 3b:b1:0d:a8:c9:da:e6:fa:4f:b2:0d:b6:d6:23:3d:3c:a3:c9: eb:09:4a:b9:39:e1:6d:7c:64:ad:29:9d:ca:c3:6c:5b:82:74: 11:2a:72:34:6d:f1:a7:c7:30:23:8b:91:5e:65:fa:e4:59:fd: 5d:dd:d4:64:ca:32:3a:9e:31:b7:c3:49:51:8f:5d:02:01:54: 3c:27:20:d2:78:64:19:26:b2:c1:f8:3b:af:0f:8f:c7:c0:ee: 1a:73:1c:3f:2d:44:0f:70:c7:a3:e5:74:73:91:6c:be:c4:46: c9:33:ba:be:34:d3:85:3c:a1:a0:d1:33:63:8f:b5:61:36:d1: 5b:f3:c0:00:36:d9:c0:84:49:e0:ce:09:b3:7b:a5:8c:d8:da: f3:6f:db:b4:05:f2:d1:ca:32:44:7a:16:16:96:ca:26:e6:4e: 7e:84:5e:fa:aa:d7:9a:66:77:b3:b1:aa:c2:0e:30:57:0d:b3: b4:61:40:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwNzAzMDUxNzA4WhcNMjUwNzEwMDUxNzA4WjAYMRYwFAYD VQQDEw02ODY2MTI1NC0zYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDQ0C2tkPndAt4a2MtKGmz9XHxBirQzcPLNaAfJkRFj8ZajSM13lR5NKZD+4 BONjq+cDRezDoEMT7sAe7oXQpq6hAeoJ3oOGXl0lAoZdOxJ2LHnsCls0rXnVGDT/ I0XnbkoLxLavqfoeoQr6SplknGLn3V9iGGsrMANZeeEBToOprBqubjwSdKrkROEW HOgjWgOs/aL1CdHnd0QYxhMPGd8dmvhngTlZwEnnvsSnjlRXDFX1VgOriaXV5RRZ WqFhk/omD7803GW0OdctvTfpQN33B9/cxV+isgPipBw5P1JQk2qcO2YPoBEgGqwD 3qXiWL6lKz14cT0x1mEomUyr1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdlMK5X b5kVrZ11wE01SJOaa5K3MB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qgUU8C8Gg2lkjVYDC/btK9LpdRidtpjcHJmHG0WT654Rw8PrD6ka h3M67tcHqXuRUVdAPhNMXT2CvHbkajFiZLjL4hSg24s7sQ2oydrm+k+yDbbWIz08 o8nrCUq5OeFtfGStKZ3Kw2xbgnQRKnI0bfGnxzAji5FeZfrkWf1d3dRkyjI6njG3 w0lRj10CAVQ8JyDSeGQZJrLB+DuvD4/HwO4acxw/LUQPcMej5XRzkWy+xEbJM7q+ NNOFPKGg0TNjj7VhNtFb88AANtnAhEngzgmze6WM2Nrzb9u0BfLRyjJEehYWlsom 5k5+hF76qteaZnezsarCDjBXDbO0YUBh -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:59 2025 by rpki-client