$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: aPTw5oJtPdJEdHwM9nHtVdZuIjPlNk0HWcMhLHWQmZE= Subject key identifier: 9A:4F:79:FF:2E:EF:9A:D4:D3:38:8D:69:EF:C6:67:A5:17:55:50:79 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 115B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 1151 Signing time: Wed 02 Jul 2025 17:26:49 +0000 Manifest this update: Wed 02 Jul 2025 17:26:48 +0000 Manifest next update: Wed 09 Jul 2025 17:26:48 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: siu6IiSAh49f6EYxtzr6oR5sZ/DB/qd8mfPNciVJiv4=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4443 (0x115b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Jul 2 17:26:48 2025 GMT Not After : Jul 9 17:26:48 2025 GMT Subject: CN=68656bd9-a565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:e3:79:42:b1:2f:71:6b:a8:b1:c8:46:38: 33:42:9a:2d:cf:a0:02:87:23:32:ae:19:61:93:f6: e0:03:e8:18:ea:8c:6b:ba:e0:57:9f:a2:93:2b:41: 87:e3:71:3c:0e:f6:27:17:72:71:58:f0:5b:ca:89: 63:bf:48:21:32:a7:a5:f8:a8:eb:e2:ef:05:64:00: 73:89:e0:d7:6e:ee:65:f2:4b:54:db:37:fa:05:95: a9:1d:66:31:d3:17:26:43:02:40:c9:38:1b:7f:82: 30:a6:bf:f2:79:13:ec:46:f6:f0:f8:20:08:73:fe: d1:18:0b:6a:db:cf:29:2a:2e:05:2c:d0:12:09:13: 27:7e:8f:fe:d4:1a:3d:ef:3c:c9:c1:03:83:0d:dc: b0:44:a7:4c:b4:1f:14:dd:47:c5:7e:bb:a0:16:2b: f7:7d:3f:87:64:ac:c6:47:cb:93:71:1b:63:43:d3: 1a:3e:ba:d5:0e:df:bf:b4:54:92:08:31:23:58:ae: 64:fc:65:32:96:1d:1b:49:21:3d:94:3d:17:e6:f6: 15:2a:ae:96:2c:28:64:d9:61:76:f5:8a:d6:3e:d8: 08:7f:c3:d6:f9:d7:4f:f7:80:87:40:f3:db:28:d0: 20:61:2a:18:d7:be:87:eb:c3:3c:d7:27:3e:ec:e9: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:79:FF:2E:EF:9A:D4:D3:38:8D:69:EF:C6:67:A5:17:55:50:79 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:92:c5:62:5a:a7:6f:9a:5c:93:08:e4:57:97:bc:2b:cf:87: 41:e2:15:5b:46:cd:27:2e:79:62:d1:6c:7c:8c:75:cb:27:f6: 94:11:aa:e2:f1:4b:39:39:16:08:f0:19:7f:05:9f:a5:a2:f5: be:0e:c3:37:f6:cd:47:03:f1:ab:00:82:2b:0d:41:b5:f4:46: 65:f0:e2:1f:2c:ac:e1:55:e5:73:cb:f8:ae:c0:56:7c:df:45: 78:78:41:9b:b1:c9:ff:9a:bc:f0:e3:75:43:15:99:67:d6:8f: 6d:08:6e:91:09:4b:47:29:c5:25:4f:df:9c:b6:24:7c:46:ec: d6:b5:a7:ea:f9:03:e4:99:88:c0:a4:f5:c9:45:c0:83:f8:a5: a3:51:c4:50:80:d0:5a:05:69:9c:3c:5f:5b:dd:63:2a:d4:6c: ee:3e:9a:4c:f0:d4:b9:f9:b1:a5:0a:3d:b4:bd:68:75:3d:41: e1:f8:ad:9a:c8:f6:5f:be:1c:6b:1e:1f:3b:e3:00:55:5b:e0: 0b:6d:49:eb:7d:92:32:f5:7c:34:51:a4:2c:cb:ec:72:4c:52: 4b:76:9c:ff:7b:0f:18:1a:0c:04:4f:03:16:5d:46:3c:89:3d: 4b:5b:d1:2d:7e:eb:29:9d:c3:cb:ab:f5:4d:a6:ce:a4:a3:4c: b2:5e:4a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjUwNzAyMTcyNjQ4WhcNMjUwNzA5MTcyNjQ4WjAYMRYwFAYD VQQDEw02ODY1NmJkOS1hNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RfjeUKxL3FrqLHIRjgzQpotz6AChyMyrhlhk/bgA+gY6oxruuBXn6KTK0GH 43E8DvYnF3JxWPBbyoljv0ghMqel+Kjr4u8FZABzieDXbu5l8ktU2zf6BZWpHWYx 0xcmQwJAyTgbf4Iwpr/yeRPsRvbw+CAIc/7RGAtq288pKi4FLNASCRMnfo/+1Bo9 7zzJwQODDdywRKdMtB8U3UfFfrugFiv3fT+HZKzGR8uTcRtjQ9MaPrrVDt+/tFSS CDEjWK5k/GUylh0bSSE9lD0X5vYVKq6WLChk2WF29YrWPtgIf8PW+ddP94CHQPPb KNAgYSoY176H68M81yc+7Oko8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpPef8u 75rU0ziNae/GZ6UXVVB5MB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByksViWqdvmlyTCORXl7wrz4dB4hVbRs0nLnli0Wx8jHXLJ/aUEari 8Us5ORYI8Bl/BZ+lovW+DsM39s1HA/GrAIIrDUG19EZl8OIfLKzhVeVzy/iuwFZ8 30V4eEGbscn/mrzw43VDFZln1o9tCG6RCUtHKcUlT9+ctiR8RuzWtafq+QPkmYjA pPXJRcCD+KWjUcRQgNBaBWmcPF9b3WMq1GzuPppM8NS5+bGlCj20vWh1PUHh+K2a yPZfvhxrHh874wBVW+ALbUnrfZIy9Xw0UaQsy+xyTFJLdpz/ew8YGgwETwMWXUY8 iT1LW9EtfuspncPLq/VNps6ko0yyXkph -----END CERTIFICATE-----Generated at Fri Jul 4 14:45:23 2025 by rpki-client