$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: h3jkpaauiISvfCbhQQahq9HRlpbn3TvpOFySj/nN6LI= Subject key identifier: AB:F8:F3:5C:B0:41:8F:30:B2:EC:BC:96:B7:62:70:67:83:BE:92:26 Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 1074 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 105F Signing time: Fri 22 Aug 2025 17:31:42 +0000 Manifest this update: Fri 22 Aug 2025 17:31:41 +0000 Manifest next update: Fri 29 Aug 2025 17:31:41 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: xg3RUVVIfYpK6ZNUTgSAvNyOatcZtiAWS8jCk/i2d78=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4212 (0x1074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Aug 22 17:31:41 2025 GMT Not After : Aug 29 17:31:41 2025 GMT Subject: CN=68a8a97d-9940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:f4:f8:e5:ec:9a:d5:71:77:67:dc:10:fa: 59:03:0d:8b:26:5e:f3:d6:89:bb:ec:63:78:d6:32: 57:ca:27:94:48:53:6b:59:2a:14:67:49:72:a9:ac: 1f:33:4c:1d:52:ad:63:7f:25:d0:b1:19:88:81:0f: cf:86:a1:4c:27:61:8f:ff:13:1e:21:ce:ac:36:d3: 8b:55:df:57:1b:96:a9:9d:d9:c4:39:76:7a:e3:c5: 7e:b8:13:d5:dd:cd:70:5f:a9:15:6e:f1:40:93:6e: 6c:f5:80:73:b4:bf:5a:03:f9:23:c2:34:67:6a:af: 72:f6:2e:30:98:8e:58:33:16:00:9f:da:02:c9:a0: 3a:7b:bf:88:82:9d:51:96:c8:61:92:30:7e:25:b9: 13:5e:5a:27:a3:be:46:70:cd:74:1e:e3:9d:78:f9: 04:12:a1:c7:2d:2e:31:9c:0f:77:57:04:30:ab:1f: cc:89:e4:bc:ec:b3:40:9c:89:e7:7f:cb:da:ff:71: 63:74:74:67:ec:1c:56:be:af:46:8d:44:29:47:57: a7:26:40:c9:a5:2a:87:70:e9:f7:6f:9d:3d:d6:4b: a4:c7:48:67:9b:6b:a7:c5:75:59:20:2c:71:8d:42: da:ec:49:b3:2a:c1:b1:ba:f1:d9:41:70:28:99:d9: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F8:F3:5C:B0:41:8F:30:B2:EC:BC:96:B7:62:70:67:83:BE:92:26 X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ff:e8:86:08:89:0a:cc:79:c6:d3:6a:ed:40:02:b1:30:b7: bc:f0:ed:10:e1:46:a4:cc:9c:f8:51:4f:d3:96:e2:ad:ca:dc: cf:ad:e6:39:68:76:c9:ad:20:29:34:88:6e:b3:04:51:08:83: 38:4d:98:f2:5a:5e:fd:88:39:c4:e0:df:7a:6d:5e:67:b0:00: a1:45:b5:a5:00:e5:d9:55:54:ff:72:fa:9a:22:9b:6f:28:77: 62:35:eb:ee:bf:18:75:cc:ce:1b:af:38:92:48:c5:4f:a6:69: 89:05:61:3a:7c:f0:f1:af:8d:41:03:04:ab:42:33:46:e9:16: 15:43:c2:27:34:9d:fa:69:43:9c:07:8a:d4:9b:d8:dc:a2:7d: 31:e9:62:c4:af:98:df:b4:2a:e2:5a:37:cd:f0:87:8e:f7:a9: 1e:50:91:1c:32:59:14:92:42:03:58:bb:6d:3f:08:a7:48:e2: 29:3e:58:18:ba:9f:73:aa:b2:d8:e6:28:0e:09:24:d2:28:cd: d8:37:a8:ed:b5:50:e2:d2:cc:1a:ee:9d:5b:93:43:de:67:d1: 23:98:27:1c:b3:a7:d8:9a:1f:6b:45:e6:40:53:2f:4b:ba:50: 57:e5:a5:f9:01:09:ad:cd:75:95:13:93:3d:f9:58:cd:31:46: 9e:b5:69:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwODIyMTczMTQxWhcNMjUwODI5MTczMTQxWjAYMRYwFAYD VQQDEw02OGE4YTk3ZC05OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoT0+OXsmtVxd2fcEPpZAw2LJl7z1om77GN41jJXyieUSFNrWSoUZ0lyqawf M0wdUq1jfyXQsRmIgQ/PhqFMJ2GP/xMeIc6sNtOLVd9XG5apndnEOXZ648V+uBPV 3c1wX6kVbvFAk25s9YBztL9aA/kjwjRnaq9y9i4wmI5YMxYAn9oCyaA6e7+Igp1R lshhkjB+JbkTXlono75GcM10HuOdePkEEqHHLS4xnA93VwQwqx/MieS87LNAnInn f8va/3FjdHRn7BxWvq9GjUQpR1enJkDJpSqHcOn3b5091kukx0hnm2unxXVZICxx jULa7EmzKsGxuvHZQXAomdlQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv481yw QY8wsuy8lrdicGeDvpImMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/+iGCIkKzHnG02rtQAKxMLe88O0Q4UakzJz4UU/TluKtytzPreY5 aHbJrSApNIhuswRRCIM4TZjyWl79iDnE4N96bV5nsAChRbWlAOXZVVT/cvqaIptv KHdiNevuvxh1zM4brziSSMVPpmmJBWE6fPDxr41BAwSrQjNG6RYVQ8InNJ36aUOc B4rUm9jcon0x6WLEr5jftCriWjfN8IeO96keUJEcMlkUkkIDWLttPwinSOIpPlgY up9zqrLY5igOCSTSKM3YN6jttVDi0swa7p1bk0PeZ9EjmCccs6fYmh9rReZAUy9L ulBX5aX5AQmtzXWVE5M9+VjNMUaetWks -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:12 2025 by rpki-client