$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: 1cqbHF6MW6Vpz1cmr7qhg8k+va1wb1nEgn23jTEsbVE= Subject key identifier: 0C:1D:2B:C7:0F:17:5A:33:CB:66:DB:66:A5:8B:39:1F:D7:22:E8:10 Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 105A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1045 Signing time: Wed 02 Jul 2025 17:37:14 +0000 Manifest this update: Wed 02 Jul 2025 17:37:14 +0000 Manifest next update: Wed 09 Jul 2025 17:37:14 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: 3WTEVfqsL7I9AUZ1H40ItRDzSAWxaKx3f37iu3mz8N8=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4186 (0x105a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Jul 2 17:37:14 2025 GMT Not After : Jul 9 17:37:14 2025 GMT Subject: CN=68656e4a-eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:8c:ad:47:d3:bb:1e:8c:95:3f:a4:da:66: a1:8a:85:68:66:b4:d4:a5:df:bb:1a:5c:d5:a8:0d: d1:7d:ab:0e:c9:eb:8a:be:52:73:4e:46:65:00:18: 0a:a3:4d:76:f0:41:73:a0:70:53:30:d4:60:35:3e: cb:a6:d1:9e:d3:f3:19:81:e7:97:c1:82:d0:26:5f: d8:4d:ee:88:cd:d3:16:f5:07:1c:bc:9f:8d:c3:f5: 48:c8:4f:17:e3:b5:22:c6:76:6c:4e:60:2c:a2:d1: f6:70:7e:41:a8:ab:81:9a:b3:69:10:fd:e2:47:b1: ba:7d:31:bc:e6:d5:f8:eb:1a:c2:a3:3a:69:06:46: 4f:8e:9f:b0:90:7e:af:ad:f2:98:f5:42:0e:70:82: 7f:d8:7b:d2:f2:08:12:21:9c:ca:ef:73:aa:b6:46: f2:93:e4:9a:b2:74:9f:31:76:4f:2c:a8:6f:87:f5: ac:29:36:1d:12:ba:9d:e3:0e:29:13:91:79:2e:62: 97:af:85:15:d0:48:34:a4:20:3c:1d:9b:15:f9:3f: 92:33:14:7a:73:e2:96:74:71:26:0d:b3:68:fd:64: 71:fc:fd:76:bf:25:b8:9c:85:d2:d5:dd:a2:72:4a: f6:79:1b:06:3f:1d:22:5d:0d:25:03:c8:7b:92:fe: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:2B:C7:0F:17:5A:33:CB:66:DB:66:A5:8B:39:1F:D7:22:E8:10 X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c7:d8:62:2d:71:40:ae:5e:54:a7:73:f9:f1:b8:b2:56:b3: 76:32:c6:f1:4f:73:bd:ee:bc:42:e1:ab:4d:89:49:28:24:a3: 7e:ea:85:2a:62:ee:29:26:ca:fe:93:89:aa:89:5b:29:c9:6c: d8:59:6d:d4:1d:52:f1:2e:6d:13:59:b1:7b:ad:10:04:da:0a: 09:a0:f8:a1:2a:c4:30:3c:04:61:56:f6:71:29:15:2e:74:ae: d6:d7:84:16:8a:ec:62:f1:ee:70:ab:15:30:a3:9c:3c:af:a5: 9c:75:d1:db:40:bc:27:84:18:4b:e2:9f:f2:38:9e:01:0f:5d: 2d:3d:79:19:16:3a:f9:01:60:d8:54:95:4a:7f:e3:dc:2a:fe: b5:31:e4:17:71:da:5c:7c:ec:76:3d:30:ac:34:5f:ab:40:6b: c8:46:42:8e:06:a8:65:2a:62:af:fd:92:f6:85:d7:95:80:68: f5:e5:13:62:51:cd:6f:d6:14:60:ea:00:34:b4:c0:f8:c7:5a: 98:f0:2c:c4:e6:03:61:a0:3f:ff:c7:71:17:f4:41:6e:66:e9: ec:78:5e:e4:01:1a:89:52:91:50:12:a6:8b:1d:8f:50:63:04: 59:9c:a1:d9:b4:21:b3:44:b5:50:47:fd:b2:a1:23:e5:d8:d5: 2c:f5:41:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwNzAyMTczNzE0WhcNMjUwNzA5MTczNzE0WjAYMRYwFAYD VQQDEw02ODY1NmU0YS1lYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD2MrUfTux6MlT+k2mahioVoZrTUpd+7GlzVqA3RfasOyeuKvlJzTkZlABgK o0128EFzoHBTMNRgNT7LptGe0/MZgeeXwYLQJl/YTe6IzdMW9QccvJ+Nw/VIyE8X 47UixnZsTmAsotH2cH5BqKuBmrNpEP3iR7G6fTG85tX46xrCozppBkZPjp+wkH6v rfKY9UIOcIJ/2HvS8ggSIZzK73Oqtkbyk+SasnSfMXZPLKhvh/WsKTYdErqd4w4p E5F5LmKXr4UV0Eg0pCA8HZsV+T+SMxR6c+KWdHEmDbNo/WRx/P12vyW4nIXS1d2i ckr2eRsGPx0iXQ0lA8h7kv71ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwdK8cP F1ozy2bbZqWLOR/XIugQMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANx9hiLXFArl5Up3P58biyVrN2MsbxT3O97rxC4atNiUkoJKN+6oUq Yu4pJsr+k4mqiVspyWzYWW3UHVLxLm0TWbF7rRAE2goJoPihKsQwPARhVvZxKRUu dK7W14QWiuxi8e5wqxUwo5w8r6WcddHbQLwnhBhL4p/yOJ4BD10tPXkZFjr5AWDY VJVKf+PcKv61MeQXcdpcfOx2PTCsNF+rQGvIRkKOBqhlKmKv/ZL2hdeVgGj15RNi Uc1v1hRg6gA0tMD4x1qY8CzE5gNhoD//x3EX9EFuZunseF7kARqJUpFQEqaLHY9Q YwRZnKHZtCGzRLVQR/2yoSPl2NUs9UH/ -----END CERTIFICATE-----Generated at Fri Jul 4 14:33:13 2025 by rpki-client