$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: Xg5PSC8c111bjsRMahzMnFLieLbYkJ0y+y8QFYW5v7k= Subject key identifier: 98:F7:2E:60:71:FB:44:C4:BC:8A:B3:98:58:18:B9:B4:6D:B0:BF:3E Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: 0125 Signing time: Thu 03 Jul 2025 04:49:01 +0000 Manifest this update: Thu 03 Jul 2025 04:49:01 +0000 Manifest next update: Thu 10 Jul 2025 04:49:01 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: htEM3kIYpq0W1tElf5dAhcxUNAkDPSTI8w8wXDJksfw=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: ZWPK2ab0Ef3qAN+iabKfnFGe44+77H2KgSLOA0dY0EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Jul 3 04:49:01 2025 GMT Not After : Jul 10 04:49:01 2025 GMT Subject: CN=68660bbd-836a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:39:9d:27:88:5c:11:d7:74:92:6f:ae:1c: 5f:91:85:ca:9e:35:97:29:e8:98:86:94:d2:14:35: 08:80:48:38:c1:ba:5b:7e:4c:4f:ab:19:cb:f0:2a: 47:3b:b0:3f:45:fe:bc:ec:f6:73:e5:91:99:2c:ae: 5a:2e:4e:02:95:a4:46:4b:11:dd:5e:5a:06:06:22: c7:69:66:ec:ab:4e:c7:0d:bc:f4:7d:a3:34:a5:8d: fc:c9:e1:79:d9:04:21:c4:4b:d7:3c:32:c4:8c:d9: 5a:cc:21:92:6b:68:0d:35:1a:9c:f0:ec:e7:51:4f: 27:33:30:95:44:9d:ba:dd:4b:c0:45:c2:ea:07:bc: 44:46:86:aa:81:a2:ea:fd:5a:b3:db:31:36:b0:7e: ed:bb:d5:ce:d6:71:4f:05:02:66:33:1a:53:98:4d: 3e:0b:60:d4:5b:b4:95:ba:9b:9b:27:96:2b:0a:4b: b0:8d:0d:17:bc:f0:3e:ef:29:e6:0a:5e:11:fb:8a: cc:1f:b4:42:8d:c6:c5:a7:4c:85:10:6c:67:e0:fe: 5a:b7:1f:a3:af:d9:89:81:86:90:36:2e:74:4d:ea: ab:43:37:28:81:89:75:af:1a:99:4a:d3:d2:d0:0e: 15:37:a3:af:f6:8f:1d:39:83:8d:90:9e:63:7a:55: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F7:2E:60:71:FB:44:C4:BC:8A:B3:98:58:18:B9:B4:6D:B0:BF:3E X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d2:8f:fa:94:c3:3e:48:61:05:11:20:2b:d7:ca:5c:9b:5a: b2:3a:71:3d:a2:a1:c3:f6:e7:fc:5a:42:59:2d:59:42:e8:71: 2b:94:56:81:55:b9:9c:29:ec:02:c3:c5:90:41:d9:a2:fe:24: 4e:4e:9e:f4:89:94:dc:a8:d3:c4:c0:0c:32:21:6e:bd:1b:69: b3:f2:84:50:db:b2:c0:99:a0:a0:09:6b:a8:b8:05:b7:9e:ae: a1:7d:6b:8c:21:01:10:79:e0:2c:c8:fe:80:c9:15:c7:0b:07: 97:bd:22:37:d2:c4:90:ce:e6:2a:6d:94:b6:39:74:8c:aa:14: 90:97:bc:3a:7a:63:cd:53:64:7d:87:12:d7:b0:7b:f7:da:e8: 15:2e:f9:8c:a0:21:1f:6d:ea:5f:fe:65:bc:b3:8d:2f:e1:b1: 04:2c:1f:85:45:d3:84:4b:a4:3e:b6:9a:0d:66:80:68:29:a7: 31:8e:13:45:b7:f2:d2:d5:f1:80:81:31:ee:f7:1c:34:b3:11: a2:2c:99:27:7d:43:23:23:05:a4:e5:be:f6:46:10:df:b9:98: 50:17:fd:96:70:cf:b1:7a:81:c2:56:2e:c5:dd:ec:be:50:e7: f9:e7:26:a6:f0:a6:de:00:1b:1e:87:1f:1a:ae:50:94:ee:62: b1:48:88:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUwNzAzMDQ0OTAxWhcNMjUwNzEwMDQ0OTAxWjAYMRYwFAYD VQQDEw02ODY2MGJiZC04MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbM5nSeIXBHXdJJvrhxfkYXKnjWXKeiYhpTSFDUIgEg4wbpbfkxPqxnL8CpH O7A/Rf687PZz5ZGZLK5aLk4ClaRGSxHdXloGBiLHaWbsq07HDbz0faM0pY38yeF5 2QQhxEvXPDLEjNlazCGSa2gNNRqc8OznUU8nMzCVRJ263UvARcLqB7xERoaqgaLq /Vqz2zE2sH7tu9XO1nFPBQJmMxpTmE0+C2DUW7SVupubJ5YrCkuwjQ0XvPA+7ynm Cl4R+4rMH7RCjcbFp0yFEGxn4P5atx+jr9mJgYaQNi50TeqrQzcogYl1rxqZStPS 0A4VN6Ov9o8dOYONkJ5jelVTdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJj3LmBx +0TEvIqzmFgYubRtsL8+MB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq0o/6lMM+SGEFESAr18pcm1qyOnE9oqHD9uf8WkJZLVlC6HErlFaB VbmcKewCw8WQQdmi/iROTp70iZTcqNPEwAwyIW69G2mz8oRQ27LAmaCgCWuouAW3 nq6hfWuMIQEQeeAsyP6AyRXHCweXvSI30sSQzuYqbZS2OXSMqhSQl7w6emPNU2R9 hxLXsHv32ugVLvmMoCEfbepf/mW8s40v4bEELB+FRdOES6Q+tpoNZoBoKacxjhNF t/LS1fGAgTHu9xw0sxGiLJknfUMjIwWk5b72RhDfuZhQF/2WcM+xeoHCVi7F3ey+ UOf55yam8KbeABsehx8arlCU7mKxSIg9 -----END CERTIFICATE-----Generated at Thu Jul 3 11:28:43 2025 by rpki-client