$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json) Hash identifier: 0fEXz67Udk9J60Irybt7zNOK3vOe4LOOl7+LFlvHSBM= Subject key identifier: 18:50:E8:1D:04:E0:E4:7B:7D:D3:3F:6D:A6:42:C9:F3:56:9E:11:B7 Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft Manifest number: 0781 Signing time: Wed 02 Jul 2025 21:45:30 +0000 Manifest this update: Wed 02 Jul 2025 21:45:29 +0000 Manifest next update: Wed 09 Jul 2025 21:45:29 +0000 Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: ulPRqz6b7XHhKLe2p9BZAfaevC9+MXWQtkZTLS4uv0o=) 2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=) 3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Validity Not Before: Jul 2 21:45:29 2025 GMT Not After : Jul 9 21:45:29 2025 GMT Subject: CN=6865a87a-1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:81:6b:84:9c:aa:70:93:c4:b7:dc:ca:28: d4:fa:06:10:71:b4:f2:e3:df:fe:f1:b7:0a:ee:af: 2a:40:b3:ed:a8:23:31:d0:c1:48:3a:ee:f7:ec:b1: dd:d3:ec:ba:ca:de:19:ef:aa:4b:99:44:08:49:27: 48:d5:28:5b:c2:84:70:76:17:f3:48:05:91:5a:dd: 46:63:a5:13:1b:fe:68:09:56:5a:03:d3:87:83:0c: b5:be:f4:f2:bb:ed:83:d3:36:b4:76:49:37:0f:05: 79:8d:82:5d:b4:c4:e7:a8:84:2c:14:7f:81:6c:1f: d8:aa:d9:b1:95:15:36:c0:81:ce:87:98:42:63:dc: f5:74:6e:44:71:f7:06:c1:5b:08:c2:7a:c8:7c:9b: f9:49:f3:11:89:8e:b6:3e:70:b1:61:09:02:af:39: 6d:7d:64:b7:0c:c6:66:13:2c:c4:4b:af:2e:1e:67: da:b6:7a:e6:47:69:3e:d0:04:3e:60:f9:fd:00:d3: be:fa:bb:1b:46:1f:69:ae:eb:26:46:03:ad:f3:57: 0d:98:f3:28:d5:bb:30:f3:e0:d0:c4:e4:17:06:34: 3b:55:77:4c:50:ed:a7:68:67:a2:ad:ad:43:d4:ad: fa:81:f7:09:bf:4b:12:88:2f:cf:89:6a:61:3b:99: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:50:E8:1D:04:E0:E4:7B:7D:D3:3F:6D:A6:42:C9:F3:56:9E:11:B7 X509v3 Authority Key Identifier: keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:89:d7:bd:d0:c7:2f:9b:1c:4c:96:1f:6f:69:e3:19:d9: 60:c2:7d:1f:da:fc:e8:8b:aa:19:54:b2:7d:d1:16:e0:da:e8: 75:20:e2:0a:fa:90:75:c0:9e:2a:8f:26:85:3f:d8:9a:7b:84: 0d:4e:25:5e:d7:3f:ea:15:c0:2e:f4:72:dc:26:4b:f2:14:61: 61:16:c4:ee:ff:30:20:a2:f7:3b:f4:37:5a:9a:a2:57:b6:ba: d0:98:9d:fd:50:7d:14:36:8f:9c:ee:de:77:47:03:a0:fb:f1: f0:44:d3:ea:f8:d9:60:18:c2:fc:67:8c:bc:a3:82:d2:76:39: 74:f3:4b:68:d7:a0:59:e5:a1:b0:68:30:db:35:0a:00:e6:04: 6c:f3:26:d4:e2:6e:d2:40:55:88:7c:16:f6:92:14:8a:9d:81: ed:a4:b9:8e:85:44:d1:30:d6:cb:ba:93:18:fc:11:37:d1:69: 92:55:0b:00:5b:ce:c0:9c:0f:1d:85:28:3a:b9:95:ab:36:ac: 38:24:26:53:55:ab:2c:50:9c:53:8e:b5:94:5b:71:cc:f3:7e: 01:9a:66:b4:fe:f7:8b:3b:52:3f:ea:f6:88:e4:b4:0f:ce:ad: 8c:23:f4:46:24:f5:12:b5:51:db:65:3b:ef:1b:2b:b6:ff:c6: 5a:73:38:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB RjlCMUQzNTgwHhcNMjUwNzAyMjE0NTI5WhcNMjUwNzA5MjE0NTI5WjAYMRYwFAYD VQQDEw02ODY1YTg3YS0xMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7OBa4ScqnCTxLfcyijU+gYQcbTy49/+8bcK7q8qQLPtqCMx0MFIOu737LHd 0+y6yt4Z76pLmUQISSdI1ShbwoRwdhfzSAWRWt1GY6UTG/5oCVZaA9OHgwy1vvTy u+2D0za0dkk3DwV5jYJdtMTnqIQsFH+BbB/YqtmxlRU2wIHOh5hCY9z1dG5EcfcG wVsIwnrIfJv5SfMRiY62PnCxYQkCrzltfWS3DMZmEyzES68uHmfatnrmR2k+0AQ+ YPn9ANO++rsbRh9prusmRgOt81cNmPMo1bsw8+DQxOQXBjQ7VXdMUO2naGeira1D 1K36gfcJv0sSiC/PiWphO5m0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhQ6B0E 4OR7fdM/baZCyfNWnhG3MB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2 aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtmonXvdDHL5scTJYfb2njGdlgwn0f2vzoi6oZVLJ90Rbg2uh1IOIK +pB1wJ4qjyaFP9iae4QNTiVe1z/qFcAu9HLcJkvyFGFhFsTu/zAgovc79DdamqJX trrQmJ39UH0UNo+c7t53RwOg+/HwRNPq+NlgGML8Z4y8o4LSdjl080to16BZ5aGw aDDbNQoA5gRs8ybU4m7SQFWIfBb2khSKnYHtpLmOhUTRMNbLupMY/BE30WmSVQsA W87AnA8dhSg6uZWrNqw4JCZTVassUJxTjrWUW3HM834Bmma0/veLO1I/6vaI5LQP zq2MI/RGJPUStVHbZTvvGyu2/8Zaczgj -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:12 2025 by rpki-client