$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: pt4MbUc2+uvM7QWQAmm8+Q8gH8iZE50wAxR/QO2ycj8= Subject key identifier: 2A:84:9F:8D:C4:E2:8B:27:68:D1:B7:D1:14:87:58:17:30:66:8D:20 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 0765 Signing time: Wed 02 Jul 2025 21:51:12 +0000 Manifest this update: Wed 02 Jul 2025 21:51:12 +0000 Manifest next update: Wed 09 Jul 2025 21:51:12 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: 03VWHl6zIAz2+YNJod3S7xvLTjdSb1xrE9vwBNH9jF8=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: JZswEN+XecxArpSSM4RVMDRfDgGMw001dDeS9M+57zo=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: oEPtlYq/nXMulTOfDIA15K7NQ6WPK/Aw89/ToBV4eiI=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: a7MdMxFeYrNOuayo2yExYYUNllObfBGwl1IXCgsh4ko=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Jul 2 21:51:12 2025 GMT Not After : Jul 9 21:51:12 2025 GMT Subject: CN=6865a9d0-d5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:b2:ea:be:4f:ad:ed:be:76:8f:ab:f5:23: 5c:ce:01:2d:c7:dc:27:05:36:64:1b:40:04:ce:bd: a6:f1:36:58:0d:17:35:6f:60:41:e0:6f:25:e5:a5: 81:df:d6:e0:6b:8c:a7:b8:fc:47:b3:52:61:e5:11: ea:9c:cc:cf:51:82:23:7c:46:a2:c4:da:bd:5d:08: fe:b8:4b:3d:1d:e1:80:b0:cb:79:fb:62:2c:bb:95: 72:ae:eb:cb:4d:b0:6c:ea:51:b4:cf:51:2c:45:63: ca:b5:7f:72:8e:fb:20:76:8c:e2:3c:62:35:42:1e: 25:7b:06:81:ed:db:73:6b:5b:0f:16:e5:50:2b:d1: 67:5b:fd:ea:78:cd:2f:d8:a2:88:20:8f:ab:cc:67: 9e:60:71:bf:2f:fc:2b:86:3c:54:f4:93:d7:cb:ab: e0:9f:2b:ab:24:74:33:94:7c:db:e4:77:09:b1:cf: 99:37:9b:53:4d:ed:09:79:07:03:4e:0b:f7:b3:c4: c7:12:4c:52:9a:01:88:b1:35:4e:ef:b7:fc:d1:e4: 58:6f:6f:59:f6:20:fc:67:f3:d0:1c:79:3c:c6:0b: fe:88:44:45:fd:4e:5f:ad:bf:f3:8f:85:ba:a4:49: b3:29:c4:9f:8b:16:e2:b7:0c:3a:a6:f3:7b:ec:b5: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:9F:8D:C4:E2:8B:27:68:D1:B7:D1:14:87:58:17:30:66:8D:20 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:02:29:bd:9e:dd:b1:e0:aa:1f:b4:fa:03:8b:64:e7:ac:58: 8a:33:96:f1:cb:ca:b3:63:68:be:c6:bd:a3:dd:55:67:31:07: 00:82:a8:18:90:70:58:e1:47:f5:80:6f:cc:a5:2e:82:52:ee: 6c:7a:d0:77:3b:5a:2c:ee:b8:fb:aa:b4:36:2c:a1:2e:05:b9: de:da:36:75:c3:97:29:72:0d:c4:2d:20:f6:bb:58:40:98:6b: ea:2c:35:a2:1c:eb:92:5d:a4:c9:e6:6b:c0:a1:5b:c5:cb:f4: bb:ef:9f:76:6a:13:ec:a6:d1:eb:4c:13:95:83:9e:38:7b:92: 03:b6:6d:87:42:5c:a1:58:99:2b:07:ee:c4:c3:3f:48:40:96: 95:ab:44:4e:d7:e1:96:4d:5c:b5:ff:61:3a:18:05:b3:9f:bd: 65:37:a4:b2:fa:e2:e3:e4:26:6f:2d:58:0b:58:d9:ee:de:ef: 8d:7f:e7:51:fd:da:51:76:ec:c2:26:06:b4:56:5d:e3:18:ad: 71:ec:c7:e4:f5:5c:f1:eb:33:56:cf:43:31:e1:3e:46:c5:d9: cc:18:98:a7:21:d6:68:9c:f1:0b:d2:77:ec:9e:b9:dd:61:57: 9f:00:19:b7:1a:e7:72:a5:77:34:05:9e:1a:36:5a:ca:ae:79: f0:9b:59:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUwNzAyMjE1MTEyWhcNMjUwNzA5MjE1MTEyWjAYMRYwFAYD VQQDEw02ODY1YTlkMC1kNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ6y6r5Pre2+do+r9SNczgEtx9wnBTZkG0AEzr2m8TZYDRc1b2BB4G8l5aWB 39bga4ynuPxHs1Jh5RHqnMzPUYIjfEaixNq9XQj+uEs9HeGAsMt5+2Isu5VyruvL TbBs6lG0z1EsRWPKtX9yjvsgdoziPGI1Qh4lewaB7dtza1sPFuVQK9FnW/3qeM0v 2KKIII+rzGeeYHG/L/wrhjxU9JPXy6vgnyurJHQzlHzb5HcJsc+ZN5tTTe0JeQcD Tgv3s8THEkxSmgGIsTVO77f80eRYb29Z9iD8Z/PQHHk8xgv+iERF/U5frb/zj4W6 pEmzKcSfixbitww6pvN77LXx4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqEn43E 4osnaNG30RSHWBcwZo0gMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJAim9nt2x4KoftPoDi2TnrFiKM5bxy8qzY2i+xr2j3VVnMQcAgqgY kHBY4Uf1gG/MpS6CUu5setB3O1os7rj7qrQ2LKEuBbne2jZ1w5cpcg3ELSD2u1hA mGvqLDWiHOuSXaTJ5mvAoVvFy/S77592ahPsptHrTBOVg544e5IDtm2HQlyhWJkr B+7Ewz9IQJaVq0RO1+GWTVy1/2E6GAWzn71lN6Sy+uLj5CZvLVgLWNnu3u+Nf+dR /dpRduzCJga0Vl3jGK1x7Mfk9Vzx6zNWz0Mx4T5GxdnMGJinIdZonPEL0nfsnrnd YVefABm3GudypXc0BZ4aNlrKrnnwm1lN -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:52 2025 by rpki-client