$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: T/zCjidLv73QCdlw8UQPMk9Le2YbKrZl/n10MoBURIo= Subject key identifier: FA:43:75:7B:EA:52:67:F7:DA:92:A5:A8:2B:2F:11:92:B6:C1:D7:9E Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1E02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1DE9 Signing time: Sat 18 Oct 2025 16:24:24 +0000 Manifest this update: Sat 18 Oct 2025 16:24:24 +0000 Manifest next update: Sat 25 Oct 2025 16:24:24 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: HZtrvpqYIkwq+hSDDHMCjWz1tkUZJluj//T1OKuXnEY=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7682 (0x1e02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Oct 18 16:24:24 2025 GMT Not After : Oct 25 16:24:24 2025 GMT Subject: CN=68f3bf38-ea24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:bd:e0:25:a1:76:00:14:fe:78:e8:df:7b: 75:a9:c8:d6:70:13:f7:fe:b0:10:fd:3a:69:1c:e6: 36:48:aa:50:49:83:2b:8a:18:37:ec:90:db:d9:3f: 09:49:27:8e:81:7a:d3:39:6b:50:26:32:9d:21:b0: 93:56:80:eb:1f:f9:9b:bb:60:2b:ad:6d:54:1c:2a: bf:e7:4c:ec:d1:db:96:95:29:5c:32:80:33:b5:51: 7c:ae:84:2c:12:98:6f:08:89:43:49:f9:f6:40:06: e4:0b:c5:ad:3b:63:5a:58:d9:fb:66:ab:b4:ed:ed: 1e:19:79:2d:3a:e9:2a:24:3c:6c:25:e9:38:4b:4f: 10:12:b7:ed:00:26:52:e8:43:ac:38:64:40:2a:11: 2a:7b:60:78:3b:33:ad:2e:33:84:a1:c7:bb:15:8f: 33:ff:2c:54:12:99:79:77:8b:9c:71:35:49:ff:64: 13:ad:de:4f:27:45:df:9a:c0:69:39:8a:55:f4:68: fd:e6:7f:56:79:16:33:1a:17:10:a5:32:08:b4:5e: ee:94:ea:0e:94:dc:25:e3:45:92:7d:68:96:14:6f: 70:61:68:45:1e:72:4c:1a:6a:a2:d3:58:61:b3:d8: 7f:bf:51:ce:6e:d2:7d:b8:99:89:a1:97:b3:01:cd: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:43:75:7B:EA:52:67:F7:DA:92:A5:A8:2B:2F:11:92:B6:C1:D7:9E X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4c:e7:53:dc:d7:5b:3c:3a:57:65:c9:2a:ee:28:b1:38:84: e8:65:99:5c:e4:c6:a8:4f:1d:c7:9d:74:6a:86:c1:eb:1a:d5: a0:c5:b7:86:55:cb:1e:b0:2b:4a:95:15:90:4c:51:04:5d:f3: bb:bc:c8:e4:8f:f2:da:1e:f5:bb:8d:be:f5:03:94:e0:74:3b: 14:16:59:e7:18:3d:06:a3:59:c6:16:d3:25:12:47:17:07:58: 58:be:78:c6:01:b6:bd:52:12:31:7c:4b:22:99:29:1f:04:2f: 47:e4:74:15:eb:87:fe:ff:b7:b0:be:8f:09:2b:54:68:47:25: 96:c2:5d:02:32:29:a1:42:62:77:d3:6a:f3:c3:55:a9:61:73: 71:96:2d:58:1e:78:74:57:c7:65:64:d4:05:32:11:4e:09:80: eb:90:bb:a3:ba:cb:5f:4f:b5:fb:86:84:a6:49:3c:a6:83:2e: 6c:0d:b4:f0:d3:ca:72:34:d7:3b:a1:e4:de:b1:b4:cb:82:51: 05:88:85:e6:c9:55:d3:ef:0f:e4:5f:d6:6a:76:2e:a4:93:fb: c8:3c:09:a6:c6:59:fb:fd:46:0b:76:23:b1:64:64:e8:45:b7: 37:ef:95:c8:29:26:13:32:78:e2:f2:d3:e9:50:e8:7a:9f:77: d4:29:98:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUxMDE4MTYyNDI0WhcNMjUxMDI1MTYyNDI0WjAYMRYwFAYD VQQDEw02OGYzYmYzOC1lYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kC94CWhdgAU/njo33t1qcjWcBP3/rAQ/TppHOY2SKpQSYMrihg37JDb2T8J SSeOgXrTOWtQJjKdIbCTVoDrH/mbu2ArrW1UHCq/50zs0duWlSlcMoAztVF8roQs EphvCIlDSfn2QAbkC8WtO2NaWNn7Zqu07e0eGXktOukqJDxsJek4S08QErftACZS 6EOsOGRAKhEqe2B4OzOtLjOEoce7FY8z/yxUEpl5d4uccTVJ/2QTrd5PJ0XfmsBp OYpV9Gj95n9WeRYzGhcQpTIItF7ulOoOlNwl40WSfWiWFG9wYWhFHnJMGmqi01hh s9h/v1HObtJ9uJmJoZezAc2QaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpDdXvq Umf32pKlqCsvEZK2wdeeMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNTOdT3NdbPDpXZckq7iixOIToZZlc5MaoTx3HnXRqhsHrGtWgxbeG VcsesCtKlRWQTFEEXfO7vMjkj/LaHvW7jb71A5TgdDsUFlnnGD0Go1nGFtMlEkcX B1hYvnjGAba9UhIxfEsimSkfBC9H5HQV64f+/7ewvo8JK1RoRyWWwl0CMimhQmJ3 02rzw1WpYXNxli1YHnh0V8dlZNQFMhFOCYDrkLujustfT7X7hoSmSTymgy5sDbTw 08pyNNc7oeTesbTLglEFiIXmyVXT7w/kX9Zqdi6kk/vIPAmmxln7/UYLdiOxZGTo Rbc375XIKSYTMnji8tPpUOh6n3fUKZgY -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:02 2025 by rpki-client