$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: jDq1VeQe3Miu5lKBtis1e4GQXWsrkvuyBaJtg/4F+jM= Subject key identifier: 68:6C:3F:12:14:A5:F3:DE:7C:DB:58:20:38:75:EE:5E:C5:93:B9:20 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34AD Signing time: Fri 22 Aug 2025 15:14:18 +0000 Manifest this update: Fri 22 Aug 2025 15:14:18 +0000 Manifest next update: Fri 29 Aug 2025 15:14:18 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: 6X/WyNDp6okDj6Rhn6dwcmibpm56o/m7Jsurv5PMLHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Aug 22 15:14:18 2025 GMT Not After : Aug 29 15:14:18 2025 GMT Subject: CN=68a8894a-e53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:f3:c3:5e:1d:69:28:a9:ad:e5:75:3d:d7: 66:6e:7a:53:65:77:c2:d7:59:fe:ec:2e:1a:fa:09: fc:3f:a3:4b:45:1f:2d:77:7b:bd:93:9d:f1:17:39: a4:16:5a:3f:d6:20:34:ab:eb:ee:1e:6d:08:8c:8e: 66:a6:ee:7f:f9:0a:9d:bb:80:b9:1f:90:33:c1:e7: 2f:a6:cc:91:d5:a9:44:09:73:d7:d2:c3:b0:b5:22: 10:21:36:53:b4:f6:18:79:f3:c9:19:95:ff:d3:d5: 76:28:e7:e1:26:b8:50:8d:bc:3f:43:a5:f9:9a:6d: 7e:9e:a6:2d:e9:05:c1:21:ad:8e:69:3e:34:66:93: 24:27:27:d8:b8:30:67:f3:39:db:0d:fa:a9:f0:de: b4:e4:a3:4f:9c:40:1b:b8:78:bf:24:e5:c5:1b:aa: f1:65:7f:79:88:b5:ea:4b:bb:c4:b5:48:a2:72:2b: 2d:36:33:6c:f1:2d:02:5c:ef:c7:c8:67:43:c6:a9: 72:42:a7:26:37:49:eb:bc:63:75:b6:3a:69:db:4e: 70:2e:6d:86:3f:1a:f9:e9:5a:fe:e3:19:61:48:a1: bc:9e:0f:5d:71:e7:9b:e7:c1:5c:b9:6c:24:9e:f0: 5d:90:d6:0d:29:84:9a:09:30:2a:2f:40:90:e0:f3: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:3F:12:14:A5:F3:DE:7C:DB:58:20:38:75:EE:5E:C5:93:B9:20 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:03:59:74:21:c4:64:87:70:b2:b6:91:29:bc:24:b2:f6:09: ba:9d:40:8d:ea:9a:37:8e:59:05:c3:fd:87:d3:13:56:1e:23: 3e:87:fc:fa:81:49:c6:67:7a:e6:e0:cb:b1:45:04:c0:ce:de: c1:ee:3a:1f:9b:74:89:05:4c:1f:62:33:6a:7c:28:6e:71:77: b0:cb:23:fa:08:c2:49:e0:ed:81:fe:1b:47:28:e2:65:a9:ed: 83:94:ff:b6:31:ec:1f:53:73:0f:9d:08:1b:f5:0f:e4:a4:d3: 29:49:d2:63:49:6a:2c:ef:21:ac:c5:82:ce:3a:66:6b:fd:7d: f0:54:3c:08:f1:28:17:fc:8a:35:2b:65:7c:f0:66:4a:fe:9f: 66:c2:b5:60:ce:20:3a:19:65:02:ad:08:82:9f:c9:51:cc:a7: c5:0b:23:d2:e8:c0:59:cc:99:d8:e3:ca:fd:f2:e8:0e:03:57: 6a:60:0e:65:f0:72:e5:f5:52:00:f9:42:cf:9e:13:cc:29:00: 06:b9:58:b0:24:1d:cd:87:a6:ac:e3:73:3e:b4:c4:65:cf:3c: 2b:5f:d5:39:a2:e1:90:39:95:60:5c:0f:42:88:3f:8d:8a:a5: b0:1a:8c:4b:2a:6e:23:8c:59:65:f8:31:28:71:56:5a:c8:01: f8:cd:49:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwODIyMTUxNDE4WhcNMjUwODI5MTUxNDE4WjAYMRYwFAYD VQQDEw02OGE4ODk0YS1lNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW/zw14daSipreV1PddmbnpTZXfC11n+7C4a+gn8P6NLRR8td3u9k53xFzmk Flo/1iA0q+vuHm0IjI5mpu5/+Qqdu4C5H5AzwecvpsyR1alECXPX0sOwtSIQITZT tPYYefPJGZX/09V2KOfhJrhQjbw/Q6X5mm1+nqYt6QXBIa2OaT40ZpMkJyfYuDBn 8znbDfqp8N605KNPnEAbuHi/JOXFG6rxZX95iLXqS7vEtUiicistNjNs8S0CXO/H yGdDxqlyQqcmN0nrvGN1tjpp205wLm2GPxr56Vr+4xlhSKG8ng9dceeb58FcuWwk nvBdkNYNKYSaCTAqL0CQ4PPWbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhsPxIU pfPefNtYIDh17l7Fk7kgMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLA1l0IcRkh3CytpEpvCSy9gm6nUCN6po3jlkFw/2H0xNWHiM+h/z6 gUnGZ3rm4MuxRQTAzt7B7jofm3SJBUwfYjNqfChucXewyyP6CMJJ4O2B/htHKOJl qe2DlP+2MewfU3MPnQgb9Q/kpNMpSdJjSWos7yGsxYLOOmZr/X3wVDwI8SgX/Io1 K2V88GZK/p9mwrVgziA6GWUCrQiCn8lRzKfFCyPS6MBZzJnY48r98ugOA1dqYA5l 8HLl9VIA+ULPnhPMKQAGuViwJB3Nh6as43M+tMRlzzwrX9U5ouGQOZVgXA9CiD+N iqWwGoxLKm4jjFll+DEocVZayAH4zUnw -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:22 2025 by rpki-client