$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft File: dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json) Hash identifier: SRYuJCZ1lhegjSU6JAzpvG329+flIH4DfUdNXO4AvR0= Subject key identifier: DD:9E:DD:E0:BE:A7:83:66:B8:B4:36:50:93:05:8B:FC:3D:58:E5:8F Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 Certificate issuer: /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft Manifest number: 0667 Signing time: Fri 18 Jul 2025 14:49:11 +0000 Manifest this update: Fri 18 Jul 2025 14:49:10 +0000 Manifest next update: Fri 25 Jul 2025 14:49:10 +0000 Files and hashes: 1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: A5+B/2FJuWkiYynn8lpyiy1Kpz+srTzJKyu+YBXTh1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Validity Not Before: Jul 18 14:49:10 2025 GMT Not After : Jul 25 14:49:10 2025 GMT Subject: CN=687a5ee6-34b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:35:c7:cf:d8:79:9e:7a:1d:f0:5c:bb:0c: 90:46:48:a0:bf:af:07:5e:6d:a3:b8:c1:18:85:f6: b3:86:af:9b:db:05:38:32:2e:af:60:c8:f7:10:8a: be:e5:df:ba:08:8a:1d:86:4c:d9:67:09:ef:c9:3a: 8d:93:35:45:ab:fc:aa:54:e0:39:4a:01:d9:1f:98: 7f:72:2b:be:46:4a:80:4b:ef:75:63:e7:f0:33:6e: 18:8b:5d:4a:7c:25:6b:38:6e:7c:8f:af:0f:06:b1: a7:85:6a:c0:67:e3:13:37:dc:11:4b:94:95:12:df: 89:60:23:d5:50:bb:6c:25:4f:0a:73:ed:3e:48:5d: 77:fd:7d:c2:00:70:23:24:df:7f:0f:47:5a:1b:44: 74:2a:c2:a9:01:8c:98:b0:7e:d9:96:d4:e8:27:2d: c3:05:7f:63:20:8a:4a:ac:4d:a3:3d:88:2d:9d:fa: a8:28:02:b2:a4:0a:19:91:8c:dd:0d:32:8e:80:bf: 1c:e1:a4:20:ae:96:ea:5a:5f:46:25:1b:ca:07:49: 32:6b:fe:62:46:e1:0a:90:99:1b:f7:5e:26:a4:66: 50:ff:fe:56:d9:35:38:3a:55:6c:04:11:9f:2b:70: e6:9d:fb:24:f7:ed:86:68:5c:cc:6b:36:22:1f:37: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:DD:E0:BE:A7:83:66:B8:B4:36:50:93:05:8B:FC:3D:58:E5:8F X509v3 Authority Key Identifier: keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a4:49:0a:ae:90:c7:38:4e:ab:ed:5b:33:82:87:f6:21:62: 31:73:a0:58:ce:37:15:a1:dd:70:24:67:d8:5e:0e:af:f4:05: 38:5b:61:b5:e9:10:d9:2f:9d:ae:46:b8:46:0f:9e:b6:fe:99: ad:1b:7b:37:61:4e:fa:cb:ac:74:22:01:c4:98:a8:4a:97:c5: 26:02:9a:9a:d0:f9:37:a3:b1:6f:7a:ec:1f:21:fe:2d:0c:05: 16:80:57:7f:29:44:a8:2c:e8:95:36:f1:4b:ed:67:ec:f9:6f: 26:cc:7e:ff:7c:d5:42:e1:45:53:bb:01:41:d7:e3:5a:8f:c6: 3b:ce:b7:87:0c:e7:ab:4f:58:5a:e2:4b:e8:25:69:9f:d3:7e: 35:c9:98:d6:bb:ae:44:b4:1d:a3:d2:ac:90:25:b1:9d:7c:f2: 88:95:24:be:0e:0e:c5:39:46:42:15:ea:80:80:61:e9:20:1a: 1a:3b:03:2e:b9:ed:3b:71:82:22:10:d7:96:ae:b1:98:71:5f: 09:78:cb:30:71:95:18:4b:05:b7:5f:5a:c3:8b:9f:8e:9d:6a: fc:72:f8:d5:27:0c:78:5f:45:43:be:e9:b1:77:c9:67:34:8f: cd:95:56:c5:31:79:43:f2:e4:a4:e5:15:fa:c2:7f:22:73:99: 88:98:a4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFFMTMxMTAvBgNVBAUTKDc0RTFDQjgzMzYyNjg3MzQ3ODkzMkNBMjExODhBODhG REYyRTlERTAwHhcNMjUwNzE4MTQ0OTEwWhcNMjUwNzI1MTQ0OTEwWjAYMRYwFAYD VQQDEw02ODdhNWVlNi0zNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy781x8/YeZ56HfBcuwyQRkigv68HXm2juMEYhfazhq+b2wU4Mi6vYMj3EIq+ 5d+6CIodhkzZZwnvyTqNkzVFq/yqVOA5SgHZH5h/ciu+RkqAS+91Y+fwM24Yi11K fCVrOG58j68PBrGnhWrAZ+MTN9wRS5SVEt+JYCPVULtsJU8Kc+0+SF13/X3CAHAj JN9/D0daG0R0KsKpAYyYsH7ZltToJy3DBX9jIIpKrE2jPYgtnfqoKAKypAoZkYzd DTKOgL8c4aQgrpbqWl9GJRvKB0kya/5iRuEKkJkb914mpGZQ//5W2TU4OlVsBBGf K3Dmnfsk9+2GaFzMazYiHzftCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2e3eC+ p4NmuLQ2UJMFi/w9WOWPMB8GA1UdIwQYMBaAFHThy4M2Joc0eJMsohGIqI/fLp3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUUxMy8xODNGOTlGQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6UjRreXlpRVlpb2o5OHVu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPSExnelltaHpSNGt5eWlFWWlvajk4dW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUUxMy8xODNGOTlGQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6 UjRreXlpRVlpb2o5OHVuZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbpEkKrpDHOE6r7Vszgof2IWIxc6BYzjcVod1wJGfYXg6v9AU4W2G1 6RDZL52uRrhGD562/pmtG3s3YU76y6x0IgHEmKhKl8UmApqa0Pk3o7FveuwfIf4t DAUWgFd/KUSoLOiVNvFL7Wfs+W8mzH7/fNVC4UVTuwFB1+Naj8Y7zreHDOerT1ha 4kvoJWmf0341yZjWu65EtB2j0qyQJbGdfPKIlSS+Dg7FOUZCFeqAgGHpIBoaOwMu ue07cYIiENeWrrGYcV8JeMswcZUYSwW3X1rDi5+OnWr8cvjVJwx4X0VDvumxd8ln NI/NlVbFMXlD8uSk5RX6wn8ic5mImKQG -----END CERTIFICATE-----Generated at Sun Jul 20 07:11:46 2025 by rpki-client