$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: eCozSPmq0EA2rFBnI6qBkhwkXib2xzXaOyeVudYybcM= Subject key identifier: 02:E9:B6:3C:88:58:CA:3E:F7:4B:44:D0:D1:7C:C7:B2:0C:90:9E:87 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 1164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 115A Signing time: Sun 20 Jul 2025 17:16:30 +0000 Manifest this update: Sun 20 Jul 2025 17:16:30 +0000 Manifest next update: Sun 27 Jul 2025 17:16:30 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: p1I2aNW+QdIz8cuo3sFZWXglUDE0PUwPiz07vBrBrRI=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Jul 20 17:16:30 2025 GMT Not After : Jul 27 17:16:30 2025 GMT Subject: CN=687d246e-62ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:72:de:2f:4b:95:79:f0:99:30:71:40:6e: 7d:c8:bf:9b:0a:27:8a:a9:35:a3:37:19:81:0b:83: f4:67:d2:1f:e9:47:48:0a:90:06:ba:9b:24:e2:d7: 3f:44:ec:09:56:5a:c9:14:94:ef:71:43:36:68:af: 93:c8:6c:15:41:39:05:b0:54:e3:53:fb:59:70:44: 41:0d:a2:93:7f:61:b8:0b:5c:68:af:cb:0f:e6:c4: ea:4a:1a:91:41:c6:a1:20:c3:b3:c3:5d:ee:1c:7f: c0:c3:db:75:1f:50:2d:cc:83:45:d9:41:2c:04:43: 53:c0:e3:06:41:bf:89:5f:2a:df:1f:a1:7f:be:8f: 59:ce:74:88:2c:b3:b8:6b:aa:c8:5b:a1:83:f0:2f: 1a:7b:da:67:3d:df:63:fa:7c:58:4a:02:3c:b3:8d: 74:35:ca:8e:e4:62:3e:80:cd:22:80:88:95:0f:19: a9:56:cb:21:fd:7e:0c:40:27:38:90:7a:fb:bb:ed: c5:48:dc:12:e9:bc:ba:ab:34:59:91:a2:26:be:98: 42:97:d0:be:b5:9a:77:64:73:59:a0:1e:f9:01:22: 50:87:0f:da:f9:e9:4f:84:84:98:28:9c:79:ac:0d: 05:a6:52:bb:62:ed:bc:cc:ac:4c:7e:b3:93:1d:03: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E9:B6:3C:88:58:CA:3E:F7:4B:44:D0:D1:7C:C7:B2:0C:90:9E:87 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:5a:76:6e:9a:f3:a5:fe:7b:f6:8e:1c:bb:f5:31:79:4d: 5a:7a:3d:c4:64:35:92:1c:44:58:05:59:5c:23:4f:95:bd:18: eb:fd:45:ba:f3:46:d2:4b:8f:8f:99:9b:59:f8:44:dc:e8:1d: b0:2e:1b:0c:c9:27:e5:f4:ee:05:34:21:95:23:3a:73:34:cd: d0:b0:6d:a9:78:9f:c3:7d:68:a5:bf:a3:e0:c0:d3:e6:88:ad: f1:b6:1d:3c:10:4b:10:fa:5b:a9:db:ae:1d:d6:49:7f:b0:51: 88:27:69:38:d3:dc:22:1b:bf:6f:52:bb:29:6e:45:7a:85:e1: fe:8f:93:d1:6e:82:d3:8a:a7:67:8b:82:e6:93:cd:cd:84:07: f5:91:e5:c2:eb:31:96:b9:12:21:18:cc:a3:bf:73:3e:23:c9: 78:a5:ba:91:1d:71:81:5d:f0:10:d5:0f:c1:b1:69:51:45:42: 39:56:3a:e2:5c:d3:cd:ff:6e:95:9f:46:ad:1e:7b:5f:78:62: fb:eb:bd:74:64:96:b6:d9:f0:a0:12:b5:0a:9e:95:0a:7b:1b: e9:b2:82:b2:9f:e2:cc:7b:2a:19:79:73:6c:d7:a0:df:bf:c6: da:51:f5:8d:f8:1e:08:90:00:ac:ef:12:9d:9c:a9:3c:2f:d7: 2d:53:d1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjUwNzIwMTcxNjMwWhcNMjUwNzI3MTcxNjMwWjAYMRYwFAYD VQQDEw02ODdkMjQ2ZS02MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SBy3i9LlXnwmTBxQG59yL+bCieKqTWjNxmBC4P0Z9If6UdICpAGupsk4tc/ ROwJVlrJFJTvcUM2aK+TyGwVQTkFsFTjU/tZcERBDaKTf2G4C1xor8sP5sTqShqR QcahIMOzw13uHH/Aw9t1H1AtzINF2UEsBENTwOMGQb+JXyrfH6F/vo9ZznSILLO4 a6rIW6GD8C8ae9pnPd9j+nxYSgI8s410NcqO5GI+gM0igIiVDxmpVssh/X4MQCc4 kHr7u+3FSNwS6by6qzRZkaImvphCl9C+tZp3ZHNZoB75ASJQhw/a+elPhISYKJx5 rA0FplK7Yu28zKxMfrOTHQNMHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALptjyI WMo+90tE0NF8x7IMkJ6HMB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSY1p2bprzpf579o4cu/UxeU1aej3EZDWSHERYBVlcI0+VvRjr/UW6 80bSS4+PmZtZ+ETc6B2wLhsMySfl9O4FNCGVIzpzNM3QsG2peJ/DfWilv6PgwNPm iK3xth08EEsQ+lup264d1kl/sFGIJ2k409wiG79vUrspbkV6heH+j5PRboLTiqdn i4Lmk83NhAf1keXC6zGWuRIhGMyjv3M+I8l4pbqRHXGBXfAQ1Q/BsWlRRUI5Vjri XNPN/26Vn0atHntfeGL76710ZJa22fCgErUKnpUKexvpsoKyn+LMeyoZeXNs16Df v8baUfWN+B4IkACs7xKdnKk8L9ctU9H2 -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:06 2025 by rpki-client