$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: 3eMDGa9Nszrt1bciDrB1taFO1ycqFIR7QMy4iDk3lds= Subject key identifier: 74:9A:17:DF:91:12:A5:40:07:02:F4:2B:95:DF:9D:E7:96:F0:5A:C3 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 56 Signing time: Wed 23 Jul 2025 07:32:12 +0000 Manifest this update: Wed 23 Jul 2025 07:32:11 +0000 Manifest next update: Wed 30 Jul 2025 07:32:11 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: glzaGaM9TZznUwXTYhyLJfxXbxwSpYHWmKz8mvCYkmM=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Jul 23 07:32:11 2025 GMT Not After : Jul 30 07:32:11 2025 GMT Subject: CN=68808ffc-8de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:4f:6e:8f:d4:14:e3:d8:b5:04:bf:1d:ce: e2:08:f9:d9:2e:7c:2f:5e:d8:80:ef:95:44:aa:42: 17:79:50:09:f5:d1:31:ac:92:f8:a6:d5:e1:86:ee: fe:30:43:79:3a:79:6e:4d:33:d9:cc:b3:93:ff:da: 68:2e:87:ee:66:f0:fd:00:52:89:76:55:cc:54:5d: 3b:08:81:74:c1:27:5c:cc:f9:00:4f:06:e8:ee:ab: 51:4f:4a:5c:cc:00:55:61:12:18:89:d6:3b:82:b8: 37:cf:c5:b5:a7:18:ce:03:6f:ce:42:4f:91:7c:dd: 3e:b3:35:0c:eb:42:c7:63:cc:84:dc:2b:a3:75:c0: 08:05:f6:e3:51:47:d8:88:55:0c:23:b3:55:3a:35: e3:42:2f:db:b2:51:68:93:16:fa:94:6a:2b:11:23: 1a:2b:86:98:72:6a:ef:ce:63:d2:0a:92:0d:8c:d2: bc:be:2c:db:70:dc:99:d3:7a:8e:6a:8c:b8:ed:18: 33:64:9b:e1:23:70:ce:44:65:95:b4:91:2d:c8:0f: 98:6e:2a:ea:31:56:66:a9:de:fb:13:b7:33:23:0d: 0e:54:32:fc:40:a8:c5:d1:c3:5c:c9:01:d9:b1:cb: fa:09:28:2a:06:eb:81:3d:4d:1e:40:2f:58:dd:54: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:17:DF:91:12:A5:40:07:02:F4:2B:95:DF:9D:E7:96:F0:5A:C3 X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:71:c0:1c:6b:bd:e4:28:e9:dc:f8:fe:bd:b4:88:4b:99: 94:50:0f:b9:ad:07:88:30:00:e1:f4:56:9a:b7:8f:81:3e:b4: d4:53:c4:dd:c2:f4:e6:a5:ed:a4:4e:0f:c8:63:fa:50:33:48: f2:30:e0:d4:fd:1f:ac:b5:4d:fc:8d:2b:57:d3:ed:42:de:75: 37:c2:75:5d:33:d0:97:e0:30:07:0b:d5:b0:d4:10:92:fe:94: 52:c7:b0:45:04:8c:f9:1f:a0:de:f4:69:b8:cc:75:6b:a4:9c: 45:f8:6c:4a:7e:83:c3:60:fe:cf:98:8f:f3:eb:5e:67:06:03: 4d:46:27:a3:03:aa:81:d5:7d:e7:ad:82:2e:b6:af:29:54:51: e4:64:5c:c1:d9:7c:cc:fa:58:a0:62:33:06:96:af:88:3d:37: a7:d4:70:49:fe:fb:d5:62:59:8b:98:f1:dc:40:c8:64:2f:80: d6:13:ab:07:cc:6b:c5:b2:1e:02:49:95:69:55:1e:c4:0d:2a: 72:e9:8b:63:30:de:87:a2:12:9a:bd:a5:48:2a:32:27:a6:c1: cd:59:00:29:be:c5:8d:9e:43:54:d6:8e:1d:d8:ac:e5:ef:7b: ab:ef:f9:3f:cd:f7:e7:e7:0f:c9:71:21:53:0e:9a:0d:bd:ab: a5:72:53:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoNzU4QUMyQkVEQURDQkEzQUQ3MzgxNjlGQjM4OUQ1MDhC NTRENzRCRjAeFw0yNTA3MjMwNzMyMTFaFw0yNTA3MzAwNzMyMTFaMBgxFjAUBgNV BAMTDTY4ODA4ZmZjLThkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDADU9uj9QU49i1BL8dzuII+dkufC9e2IDvlUSqQhd5UAn10TGskvim1eGG7v4w Q3k6eW5NM9nMs5P/2mguh+5m8P0AUol2VcxUXTsIgXTBJ1zM+QBPBujuq1FPSlzM AFVhEhiJ1juCuDfPxbWnGM4Db85CT5F83T6zNQzrQsdjzITcK6N1wAgF9uNRR9iI VQwjs1U6NeNCL9uyUWiTFvqUaisRIxorhphyau/OY9IKkg2M0ry+LNtw3JnTeo5q jLjtGDNkm+EjcM5EZZW0kS3ID5huKuoxVmap3vsTtzMjDQ5UMvxAqMXRw1zJAdmx y/oJKCoG64E9TR5AL1jdVKFLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdJoX35ES pUAHAvQrld+d55bwWsMwHwYDVR0jBBgwFoAUdYrCvtrcujrXOBafs4nVCLVNdL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzJFMTBFREIyRTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFlyQ3Z0cmN1anJYT0JhZnM0blZDTFZOZEw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzJFMTBFREIyRTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpy WE9CYWZzNG5WQ0xWTmRMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6wccAca73kKOnc+P69tIhLmZRQD7mtB4gwAOH0Vpq3j4E+tNRTxN3C 9Oal7aROD8hj+lAzSPIw4NT9H6y1TfyNK1fT7ULedTfCdV0z0JfgMAcL1bDUEJL+ lFLHsEUEjPkfoN70abjMdWuknEX4bEp+g8Ng/s+Yj/PrXmcGA01GJ6MDqoHVfeet gi62rylUUeRkXMHZfMz6WKBiMwaWr4g9N6fUcEn++9ViWYuY8dxAyGQvgNYTqwfM a8WyHgJJlWlVHsQNKnLpi2Mw3oeiEpq9pUgqMiemwc1ZACm+xY2eQ1TWjh3YrOXv e6vv+T/N9+fnD8lxIVMOmg29q6VyUwk= -----END CERTIFICATE-----Generated at Wed Jul 23 18:54:41 2025 by rpki-client