$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: r/pKA4Jlpw+25lX0p8THWYgFDABzaHg0+T7VzT3FjpI= Subject key identifier: C5:1F:94:64:21:F8:49:96:C3:D0:AC:67:C2:BA:84:57:C3:80:D5:36 Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: 012E Signing time: Mon 21 Jul 2025 04:40:53 +0000 Manifest this update: Mon 21 Jul 2025 04:40:53 +0000 Manifest next update: Mon 28 Jul 2025 04:40:53 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: qUmuQVl/XQAzSYp+4XKvWf+kRDgHnP8ieS7hySSoysE=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: ZWPK2ab0Ef3qAN+iabKfnFGe44+77H2KgSLOA0dY0EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Jul 21 04:40:53 2025 GMT Not After : Jul 28 04:40:53 2025 GMT Subject: CN=687dc4d5-5dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:72:22:ca:98:c0:fe:b8:41:3f:8b:b4:9f: 8d:dd:1f:04:5a:46:51:9c:df:d6:45:b9:ff:1b:4e: 69:d3:5d:97:8c:42:b8:46:6e:c7:7e:84:98:bf:4b: 62:40:b4:f0:3c:bc:42:ee:9d:e0:b0:51:0a:03:f1: 79:e2:09:26:34:50:ba:4e:80:5f:72:cf:b6:7b:dc: 3a:2d:97:e6:6f:67:9d:ce:08:b2:ef:f9:22:ba:82: 4c:09:6a:80:fb:2c:ff:51:f9:5e:02:f8:16:6a:9e: b4:fb:c6:ea:6d:3d:cd:d0:20:65:6b:86:26:de:76: 64:a3:43:8d:30:fc:82:fc:23:0c:0c:fe:87:e3:42: 93:f4:c5:30:33:c9:79:b1:c5:c7:90:57:12:6d:39: 97:72:2e:0b:be:49:03:6c:1e:54:b9:a3:6b:ec:7c: d9:e2:eb:f9:36:76:16:35:1a:ea:76:3e:0c:13:76: 90:ad:93:8b:52:16:fe:a0:83:41:74:da:27:38:89: 58:89:5e:73:74:32:60:8a:d3:33:87:da:da:d1:29: 26:07:7e:cf:0e:33:60:b6:43:14:13:3d:a0:57:9f: e4:de:fb:0b:b6:4d:e2:ac:40:c4:65:51:cc:d3:72: 34:63:d2:fb:3b:56:08:4a:fd:b7:a1:49:ea:6a:c2: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:94:64:21:F8:49:96:C3:D0:AC:67:C2:BA:84:57:C3:80:D5:36 X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:29:9e:21:f5:fc:90:1e:24:c7:02:19:54:93:33:66:86:79: 79:e9:75:85:58:05:f0:1b:9c:90:ed:8f:b8:75:0e:05:6f:6b: d0:17:ec:e4:cb:b0:3d:cd:bc:f5:79:56:09:9c:bc:a1:46:5e: f8:7a:4f:60:30:39:9e:76:a6:a0:21:9e:c4:38:9a:32:52:54: 33:15:1f:61:d1:3f:2e:ed:74:b8:c8:c6:df:83:e7:61:23:85: c9:b2:b4:ca:1c:dd:ca:5f:98:e9:ff:86:49:8e:be:98:54:df: a7:77:7b:31:16:14:36:6f:43:79:59:1f:59:3a:73:7c:12:96: 5d:b8:0d:9e:d6:a8:2c:52:aa:f2:b6:d1:2d:9c:bc:bb:d3:93: 68:64:b8:2c:70:87:43:e1:a2:5e:13:ea:a5:33:8f:a9:1a:c8: 43:e7:31:1e:49:56:14:ad:08:61:64:41:8b:0f:08:ee:0d:6a: 82:30:f9:f0:1a:26:18:2e:e4:d8:1e:00:ce:4f:8b:b8:c2:31: 8e:04:3c:a8:02:ff:15:c8:38:c7:a5:8c:04:f6:89:c9:11:93: ea:04:d0:eb:a6:fc:42:4d:4a:e1:6d:10:08:5e:f6:a1:cf:0d: 66:8f:1a:92:90:f8:e5:84:10:c5:57:9b:f3:85:0d:f9:f5:46: 49:b1:e5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUwNzIxMDQ0MDUzWhcNMjUwNzI4MDQ0MDUzWjAYMRYwFAYD VQQDEw02ODdkYzRkNS01ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo1yIsqYwP64QT+LtJ+N3R8EWkZRnN/WRbn/G05p012XjEK4Rm7HfoSYv0ti QLTwPLxC7p3gsFEKA/F54gkmNFC6ToBfcs+2e9w6LZfmb2edzgiy7/kiuoJMCWqA +yz/UfleAvgWap60+8bqbT3N0CBla4Ym3nZko0ONMPyC/CMMDP6H40KT9MUwM8l5 scXHkFcSbTmXci4LvkkDbB5UuaNr7HzZ4uv5NnYWNRrqdj4ME3aQrZOLUhb+oINB dNonOIlYiV5zdDJgitMzh9ra0SkmB37PDjNgtkMUEz2gV5/k3vsLtk3irEDEZVHM 03I0Y9L7O1YISv23oUnqasLCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUflGQh +EmWw9CsZ8K6hFfDgNU2MB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeKZ4h9fyQHiTHAhlUkzNmhnl56XWFWAXwG5yQ7Y+4dQ4Fb2vQF+zk y7A9zbz1eVYJnLyhRl74ek9gMDmedqagIZ7EOJoyUlQzFR9h0T8u7XS4yMbfg+dh I4XJsrTKHN3KX5jp/4ZJjr6YVN+nd3sxFhQ2b0N5WR9ZOnN8EpZduA2e1qgsUqry ttEtnLy705NoZLgscIdD4aJeE+qlM4+pGshD5zEeSVYUrQhhZEGLDwjuDWqCMPnw GiYYLuTYHgDOT4u4wjGOBDyoAv8VyDjHpYwE9onJEZPqBNDrpvxCTUrhbRAIXvah zw1mjxqSkPjlhBDFV5vzhQ359UZJseUy -----END CERTIFICATE-----Generated at Tue Jul 22 05:14:12 2025 by rpki-client