$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: UWhypGyw2aFNkS34Uj2HxxXwJDWMFqjFog2VgxoIMGs= Subject key identifier: 33:19:14:7E:CC:7B:4D:59:7C:77:9E:E4:8C:6E:8C:D3:FD:97:64:01 Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 07B9 Signing time: Fri 18 Jul 2025 21:27:13 +0000 Manifest this update: Fri 18 Jul 2025 21:27:12 +0000 Manifest next update: Fri 25 Jul 2025 21:27:12 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: JhORH772gJs/8ws575ilK+XcSuwEnHHfyEMdcLx7tm0=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: Jul 18 21:27:12 2025 GMT Not After : Jul 25 21:27:12 2025 GMT Subject: CN=687abc31-2e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:83:c9:d1:41:ac:c4:88:df:d5:2a:74:0a: 74:43:98:b2:4d:91:f8:50:31:87:d3:a2:9a:1b:fb: 3a:21:84:27:9e:d5:06:84:b6:92:eb:5f:77:9b:0c: 6d:eb:01:79:dd:10:4f:01:95:c0:1f:5b:33:78:42: 3f:60:d7:fc:b8:b5:e0:db:da:c9:47:fb:3b:30:cb: 80:50:1e:5d:3b:bf:14:45:b0:48:70:93:8e:74:eb: 7c:39:32:d9:9d:31:54:47:bd:ac:4e:53:fb:40:b7: e4:c3:b1:72:c5:34:57:f9:29:97:0e:b6:b7:4f:20: 3d:e3:f1:e7:e1:10:d0:71:b0:3e:54:36:e8:57:77: e2:f1:18:86:da:49:3f:09:b1:23:94:7e:12:fb:e5: 8b:a9:72:d6:a8:3a:ea:6d:eb:a6:30:f2:95:f2:d5: 43:96:02:3f:f8:cb:f9:8d:be:b0:48:aa:d9:5d:cb: 23:41:d2:f2:35:7c:73:57:cb:63:9a:a3:39:29:83: 98:3d:29:d4:40:87:1d:cd:cc:84:5f:73:bc:6d:28: 00:6a:bb:97:44:a4:58:05:21:f6:bb:3b:84:31:db: 0d:f5:b0:26:7b:bd:6e:bc:17:af:da:2c:67:3d:ef: 86:05:ee:81:a4:a0:b6:9e:0d:84:36:15:97:4b:78: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:19:14:7E:CC:7B:4D:59:7C:77:9E:E4:8C:6E:8C:D3:FD:97:64:01 X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e1:41:46:18:cc:d7:70:7a:e5:b7:6d:30:43:fa:49:b3:bb: c1:94:05:d0:97:a9:fd:4c:4c:d0:7a:9c:f2:eb:a4:48:72:58: 67:62:53:0f:68:f2:31:b3:b9:82:c8:39:11:e7:56:62:5b:60: 36:26:a6:c5:0d:b7:65:ff:fc:e5:4d:20:c2:7a:c7:63:0e:ea: dd:33:6d:c7:88:f8:87:2f:0d:3a:c6:f5:d6:63:79:09:90:72: d3:1f:cd:ca:19:a6:38:39:6c:0b:f5:15:ad:58:bb:7d:d5:7f: 26:6f:df:7b:03:dc:5c:9d:b2:9a:53:c7:7d:a9:0a:6c:cb:51: a9:0c:b0:89:8e:39:cb:db:b1:73:0c:41:99:27:5a:0f:b6:cc: dc:01:1e:36:3b:75:21:be:02:78:40:3a:d5:27:c7:00:a4:21: 6b:0a:72:11:b9:d6:ad:c7:c0:19:82:2c:a8:61:a8:f4:fa:77: be:ec:a0:9f:0a:ca:17:aa:67:89:0c:28:74:25:06:a7:a8:0e: da:29:7e:3f:14:a0:2d:d4:c1:c3:55:e5:7f:ee:85:65:2d:4c: 7b:8b:0b:2f:2e:e6:05:90:9f:43:06:3c:50:9c:e3:d9:a7:a9: 62:db:c1:43:4d:42:0d:4d:dd:8b:c1:ae:de:01:a3:ff:50:6b: 5d:0f:22:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjUwNzE4MjEyNzEyWhcNMjUwNzI1MjEyNzEyWjAYMRYwFAYD VQQDEw02ODdhYmMzMS0yZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fyDydFBrMSI39UqdAp0Q5iyTZH4UDGH06KaG/s6IYQnntUGhLaS6193mwxt 6wF53RBPAZXAH1szeEI/YNf8uLXg29rJR/s7MMuAUB5dO78URbBIcJOOdOt8OTLZ nTFUR72sTlP7QLfkw7FyxTRX+SmXDra3TyA94/Hn4RDQcbA+VDboV3fi8RiG2kk/ CbEjlH4S++WLqXLWqDrqbeumMPKV8tVDlgI/+Mv5jb6wSKrZXcsjQdLyNXxzV8tj mqM5KYOYPSnUQIcdzcyEX3O8bSgAaruXRKRYBSH2uzuEMdsN9bAme71uvBev2ixn Pe+GBe6BpKC2ng2ENhWXS3gViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMZFH7M e01ZfHee5IxujNP9l2QBMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW4UFGGMzXcHrlt20wQ/pJs7vBlAXQl6n9TEzQepzy66RIclhnYlMP aPIxs7mCyDkR51ZiW2A2JqbFDbdl//zlTSDCesdjDurdM23HiPiHLw06xvXWY3kJ kHLTH83KGaY4OWwL9RWtWLt91X8mb997A9xcnbKaU8d9qQpsy1GpDLCJjjnL27Fz DEGZJ1oPtszcAR42O3UhvgJ4QDrVJ8cApCFrCnIRudatx8AZgiyoYaj0+ne+7KCf CsoXqmeJDCh0JQanqA7aKX4/FKAt1MHDVeV/7oVlLUx7iwsvLuYFkJ9DBjxQnOPZ p6li28FDTUINTd2Lwa7eAaP/UGtdDyLy -----END CERTIFICATE-----Generated at Sun Jul 20 12:05:43 2025 by rpki-client