$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: miAmjn71pX/8odri9efw+HZm5xG4X5PByoycUqFsXfg= Subject key identifier: E8:F6:0F:45:0E:D1:A0:5B:C6:4D:50:21:84:78:5E:4E:08:B2:02:15 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 34C2 Signing time: Sun 20 Jul 2025 14:52:10 +0000 Manifest this update: Sun 20 Jul 2025 14:52:09 +0000 Manifest next update: Sun 27 Jul 2025 14:52:09 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: uNBQu7fi4ANrT04yknCjHGZCsfh5GL2KY0mdZKcYcII=) 2: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: IR/fxoozFicSxIrUXHGZXGMAUroK6RP4wvdk7z4PV7A=) 3: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: XQCwNi2PZQw3HwB0S22xbUukUjh1gRPdN0DptoUSl6Q=) 4: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: MzFm0njK9GauK3PVGzL0I/Klqbd6ft5wJ9/podujw/8=) 5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: jv97nGJvaH0WKHe7n31vkT3MMMbNqFjpDhhexD6X6+Q=) 6: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: ifJGYL5q49BedEWwURROMxMLmQuzo6sd4i9VU7gjPWk=) 7: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: crg/ljxSxvSurizJ6VoDNQFMCKyOAKHsQIWFOorvrvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Jul 20 14:52:09 2025 GMT Not After : Jul 27 14:52:09 2025 GMT Subject: CN=687d029a-9d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:c6:e5:b5:6c:5a:35:f1:82:8a:33:30:bf: 11:aa:57:bb:97:0e:07:26:58:95:42:4d:c5:ee:21: 7e:60:fb:86:64:ff:c5:67:85:86:6f:d3:4d:53:d2: 6d:2d:09:bc:56:15:16:d1:a6:46:30:87:3d:01:15: 67:46:67:a9:20:dc:59:a5:3e:57:98:e1:58:4b:a4: c0:04:1d:14:24:81:a0:59:df:6e:2f:a0:6a:12:d7: 22:2e:ed:4c:d6:87:04:52:4a:f6:e9:5b:1f:16:e6: 14:5a:2d:65:b4:6d:42:f5:6d:88:a7:65:49:f6:c8: fe:bb:ac:ed:99:2c:0d:ee:15:ce:c3:e6:9a:0e:9a: 4f:78:b6:e9:c5:bb:c8:53:41:81:8b:60:03:06:ca: e7:d8:23:19:7f:6e:b0:97:8e:c6:a2:c8:ff:9a:ba: 1a:6f:47:97:e1:01:ca:f5:3c:75:1d:6d:17:32:81: d6:a5:59:13:a8:03:a6:cd:08:ae:72:97:12:89:b2: e3:17:6b:3f:c9:b6:6d:21:84:ec:35:06:f0:02:57: a7:79:34:46:2f:e7:22:cd:1f:43:68:5a:69:ff:97: 77:08:46:a5:74:37:0e:98:a2:85:da:a2:7b:3b:a0: 5c:4e:af:af:f3:c8:2f:ea:8d:55:d8:6b:5f:89:c0: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F6:0F:45:0E:D1:A0:5B:C6:4D:50:21:84:78:5E:4E:08:B2:02:15 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:52:1c:52:f2:1e:ec:a2:44:76:f5:9e:1c:0d:e0:6a:13:4b: b9:b2:f9:68:19:64:84:8c:c3:f9:39:cc:c0:7e:1e:32:7b:f4: 2c:77:b7:f8:e8:d3:9e:06:7f:2a:d1:af:53:0a:ca:9d:3c:6e: 9d:25:2b:81:a0:f6:87:2d:a5:a2:8f:a2:9a:10:72:5c:2b:05: 00:06:47:d8:ba:61:2c:e6:1e:2a:36:f2:96:05:51:b3:91:0d: 19:a2:6f:70:2d:70:f4:90:aa:86:b5:d5:c3:6b:44:59:18:1a: b3:35:ae:c5:a1:1c:79:23:d6:b5:d1:5e:91:60:65:c2:1d:33: 57:ca:75:a4:79:a9:f2:a7:6a:40:a9:03:be:85:a7:50:0f:9d: 01:64:17:d1:00:d8:99:e5:dc:e1:49:d0:9c:b8:db:05:53:b9: a9:15:70:39:3a:da:32:03:ff:f8:03:0d:f1:5f:95:d3:ce:b3: c2:97:03:c8:6b:a0:3d:86:ea:2e:50:c5:eb:dd:9d:26:0a:0b: 37:bc:db:32:32:cb:e2:2b:5c:99:82:a0:f4:ba:5c:aa:e6:16: 48:58:87:17:e5:31:d5:32:97:46:80:81:57:d2:8c:96:57:ea: 09:eb:ae:12:b9:da:87:55:3b:c2:89:3c:63:ff:be:0c:5f:49: 54:e0:e6:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjUwNzIwMTQ1MjA5WhcNMjUwNzI3MTQ1MjA5WjAYMRYwFAYD VQQDEw02ODdkMDI5YS05ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1vG5bVsWjXxgoozML8Rqle7lw4HJliVQk3F7iF+YPuGZP/FZ4WGb9NNU9Jt LQm8VhUW0aZGMIc9ARVnRmepINxZpT5XmOFYS6TABB0UJIGgWd9uL6BqEtciLu1M 1ocEUkr26VsfFuYUWi1ltG1C9W2Ip2VJ9sj+u6ztmSwN7hXOw+aaDppPeLbpxbvI U0GBi2ADBsrn2CMZf26wl47Gosj/mroab0eX4QHK9Tx1HW0XMoHWpVkTqAOmzQiu cpcSibLjF2s/ybZtIYTsNQbwAleneTRGL+cizR9DaFpp/5d3CEaldDcOmKKF2qJ7 O6BcTq+v88gv6o1V2GtficCxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj2D0UO 0aBbxk1QIYR4Xk4IsgIVMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUhxS8h7sokR29Z4cDeBqE0u5svloGWSEjMP5OczAfh4ye/Qsd7f4 6NOeBn8q0a9TCsqdPG6dJSuBoPaHLaWij6KaEHJcKwUABkfYumEs5h4qNvKWBVGz kQ0Zom9wLXD0kKqGtdXDa0RZGBqzNa7FoRx5I9a10V6RYGXCHTNXynWkeanyp2pA qQO+hadQD50BZBfRANiZ5dzhSdCcuNsFU7mpFXA5OtoyA//4Aw3xX5XTzrPClwPI a6A9huouUMXr3Z0mCgs3vNsyMsviK1yZgqD0ulyq5hZIWIcX5THVMpdGgIFX0oyW V+oJ664SudqHVTvCiTxj/74MX0lU4OZH -----END CERTIFICATE-----Generated at Sun Jul 20 18:46:41 2025 by rpki-client