$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft File: DOryj-6BLxzJfxyWvKZFLvcubUw.mft (raw, json) Hash identifier: JSZ52j++NhvhDe8afy1972gAoa60uHP56Uj9dovqC/Q= Subject key identifier: 22:E4:7C:B1:AA:FA:38:FD:97:47:20:82:0E:56:DB:69:82:AB:59:5D Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft Manifest number: 0B88 Signing time: Sun 20 Jul 2025 19:05:54 +0000 Manifest this update: Sun 20 Jul 2025 19:05:53 +0000 Manifest next update: Sun 27 Jul 2025 19:05:53 +0000 Files and hashes: 1: DOryj-6BLxzJfxyWvKZFLvcubUw.crl (hash: OWxBPdifg57ezkjYMBftpkdCMJJgA5P2zqRA1kN7LuY=) 2: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (hash: GS9APLnsd9N7vlTL0hOq7MNSzNO+PtSv7rLmtH3iPh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5732, serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C Validity Not Before: Jul 20 19:05:53 2025 GMT Not After : Jul 27 19:05:53 2025 GMT Subject: CN=687d3e11-ae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:3a:63:28:93:cd:71:98:16:c9:9d:d0:be: 50:80:ab:93:67:ff:59:e2:98:e9:7f:b7:86:61:57: 01:d5:e1:f4:f6:e1:8b:03:eb:de:25:3e:10:5b:e4: e3:c3:2d:3e:9e:61:7e:7e:b1:3b:61:92:fa:00:67: 8f:f5:65:98:2c:f5:a3:b3:c6:2c:8a:23:be:cb:43: 51:f2:fa:86:8d:30:39:d1:4f:64:49:6b:ae:a1:6a: d3:0d:a3:fd:94:4a:e7:96:01:25:d9:60:9d:73:72: 77:b3:f5:d1:27:72:8c:20:2c:da:26:7c:fd:f6:c9: 0d:0a:f2:c4:b7:28:e9:1b:c2:6a:5c:a0:f3:2a:32: c0:9b:8b:27:4b:9b:f9:13:85:bb:29:94:2d:35:19: 62:a1:79:dd:6f:c2:57:ef:76:52:f4:a9:33:92:fa: 28:d1:f2:b2:6c:2b:03:9c:1b:0c:de:15:0f:eb:43: 8f:a2:2d:73:41:23:33:24:20:4f:be:d5:7c:b2:e7: 6d:10:be:7e:30:c7:36:6f:6d:45:78:02:a8:0e:bf: 79:fd:b4:51:80:46:a0:e1:d0:71:7a:fb:00:b3:bb: 0b:0a:dc:12:5e:43:7c:d0:ec:be:e4:6c:f3:6c:00: 2d:fe:fb:a3:11:cb:73:a1:c3:d8:fc:7f:32:10:20: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E4:7C:B1:AA:FA:38:FD:97:47:20:82:0E:56:DB:69:82:AB:59:5D X509v3 Authority Key Identifier: keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3e:40:ef:38:05:e0:fa:97:aa:49:40:bb:39:63:94:54:0b: f3:ce:78:13:d2:25:bd:9e:6b:06:4a:7e:c9:fe:9e:48:13:11: e4:27:21:16:79:2f:61:02:4f:8d:95:d8:08:6f:36:17:b6:6d: 25:46:30:8a:8b:02:26:f0:10:ab:9a:6b:00:86:8d:ee:f9:8c: 19:e6:4a:4c:c2:0d:6b:e4:cd:4b:2d:7e:a1:13:df:46:fa:72: 1c:f7:1f:7c:f8:80:2d:28:79:eb:35:fc:f5:66:73:b6:9a:91: 2a:c8:cd:a5:cb:af:6c:aa:79:b5:97:bf:d3:40:cd:db:8c:39: fc:18:d4:fa:0a:71:42:af:5e:27:e8:1d:7c:f2:dc:bb:89:63: 6b:53:0c:00:5b:40:fb:00:01:90:0a:63:07:50:6f:a4:d1:6e: a7:41:f2:b6:bc:57:e8:f2:32:88:9f:25:d9:37:02:2b:51:9c: 72:b6:2d:c1:fc:5a:eb:a2:61:0f:d9:cd:db:33:82:60:bb:5d: 62:fd:56:46:3c:02:d7:69:e0:e0:5d:ea:61:69:19:de:a1:d2: 6e:86:ec:ac:2a:d0:b8:ab:f3:1d:30:10:63:36:94:e5:2f:41: 55:68:f1:24:b9:c1:a6:31:bf:e9:a8:e3:aa:b9:e2:46:94:cc: 5e:14:f2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU3MzIxMTAvBgNVBAUTKDBDRUFGMjhGRUU4MTJGMUNDOTdGMUM5NkJDQTY0NTJF RjcyRTZENEMwHhcNMjUwNzIwMTkwNTUzWhcNMjUwNzI3MTkwNTUzWjAYMRYwFAYD VQQDEw02ODdkM2UxMS1hZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RA6YyiTzXGYFsmd0L5QgKuTZ/9Z4pjpf7eGYVcB1eH09uGLA+veJT4QW+Tj wy0+nmF+frE7YZL6AGeP9WWYLPWjs8YsiiO+y0NR8vqGjTA50U9kSWuuoWrTDaP9 lErnlgEl2WCdc3J3s/XRJ3KMICzaJnz99skNCvLEtyjpG8JqXKDzKjLAm4snS5v5 E4W7KZQtNRlioXndb8JX73ZS9Kkzkvoo0fKybCsDnBsM3hUP60OPoi1zQSMzJCBP vtV8sudtEL5+MMc2b21FeAKoDr95/bRRgEag4dBxevsAs7sLCtwSXkN80Oy+5Gzz bAAt/vujEctzocPY/H8yECBVGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLkfLGq +jj9l0cggg5W22mCq1ldMB8GA1UdIwQYMBaAFAzq8o/ugS8cyX8clrymRS73Lm1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTczMi84QTdFOUU0MjJG MjMxMUVBOTAzQzE0MzlDNEY5QUUwMi9ET3J5ai02Qkx4ekpmeHlXdktaRkx2Y3Vi VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcnlqLTZCTHh6SmZ4eVd2S1pGTHZjdWJVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTczMi84QTdFOUU0MjJGMjMxMUVBOTAzQzE0MzlDNEY5QUUwMi9ET3J5ai02Qkx4 ekpmeHlXdktaRkx2Y3ViVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/PkDvOAXg+peqSUC7OWOUVAvzzngT0iW9nmsGSn7J/p5IExHkJyEW eS9hAk+NldgIbzYXtm0lRjCKiwIm8BCrmmsAho3u+YwZ5kpMwg1r5M1LLX6hE99G +nIc9x98+IAtKHnrNfz1ZnO2mpEqyM2ly69sqnm1l7/TQM3bjDn8GNT6CnFCr14n 6B188ty7iWNrUwwAW0D7AAGQCmMHUG+k0W6nQfK2vFfo8jKInyXZNwIrUZxyti3B /FrromEP2c3bM4Jgu11i/VZGPALXaeDgXephaRneodJuhuysKtC4q/MdMBBjNpTl L0FVaPEkucGmMb/pqOOqueJGlMxeFPJ4 -----END CERTIFICATE-----Generated at Mon Jul 21 07:22:33 2025 by rpki-client