$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: 3c/BoSSgI4S0ibzR4svYTGJFgBPGbD6leTLVle4aIug= Subject key identifier: 5E:F2:AE:2C:AF:F4:27:FB:6A:5C:3C:A2:B2:C1:52:3E:B1:B0:09:80 Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1DD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1DBA Signing time: Fri 18 Jul 2025 16:13:49 +0000 Manifest this update: Fri 18 Jul 2025 16:13:49 +0000 Manifest next update: Fri 25 Jul 2025 16:13:49 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: 1GyrdPfhVBLhTjp39LOGkFOB6AEBU1OxxdUs04tnfbE=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7635 (0x1dd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Jul 18 16:13:49 2025 GMT Not After : Jul 25 16:13:49 2025 GMT Subject: CN=687a72bd-08d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:52:c8:fa:54:f8:17:c2:bf:c5:5f:c6:47: 45:a9:a1:27:bb:72:b4:63:78:5b:08:00:8d:dc:3b: dc:b2:41:2a:32:d4:44:b9:69:26:95:d8:c5:4d:6b: 39:9c:62:80:d2:7a:ca:c2:c9:2b:e1:eb:08:50:5c: 4e:05:2f:52:af:c5:c3:0a:d6:36:c9:16:1b:86:19: 42:25:0d:47:72:ac:60:fa:26:5f:77:1d:26:d5:f6: 7a:46:5a:ae:3f:ec:b8:3c:86:ba:1e:3e:ab:1f:4e: ef:7c:97:34:7b:57:11:ce:86:03:f0:99:ab:2d:17: 2d:db:76:92:d5:18:73:04:68:06:0c:3a:fa:99:a1: 35:cb:f7:39:82:3d:e9:7f:af:e6:38:f2:60:f5:e2: c0:88:5c:b2:ae:32:4f:21:13:9c:65:30:72:68:68: a3:a8:d1:73:46:9f:26:2c:7f:74:54:1b:1d:a8:c7: 11:d0:86:d8:b7:86:95:a8:62:47:e6:95:12:3b:1c: 21:82:33:62:f5:38:50:ed:99:2c:fd:d5:8e:18:3c: 42:e5:78:47:d2:16:e5:0a:42:4b:4a:1d:a7:48:d9: 4d:60:2e:d8:c5:f3:13:94:07:eb:72:bc:a8:d4:9d: 7b:1b:a9:a4:d1:4c:52:a5:e7:db:f5:0c:2f:c2:51: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F2:AE:2C:AF:F4:27:FB:6A:5C:3C:A2:B2:C1:52:3E:B1:B0:09:80 X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a0:e6:75:18:d3:d8:f1:b3:e9:84:4f:fa:9b:12:fa:39:d8: 57:42:09:4e:39:bc:25:1e:81:32:1b:0f:50:c8:fb:73:5b:a7: 95:b3:6a:09:76:c2:43:27:ae:56:49:ca:6b:13:94:ee:7c:71: ca:91:26:be:dd:5b:0e:02:65:07:b5:21:fe:56:09:6e:8d:55: 71:66:de:fd:8d:fc:98:a1:ae:2c:06:b3:8c:31:3c:0f:d0:31: ac:f2:c0:66:e2:da:50:b8:c2:ad:64:da:0a:09:b2:61:19:ab: 72:1d:d2:97:c0:f2:f1:f6:31:ae:bf:74:a9:80:09:ba:31:74: da:af:cc:a7:3f:4c:52:7d:8a:a9:66:06:70:b9:5e:38:4e:f5: 49:35:ea:d5:d7:34:c2:50:60:0b:41:eb:58:b6:0f:10:d0:a3: 84:9a:f5:f4:e8:67:00:db:ab:6c:0d:ce:38:9c:de:81:12:46: cc:b4:3a:4a:bb:76:f1:70:17:eb:37:3b:27:32:4e:ee:62:ca: 83:c3:4f:c2:2a:93:af:60:d1:75:5b:ce:ec:93:64:2e:a5:82: 83:38:66:c3:1f:f9:3e:b9:11:73:9f:3e:94:a6:25:31:9d:09: 8b:3d:41:e3:ed:0f:48:d2:82:ea:7f:5e:f9:0e:12:e7:7e:b9: 2f:dd:f4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUwNzE4MTYxMzQ5WhcNMjUwNzI1MTYxMzQ5WjAYMRYwFAYD VQQDEw02ODdhNzJiZC0wOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY9SyPpU+BfCv8VfxkdFqaEnu3K0Y3hbCACN3DvcskEqMtREuWkmldjFTWs5 nGKA0nrKwskr4esIUFxOBS9Sr8XDCtY2yRYbhhlCJQ1Hcqxg+iZfdx0m1fZ6Rlqu P+y4PIa6Hj6rH07vfJc0e1cRzoYD8JmrLRct23aS1RhzBGgGDDr6maE1y/c5gj3p f6/mOPJg9eLAiFyyrjJPIROcZTByaGijqNFzRp8mLH90VBsdqMcR0IbYt4aVqGJH 5pUSOxwhgjNi9ThQ7Zks/dWOGDxC5XhH0hblCkJLSh2nSNlNYC7YxfMTlAfrcryo 1J17G6mk0UxSpefb9QwvwlE/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7yriyv 9Cf7alw8orLBUj6xsAmAMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhoOZ1GNPY8bPphE/6mxL6OdhXQglOObwlHoEyGw9QyPtzW6eVs2oJ dsJDJ65WScprE5TufHHKkSa+3VsOAmUHtSH+VglujVVxZt79jfyYoa4sBrOMMTwP 0DGs8sBm4tpQuMKtZNoKCbJhGatyHdKXwPLx9jGuv3SpgAm6MXTar8ynP0xSfYqp ZgZwuV44TvVJNerV1zTCUGALQetYtg8Q0KOEmvX06GcA26tsDc44nN6BEkbMtDpK u3bxcBfrNzsnMk7uYsqDw0/CKpOvYNF1W87sk2QupYKDOGbDH/k+uRFznz6UpiUx nQmLPUHj7Q9I0oLqf175DhLnfrkv3fQk -----END CERTIFICATE-----Generated at Sun Jul 20 06:43:23 2025 by rpki-client