$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: 7bQysDwFTTaaClSw7OjCAiDQAjrPAgYlA6gSDN9V0s0= Subject key identifier: D9:F1:4D:E7:78:9F:AF:C4:C0:26:99:DE:D9:C3:B5:4C:0A:DF:12:EB Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 0441 Signing time: Thu 21 Aug 2025 00:26:22 +0000 Manifest this update: Thu 21 Aug 2025 00:26:21 +0000 Manifest next update: Thu 28 Aug 2025 00:26:21 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: fNhfLoqCeKXzuOsOXIJslxGhxJB9UwBfXFzJ180vPz0=) 2: 79B9645874F911F0BD52962FC4F9AE02.roa (hash: wu+Dox9IU3hwRlFzpqIU7gx86wEYNjyUbkdxdJNUmAk=) 3: A4819EE074F811F0B6925F6DC4F9AE02.roa (hash: ZoO9/vgjXlzY6ba7aXl9T6bpn7UBr556K0Ew0N0yuz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Aug 21 00:26:21 2025 GMT Not After : Aug 28 00:26:21 2025 GMT Subject: CN=68a667ad-4d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:1d:f8:1d:b9:0d:2a:2a:91:a2:97:c6:53: 1c:67:3f:ef:33:92:a5:6e:74:74:fc:4c:26:4f:b9: e3:b5:36:b4:60:71:76:db:b1:75:d1:12:ef:f2:fb: f5:a1:28:56:89:84:ba:83:6c:e6:9d:86:12:8e:d1: e4:16:cc:20:89:13:d7:77:e8:e6:ee:5e:e0:c7:26: a1:13:c8:92:7d:fc:1d:db:0f:0e:27:95:3a:ff:2b: 55:2f:cf:f6:57:9c:93:a4:75:04:bc:bb:23:22:9d: 2b:a1:db:03:85:e2:54:38:58:18:c8:72:8c:ac:24: 05:2e:df:37:44:35:ea:57:1a:cd:31:6c:cf:a0:47: 95:73:5f:c1:44:51:f1:91:74:7e:3f:80:0e:5b:61: d0:00:65:23:db:af:36:82:28:81:03:81:a6:cf:5e: 3b:81:71:24:b4:6c:31:6d:9a:f3:31:52:7b:d2:58: a4:24:36:33:0e:13:10:0d:fd:60:8b:82:4a:1e:8a: 48:4d:2c:0e:c3:42:f5:20:08:67:1f:29:7b:da:72: 8e:59:23:34:0e:e5:21:72:ac:7c:d8:45:78:bb:f7: fa:e5:30:9b:66:44:3c:2b:d4:a5:45:52:bd:8c:9e: d0:94:6c:6b:86:9e:b1:12:d3:05:96:aa:4c:7e:13: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F1:4D:E7:78:9F:AF:C4:C0:26:99:DE:D9:C3:B5:4C:0A:DF:12:EB X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:f6:2f:c3:de:ad:a6:c7:dd:63:3b:aa:74:e0:fa:49:d2: dc:79:c4:db:4d:d4:69:77:b1:06:50:fb:0e:d7:78:a1:9a:31: 7c:f3:85:c4:24:f1:c6:7d:85:b1:21:2f:18:4e:c9:ef:90:43: 28:77:29:30:9e:46:01:9b:b9:8f:37:b0:b7:3b:0e:73:7f:6b: 9c:c1:f7:9d:4f:8e:b9:6c:37:69:bd:8e:ac:08:5d:ba:0c:ef: 4a:47:73:72:09:6c:3a:02:f3:d8:29:97:5c:a3:49:78:1c:44: d1:6a:d8:71:37:f5:8e:b1:48:5b:31:89:ae:26:ef:9a:0f:b0: f7:98:f4:5f:3e:9e:fe:a9:12:d2:3e:5b:7d:31:0b:95:ed:88: 11:4a:c8:f2:3c:de:b0:f0:6c:ac:c1:f2:34:78:42:26:4b:1f: a8:e4:7c:d0:98:a2:e4:0b:5e:c5:62:29:bd:0a:52:43:a6:ab: e3:4c:58:40:d2:be:09:bf:ee:e6:70:a6:d1:6c:2a:22:f7:13: 07:40:29:a2:ba:3b:ca:fa:e0:a8:dd:bd:11:bc:39:fc:e5:93: ca:17:88:5e:db:ca:d6:a0:4a:48:7a:e9:f8:56:10:6e:30:b1: cd:c2:1a:b0:b8:33:df:b0:8d:03:0d:fc:f1:c8:85:79:f3:9d: e4:b4:2f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjUwODIxMDAyNjIxWhcNMjUwODI4MDAyNjIxWjAYMRYwFAYD VQQDEw02OGE2NjdhZC00ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHcd+B25DSoqkaKXxlMcZz/vM5KlbnR0/EwmT7njtTa0YHF227F10RLv8vv1 oShWiYS6g2zmnYYSjtHkFswgiRPXd+jm7l7gxyahE8iSffwd2w8OJ5U6/ytVL8/2 V5yTpHUEvLsjIp0rodsDheJUOFgYyHKMrCQFLt83RDXqVxrNMWzPoEeVc1/BRFHx kXR+P4AOW2HQAGUj2682giiBA4Gmz147gXEktGwxbZrzMVJ70likJDYzDhMQDf1g i4JKHopITSwOw0L1IAhnHyl72nKOWSM0DuUhcqx82EV4u/f65TCbZkQ8K9SlRVK9 jJ7QlGxrhp6xEtMFlqpMfhMtVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnxTed4 n6/EwCaZ3tnDtUwK3xLrMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcMvYvw96tpsfdYzuqdOD6SdLcecTbTdRpd7EGUPsO13ihmjF884XE JPHGfYWxIS8YTsnvkEModykwnkYBm7mPN7C3Ow5zf2ucwfedT465bDdpvY6sCF26 DO9KR3NyCWw6AvPYKZdco0l4HETRathxN/WOsUhbMYmuJu+aD7D3mPRfPp7+qRLS Plt9MQuV7YgRSsjyPN6w8GyswfI0eEImSx+o5HzQmKLkC17FYim9ClJDpqvjTFhA 0r4Jv+7mcKbRbCoi9xMHQCmiujvK+uCo3b0RvDn85ZPKF4he28rWoEpIeun4VhBu MLHNwhqwuDPfsI0DDfzxyIV5853ktC9z -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:08 2025 by rpki-client