$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: IUIIm9GZqeHyB2O435Bq4QLz5EgaHSN+WlTPe4CdYkw= Subject key identifier: 9E:21:38:09:DF:D5:79:2B:06:4F:55:AF:AB:09:F6:90:A6:98:A2:FE Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 015C Signing time: Thu 21 Aug 2025 04:12:51 +0000 Manifest this update: Thu 21 Aug 2025 04:12:50 +0000 Manifest next update: Thu 28 Aug 2025 04:12:50 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: F8FF3BDv8DqnJk+eXbpN2QYx5LM77IfkymJ+4+s6kH8=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: L+aSJH2lWC1anAfV1QDeoFg2+6ljff+C6eVKVad/Lj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Aug 21 04:12:50 2025 GMT Not After : Aug 28 04:12:50 2025 GMT Subject: CN=68a69cc2-11ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:64:b1:72:f3:7f:a6:43:66:c1:e4:30:57: 2b:38:da:6a:e1:b5:da:04:1e:c7:3d:e4:f9:c6:66: 8b:51:4f:06:49:48:4c:98:a7:f5:c4:0f:6b:79:05: 1c:3d:52:fe:f1:7f:f2:7b:0d:dd:82:0d:d3:a4:37: 09:14:7e:ed:b2:0f:7f:03:81:f0:92:e0:2d:a8:2e: 47:04:8a:16:cb:9d:32:80:29:24:cd:87:83:d2:7b: 4e:d9:52:d1:a9:b0:5e:23:68:64:f5:b3:d5:63:fa: ca:b4:96:f9:fe:b5:11:c0:b8:a5:19:33:25:22:9a: c3:98:76:ae:e7:98:74:3a:4a:0e:6c:1b:44:a7:a7: c0:a6:1e:99:cb:89:c1:5b:3a:db:04:6c:21:ef:10: 27:d5:6f:3c:a4:90:03:33:09:57:9f:05:9f:4f:63: 74:60:4e:9f:4e:21:f2:57:ce:7b:d8:ac:d5:fa:58: b0:a2:32:03:0b:07:9c:4e:36:e6:4c:03:41:ba:2e: 41:39:2a:16:f1:03:36:15:2b:3b:3f:95:10:ad:22: 55:7f:e7:0e:11:c8:cd:be:d5:27:0d:ca:39:9a:15: e0:19:73:23:52:3b:8a:5e:60:85:56:df:23:c3:b2: 8b:8e:ca:5f:6e:b1:83:5f:cf:eb:df:06:cf:22:1d: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:38:09:DF:D5:79:2B:06:4F:55:AF:AB:09:F6:90:A6:98:A2:FE X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:ec:49:1a:1c:c0:bc:67:a6:ca:35:b8:0c:04:10:0f:fe: f7:77:da:08:c6:7b:bb:0c:bd:72:e1:fa:f8:8e:e2:cd:aa:9a: 36:3c:0c:55:ea:76:49:93:af:47:33:83:c7:b3:8d:8d:64:3a: cc:14:a2:73:c3:db:cc:88:f8:63:6e:6b:7c:20:f6:25:2f:b0: 6e:1d:f4:9b:60:97:bb:01:bb:c6:74:22:12:b3:95:d9:38:59: 61:e3:3a:b9:7a:e8:41:2f:33:bc:1c:3f:18:60:ee:3f:00:b2: db:fe:52:c1:b6:b9:49:de:f9:22:a5:54:82:45:60:18:63:f8: 69:13:29:b8:0b:4c:5d:06:b9:02:7b:e9:4b:3d:d2:c2:05:cc: 0b:a4:de:64:89:c5:2b:ac:9d:a3:10:bb:98:e9:b2:af:68:3a: d8:09:e3:80:35:fa:50:44:7b:66:8d:0a:d8:86:f8:4f:a2:61: 22:9f:2c:6c:b7:e8:cd:c0:8f:7b:de:48:9e:50:58:79:14:f5: cd:95:49:11:ae:35:59:2b:88:60:eb:a4:7a:31:1d:1b:33:ad: 83:d9:3a:d6:8e:a1:bb:27:9c:26:bf:e6:a8:a9:94:43:c1:9b: f4:e4:f4:b6:b0:92:f8:40:ae:a9:2e:a3:d6:32:0d:be:53:6f: 4e:d8:f6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjUwODIxMDQxMjUwWhcNMjUwODI4MDQxMjUwWjAYMRYwFAYD VQQDEw02OGE2OWNjMi0xMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1JksXLzf6ZDZsHkMFcrONpq4bXaBB7HPeT5xmaLUU8GSUhMmKf1xA9reQUc PVL+8X/yew3dgg3TpDcJFH7tsg9/A4HwkuAtqC5HBIoWy50ygCkkzYeD0ntO2VLR qbBeI2hk9bPVY/rKtJb5/rURwLilGTMlIprDmHau55h0OkoObBtEp6fAph6Zy4nB WzrbBGwh7xAn1W88pJADMwlXnwWfT2N0YE6fTiHyV8572KzV+liwojIDCwecTjbm TANBui5BOSoW8QM2FSs7P5UQrSJVf+cOEcjNvtUnDco5mhXgGXMjUjuKXmCFVt8j w7KLjspfbrGDX8/r3wbPIh3nzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4hOAnf 1XkrBk9Vr6sJ9pCmmKL+MB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/uxJGhzAvGemyjW4DAQQD/73d9oIxnu7DL1y4fr4juLNqpo2PAxV 6nZJk69HM4PHs42NZDrMFKJzw9vMiPhjbmt8IPYlL7BuHfSbYJe7AbvGdCISs5XZ OFlh4zq5euhBLzO8HD8YYO4/ALLb/lLBtrlJ3vkipVSCRWAYY/hpEym4C0xdBrkC e+lLPdLCBcwLpN5kicUrrJ2jELuY6bKvaDrYCeOANfpQRHtmjQrYhvhPomEinyxs t+jNwI973kieUFh5FPXNlUkRrjVZK4hg66R6MR0bM62D2TrWjqG7J5wmv+aoqZRD wZv05PS2sJL4QK6pLqPWMg2+U29O2PYa -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:49 2025 by rpki-client