$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: dza/ScHjxmr2RnFiHE4oqvDQST4e2q0wMxPiATOfmw4= Subject key identifier: 79:CA:8D:CC:15:EA:EB:3B:7F:2F:DF:09:42:5C:B9:03:04:5D:8C:99 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E87 Signing time: Thu 18 Sep 2025 17:53:41 +0000 Manifest this update: Thu 18 Sep 2025 17:53:41 +0000 Manifest next update: Thu 25 Sep 2025 17:53:41 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: NbZWF9RV+PUjJObfchr1nPQnYH+7PmH11rCwBjzUzeE=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3737 (0xe99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Sep 18 17:53:41 2025 GMT Not After : Sep 25 17:53:41 2025 GMT Subject: CN=68cc4725-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:7d:3f:39:2c:f4:19:bb:ea:f6:8f:bf:c1: 5d:2a:7a:fc:a1:ef:b6:a7:83:8a:20:ed:e3:0c:be: 7a:2f:63:62:aa:28:cd:35:c5:a2:4f:7c:32:87:c5: 87:a5:86:7c:ce:c8:da:09:7b:97:34:7d:d3:48:d0: 9d:72:a1:34:8c:bf:23:87:bd:9b:a1:9f:b4:03:dd: 68:0b:6d:1c:54:23:ef:b4:b1:b8:59:81:4b:26:39: f7:0b:16:32:f8:69:90:17:4f:92:22:38:61:33:eb: 89:e0:74:27:e6:ee:a4:96:95:78:5b:7c:f5:59:18: e8:8d:b6:53:48:93:ac:5f:f8:51:9e:eb:05:6b:c3: 2a:19:d3:ad:67:ad:08:49:02:ee:2b:f8:76:92:32: 77:47:55:6f:3d:3a:4e:fb:0e:82:28:6f:d1:83:dc: 0b:f4:fb:a5:bf:16:26:7e:cd:29:a3:e5:f2:e3:c9: a2:65:51:83:b1:1a:43:80:fb:19:ba:ae:20:f0:1a: 70:5e:cf:5f:7d:f1:2a:e6:b6:8d:67:15:d7:04:be: a8:c1:0f:13:cf:cd:56:b8:79:66:dd:19:14:83:12: 76:ac:55:50:ec:be:78:f3:77:79:31:5e:cc:b8:07: d6:20:dc:f9:3b:b2:a4:75:54:63:11:9e:df:42:6a: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CA:8D:CC:15:EA:EB:3B:7F:2F:DF:09:42:5C:B9:03:04:5D:8C:99 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:29:92:ec:3d:1f:1e:fe:a4:29:12:2a:f9:ec:df:1c:6c:18: bb:20:af:79:47:c1:17:ef:16:1f:58:54:6c:46:84:29:fb:62: 1a:e1:b6:8d:fe:4b:59:6d:85:ab:9e:0e:ed:6f:15:4b:69:83: 47:db:fb:e8:53:48:1b:f8:e8:45:33:05:8f:68:ee:1b:82:93: af:e5:92:51:84:90:88:4f:e0:e1:57:2b:9e:bb:7c:42:07:12: 02:56:87:63:5c:f1:d7:41:e5:8d:af:e0:3a:cc:64:f2:2d:fd: 25:77:2b:d5:25:af:40:fa:7f:7e:1c:0a:40:95:71:7a:a4:f9: 42:ff:3f:26:0d:ea:42:58:08:02:aa:ba:bf:e1:a5:e6:d9:3a: 78:15:44:ef:39:15:75:1e:3f:e8:38:b1:4e:06:b9:be:d1:de: 19:45:77:1e:b0:57:03:d6:c6:67:62:bb:52:16:8b:92:cc:c8: 75:1f:81:63:74:7b:e0:fd:fe:b0:c7:35:cd:83:de:25:c8:4c: 84:8f:bc:b5:fa:9d:b7:97:ea:18:c2:ee:02:80:5a:9d:c0:6c: b1:2a:b2:ed:05:b9:5b:e3:bb:5a:a1:73:dc:53:4b:92:c2:ee: 6d:45:31:b8:05:5b:7c:32:bd:6a:0e:00:9a:ff:00:22:a7:5d: 5a:69:50:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwOTE4MTc1MzQxWhcNMjUwOTI1MTc1MzQxWjAYMRYwFAYD VQQDEw02OGNjNDcyNS01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9x9Pzks9Bm76vaPv8FdKnr8oe+2p4OKIO3jDL56L2NiqijNNcWiT3wyh8WH pYZ8zsjaCXuXNH3TSNCdcqE0jL8jh72boZ+0A91oC20cVCPvtLG4WYFLJjn3CxYy +GmQF0+SIjhhM+uJ4HQn5u6klpV4W3z1WRjojbZTSJOsX/hRnusFa8MqGdOtZ60I SQLuK/h2kjJ3R1VvPTpO+w6CKG/Rg9wL9PulvxYmfs0po+Xy48miZVGDsRpDgPsZ uq4g8BpwXs9fffEq5raNZxXXBL6owQ8Tz81WuHlm3RkUgxJ2rFVQ7L5483d5MV7M uAfWINz5O7KkdVRjEZ7fQmri/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnKjcwV 6us7fy/fCUJcuQMEXYyZMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPKZLsPR8e/qQpEir57N8cbBi7IK95R8EX7xYfWFRsRoQp+2Ia4baN /ktZbYWrng7tbxVLaYNH2/voU0gb+OhFMwWPaO4bgpOv5ZJRhJCIT+DhVyueu3xC BxICVodjXPHXQeWNr+A6zGTyLf0ldyvVJa9A+n9+HApAlXF6pPlC/z8mDepCWAgC qrq/4aXm2Tp4FUTvORV1Hj/oOLFOBrm+0d4ZRXcesFcD1sZnYrtSFouSzMh1H4Fj dHvg/f6wxzXNg94lyEyEj7y1+p23l+oYwu4CgFqdwGyxKrLtBblb47taoXPcU0uS wu5tRTG4BVt8Mr1qDgCa/wAip11aaVBH -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:56 2025 by rpki-client