$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: D9fRjDb/U0mFzmQVdiIhuJT4SS+XKMiWAYZ6gQcgnMM= Subject key identifier: 60:6B:A9:AC:27:0A:4C:07:E9:CA:8F:40:CA:12:E2:B1:36:E8:2C:9D Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E4E Signing time: Fri 30 May 2025 17:56:48 +0000 Manifest this update: Fri 30 May 2025 17:56:47 +0000 Manifest next update: Fri 06 Jun 2025 17:56:47 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: h2ZGUkV+rTC7fzKGYH8gu34k17DBgT8quefnD7NEVwg=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: May 30 17:56:47 2025 GMT Not After : Jun 6 17:56:47 2025 GMT Subject: CN=6839f15f-36d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:06:3b:cd:7e:08:a0:65:42:84:b4:fe:54: ec:28:fd:60:57:1e:75:62:65:f4:d6:4c:3a:2f:e2: c8:7c:4d:ad:8b:c6:78:12:db:b3:14:1c:59:18:d1: be:9a:a1:b3:f3:db:b8:b2:a3:e4:29:34:78:f2:38: 60:79:5c:df:96:90:bf:21:65:c1:40:bf:d2:02:d5: 8b:77:f3:01:8f:fc:5c:ae:25:f6:69:ac:2f:6d:c0: 58:d4:ac:c8:ee:0b:6b:d8:13:bc:06:3e:a9:37:38: a4:b1:0e:da:da:2f:ac:cf:72:06:3b:5e:98:67:39: 06:72:b6:67:cd:dc:21:fe:00:b5:0a:d5:a1:17:22: 30:97:b7:d5:44:ea:43:a9:03:12:74:39:45:b4:7e: 7c:1c:0e:69:1f:ca:bc:66:17:74:f1:57:4d:a0:d2: 64:c8:c1:7a:a7:b2:28:a4:51:37:8d:6b:66:26:17: 00:dd:8b:34:6d:d7:f1:95:e7:30:45:55:3f:31:b7: de:d0:c4:bc:c6:9d:20:62:9b:78:71:15:f6:4b:1b: 52:a0:a0:f9:c7:f7:11:dc:d4:f6:2b:8a:c8:f4:c4: 7a:ed:cb:bb:1b:31:e6:7b:10:b8:64:71:80:34:09: 9b:a2:1d:0f:89:e9:6b:18:36:72:0c:92:c0:8a:62: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:A9:AC:27:0A:4C:07:E9:CA:8F:40:CA:12:E2:B1:36:E8:2C:9D X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d3:8b:99:61:2b:63:8e:b1:65:1e:ab:dc:a4:6f:f4:fa:82: 5b:80:bc:77:b6:cf:9e:aa:5b:ce:eb:b3:22:8b:cd:26:00:ce: 0b:13:72:86:c4:6f:2d:62:f5:b4:6d:b8:27:97:ce:de:b3:6b: 88:69:17:fe:84:48:5b:bd:c8:d6:b0:60:ea:1d:43:40:5d:39: 0d:9f:b5:c9:69:b6:ac:10:65:f8:29:41:20:d6:d3:4c:e1:c1: 79:99:81:b8:e7:99:9c:bc:cd:f3:89:d4:44:46:23:4b:44:e5: 29:2d:c0:af:ba:46:83:0c:fe:84:35:a5:72:8e:ba:b0:ed:7f: fd:b0:3a:b1:38:d0:8b:8f:bb:99:ac:0d:91:16:6b:1d:2e:36: a7:5d:ce:46:cf:23:c0:22:e2:5b:af:bf:29:51:d3:ee:77:d5: ce:e1:81:8e:4f:15:71:a5:78:22:83:0d:97:31:a3:b9:40:6b: 21:c5:7f:f4:cc:f4:b1:29:b2:e5:bc:df:80:7a:75:4f:05:ea: ec:0f:55:ec:ca:59:3c:42:dd:aa:83:d9:85:1a:82:71:93:10: 45:76:82:6b:93:2b:cb:2e:38:53:ab:8c:d9:9e:7a:36:00:46: 16:02:da:b2:19:69:34:a2:46:90:5e:00:e5:bd:4e:45:92:9f: af:14:2f:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwNTMwMTc1NjQ3WhcNMjUwNjA2MTc1NjQ3WjAYMRYwFAYD VQQDEw02ODM5ZjE1Zi0zNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX0GO81+CKBlQoS0/lTsKP1gVx51YmX01kw6L+LIfE2ti8Z4EtuzFBxZGNG+ mqGz89u4sqPkKTR48jhgeVzflpC/IWXBQL/SAtWLd/MBj/xcriX2aawvbcBY1KzI 7gtr2BO8Bj6pNziksQ7a2i+sz3IGO16YZzkGcrZnzdwh/gC1CtWhFyIwl7fVROpD qQMSdDlFtH58HA5pH8q8Zhd08VdNoNJkyMF6p7IopFE3jWtmJhcA3Ys0bdfxlecw RVU/Mbfe0MS8xp0gYpt4cRX2SxtSoKD5x/cR3NT2K4rI9MR67cu7GzHmexC4ZHGA NAmboh0PielrGDZyDJLAimIVIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBrqawn CkwH6cqPQMoS4rE26CydMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI04uZYStjjrFlHqvcpG/0+oJbgLx3ts+eqlvO67Mii80mAM4LE3KG xG8tYvW0bbgnl87es2uIaRf+hEhbvcjWsGDqHUNAXTkNn7XJabasEGX4KUEg1tNM 4cF5mYG455mcvM3zidRERiNLROUpLcCvukaDDP6ENaVyjrqw7X/9sDqxONCLj7uZ rA2RFmsdLjanXc5GzyPAIuJbr78pUdPud9XO4YGOTxVxpXgigw2XMaO5QGshxX/0 zPSxKbLlvN+AenVPBersD1Xsylk8Qt2qg9mFGoJxkxBFdoJrkyvLLjhTq4zZnno2 AEYWAtqyGWk0okaQXgDlvU5Fkp+vFC/W -----END CERTIFICATE-----Generated at Sat May 31 17:53:12 2025 by rpki-client