$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json) Hash identifier: /f4Wp/JiuMZEZpEM1kBN7snrpwasd0qPRIktzRfYezw= Subject key identifier: 02:EC:9A:8D:E0:82:D4:41:01:F1:7C:8C:6A:96:58:C9:C3:8A:1F:A7 Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft Manifest number: 012C Signing time: Fri 05 Sep 2025 05:06:24 +0000 Manifest this update: Fri 05 Sep 2025 05:06:24 +0000 Manifest next update: Fri 12 Sep 2025 05:06:24 +0000 Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: 90LKcNlcJBrmhpyfh+n49gh0tq9tp3agBtT5nsWx1WE=) 2: 79F7221E892911EF896D1145C4F9AE02.roa (hash: hGdMrY8+O6zApibMjg/vy58aibxku7iV/ch2aVDa82w=) 3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: A9dIkj8J76tWHGXSX/3Ud9jZf1nkfnJcE726ptgm7cw=) 4: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: v+1b4BSfVaZyzyzYkzqzeT7Ee1I3/7A+8jt9kQpxCPc=) 5: F278C026892911EFB08D7746C4F9AE02.roa (hash: Vz6AnYUqxQMrtm1fqPuY9YKct5u+kfmwLL8MJ80Qjc4=) 6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: 1Q/6I9YvTdRroG4PgU/vX7AvoYDmVeBiDmXzSwZyFRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Validity Not Before: Sep 5 05:06:24 2025 GMT Not After : Sep 12 05:06:24 2025 GMT Subject: CN=68ba6fd0-af67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:84:0f:c8:f7:4d:85:c5:50:8a:69:6b:24: ce:10:9a:5e:e3:c0:18:1e:ab:4f:cf:c1:e9:4c:db: 88:6a:6d:11:1d:60:2a:aa:ba:6a:25:f6:bb:41:51: ba:47:9b:70:99:04:9a:3a:3a:a3:e6:34:36:ca:52: d1:ba:b1:56:aa:a2:3d:18:54:70:90:c7:d7:de:54: 7f:b6:2b:d6:58:b3:1c:dc:36:66:eb:09:df:11:f3: fd:c6:bf:65:f4:de:0e:1c:4f:a0:dd:6d:b0:f7:c8: d8:1b:78:8d:eb:d8:eb:c0:f0:50:5f:1e:57:59:b5: e1:a3:e3:36:61:e0:73:0e:51:7e:92:d5:c0:5e:75: b5:95:7e:30:6f:31:69:0c:46:e6:fe:98:a3:e1:d6: d8:a4:26:12:a2:ad:f8:1e:3d:da:2c:99:02:b1:e8: aa:d2:96:4c:0e:b8:b7:69:8d:9c:b1:75:69:c9:e9: 65:83:2d:bc:f8:f8:6e:eb:08:aa:ce:4a:2d:5a:0d: 86:10:14:73:a5:5e:d9:d4:e9:51:b0:8c:b9:af:9f: 20:9d:9c:c9:81:8c:e1:3e:39:80:33:93:4d:90:23: 8c:55:06:41:1f:9a:bb:8e:b6:23:c6:a2:ba:d6:0d: a7:13:19:7b:f7:5d:b1:b7:0a:18:d0:7a:bc:81:a6: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:9A:8D:E0:82:D4:41:01:F1:7C:8C:6A:96:58:C9:C3:8A:1F:A7 X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d7:99:93:68:a9:86:6a:4c:e5:3c:dc:76:84:9a:df:c6:e2: bf:b0:62:a9:ca:13:a0:02:86:2f:ac:da:64:10:fd:10:f8:05: 34:7e:20:6e:9a:21:d3:94:cd:39:b6:78:f1:89:d4:dc:12:d7: 9e:83:d0:5b:f0:72:52:e0:ef:75:bc:d3:03:96:82:2f:dd:ef: f5:cd:e4:a6:e5:86:91:08:ac:e9:87:3f:4a:d7:88:8b:ed:00: ce:a2:ce:92:52:de:44:b0:93:31:99:4f:04:9e:64:e2:87:71: fb:d3:18:a3:db:43:51:f3:03:cd:2a:07:60:9e:54:f2:d8:1e: 42:09:9c:fb:b2:d3:12:f7:c7:ad:46:75:fd:b6:57:29:6d:c3: d5:b7:ec:ee:5c:7e:6a:bf:32:af:ea:3c:a8:5f:9e:98:1f:34: 8b:59:0c:e8:00:46:06:56:45:d4:c4:0e:f2:9e:e2:5d:21:94: d8:f9:0c:47:41:f8:ad:17:80:9a:94:b0:df:d2:48:d2:76:66: 39:eb:d1:16:3a:f8:41:47:47:d5:d2:eb:ca:ab:e5:07:17:82: 14:95:2a:96:a9:44:e8:7a:8c:b2:99:5e:1a:cd:94:89:0b:f8: 23:2f:46:79:ae:6c:cc:bf:1b:08:a7:2a:7c:13:ac:38:21:7a: c7:5e:56:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwOTA1MDUwNjI0WhcNMjUwOTEyMDUwNjI0WjAYMRYwFAYD VQQDEw02OGJhNmZkMC1hZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTKED8j3TYXFUIppayTOEJpe48AYHqtPz8HpTNuIam0RHWAqqrpqJfa7QVG6 R5twmQSaOjqj5jQ2ylLRurFWqqI9GFRwkMfX3lR/tivWWLMc3DZm6wnfEfP9xr9l 9N4OHE+g3W2w98jYG3iN69jrwPBQXx5XWbXho+M2YeBzDlF+ktXAXnW1lX4wbzFp DEbm/pij4dbYpCYSoq34Hj3aLJkCseiq0pZMDri3aY2csXVpyellgy28+Phu6wiq zkotWg2GEBRzpV7Z1OlRsIy5r58gnZzJgYzhPjmAM5NNkCOMVQZBH5q7jrYjxqK6 1g2nExl7912xtwoY0Hq8gabU5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALsmo3g gtRBAfF8jGqWWMnDih+nMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy15mTaKmGakzlPNx2hJrfxuK/sGKpyhOgAoYvrNpkEP0Q+AU0fiBu miHTlM05tnjxidTcEteeg9Bb8HJS4O91vNMDloIv3e/1zeSm5YaRCKzphz9K14iL 7QDOos6SUt5EsJMxmU8EnmTih3H70xij20NR8wPNKgdgnlTy2B5CCZz7stMS98et RnX9tlcpbcPVt+zuXH5qvzKv6jyoX56YHzSLWQzoAEYGVkXUxA7ynuJdIZTY+QxH QfitF4CalLDf0kjSdmY569EWOvhBR0fV0uvKq+UHF4IUlSqWqUToeoyymV4azZSJ C/gjL0Z5rmzMvxsIpyp8E6w4IXrHXlYw -----END CERTIFICATE-----Generated at Sat Sep 6 06:01:54 2025 by rpki-client