$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: FtfEbOjtjQczgkTlTzO7vMvD9kMLsQshWKt7nmu40bc= Subject key identifier: 64:31:5C:5C:61:CD:68:2D:5D:1A:CF:A9:58:36:FD:B7:A7:E6:F7:90 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 6F Signing time: Tue 09 Sep 2025 07:00:19 +0000 Manifest this update: Tue 09 Sep 2025 07:00:18 +0000 Manifest next update: Tue 16 Sep 2025 07:00:18 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: dT2iqmtFHMUakx+6WBaflRzsCDjd7iY3DcM8Dtqjxyo=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Sep 9 07:00:18 2025 GMT Not After : Sep 16 07:00:18 2025 GMT Subject: CN=68bfd082-fd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:4a:b5:a2:2e:f8:ed:48:59:ac:7b:6b:52: d5:4a:5b:5a:93:a4:c4:83:78:99:36:8d:cd:f1:4d: a4:c1:ca:4e:8b:76:b6:37:18:cd:4a:5e:e2:01:aa: e0:db:b4:3a:e1:91:9d:4d:f3:9c:29:ee:6d:55:67: 50:d1:a7:39:29:7e:0b:72:dc:c8:c8:e6:d4:69:cd: 96:8c:6c:7b:a4:35:66:c5:4e:7d:85:44:a4:f0:b5: 1d:72:04:88:89:c7:ea:a9:a9:08:d9:c9:2e:8d:29: e0:9f:74:3c:23:2d:df:19:12:89:20:91:cc:35:54: 20:ce:fe:c1:d0:57:72:03:c4:75:c5:51:f9:8f:70: 56:4d:89:b2:64:7b:2f:3a:69:b2:c5:41:cd:b8:cc: e5:4c:41:ad:c3:e1:f2:62:c1:1d:ab:0d:ae:b1:8d: 85:32:36:15:d1:91:89:bb:c5:6e:bc:9d:f9:dc:32: 2a:46:3c:bf:d9:b1:1e:26:63:ec:d1:61:37:96:3c: 8e:89:12:f0:71:13:f5:c5:74:c8:4c:a5:0b:0b:a0: 30:73:58:02:4b:63:72:1f:1a:02:98:d1:a4:78:50: 02:f9:58:98:f1:64:08:3f:e4:8e:59:6d:c3:c3:f4: c7:68:5d:a0:f1:ec:c7:81:e0:7f:a7:f0:1a:6e:d4: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:5C:5C:61:CD:68:2D:5D:1A:CF:A9:58:36:FD:B7:A7:E6:F7:90 X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:4e:65:f9:6b:70:f6:83:f5:48:46:43:d4:3e:26:f0:f3: 77:aa:f2:e6:1f:c3:e2:ed:eb:b1:32:c9:95:fb:99:ee:da:7e: 09:93:6f:ba:c0:73:14:4e:3d:2e:df:0a:3d:71:7d:7d:73:60: 2b:d7:34:1f:ba:c4:b0:23:12:13:4b:65:0d:e4:23:10:6d:38: 98:25:41:d2:75:c5:4f:96:7f:77:21:09:43:5b:8d:52:e9:14: 21:0f:36:ca:69:5c:70:a0:67:a3:d0:a5:f2:97:97:bf:a5:4b: 49:a8:9d:5b:31:6b:b5:3a:7b:b4:e3:4f:25:2a:ac:3b:af:6f: 5c:0a:46:a8:4f:3b:f3:e3:91:ae:f8:70:8e:97:e6:01:15:30: 5a:25:8d:27:8a:cb:43:94:73:d1:23:49:17:f5:4d:58:10:7c: ed:46:66:f0:eb:74:30:9e:34:95:0c:b4:47:2a:2e:77:f7:0e: 2b:07:3e:72:81:f3:f2:4b:a3:1e:a8:06:c9:bd:e9:9b:cc:ad: 14:41:5b:67:2e:75:c7:1b:e1:f8:81:d0:ae:dc:49:77:17:e8: 53:db:25:66:9d:bb:fa:c9:13:53:36:2d:3b:91:a9:88:9e:cb: f7:6c:2c:43:e5:2a:f0:0f:19:f8:9f:ff:bf:be:5f:b5:5f:2a: 12:25:da:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoNzU4QUMyQkVEQURDQkEzQUQ3MzgxNjlGQjM4OUQ1MDhC NTRENzRCRjAeFw0yNTA5MDkwNzAwMThaFw0yNTA5MTYwNzAwMThaMBgxFjAUBgNV BAMTDTY4YmZkMDgyLWZkM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp5Uq1oi747UhZrHtrUtVKW1qTpMSDeJk2jc3xTaTByk6LdrY3GM1KXuIBquDb tDrhkZ1N85wp7m1VZ1DRpzkpfgty3MjI5tRpzZaMbHukNWbFTn2FRKTwtR1yBIiJ x+qpqQjZyS6NKeCfdDwjLd8ZEokgkcw1VCDO/sHQV3IDxHXFUfmPcFZNibJkey86 abLFQc24zOVMQa3D4fJiwR2rDa6xjYUyNhXRkYm7xW68nfncMipGPL/ZsR4mY+zR YTeWPI6JEvBxE/XFdMhMpQsLoDBzWAJLY3IfGgKY0aR4UAL5WJjxZAg/5I5ZbcPD 9MdoXaDx7MeB4H+n8Bpu1JJpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZDFcXGHN aC1dGs+pWDb9t6fm95AwHwYDVR0jBBgwFoAUdYrCvtrcujrXOBafs4nVCLVNdL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzJFMTBFREIyRTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFlyQ3Z0cmN1anJYT0JhZnM0blZDTFZOZEw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzJFMTBFREIyRTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL2RZckN2dHJjdWpy WE9CYWZzNG5WQ0xWTmRMOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2+TmX5a3D2g/VIRkPUPibw83eq8uYfw+Lt67EyyZX7me7afgmTb7rA cxROPS7fCj1xfX1zYCvXNB+6xLAjEhNLZQ3kIxBtOJglQdJ1xU+Wf3chCUNbjVLp FCEPNsppXHCgZ6PQpfKXl7+lS0monVsxa7U6e7TjTyUqrDuvb1wKRqhPO/Pjka74 cI6X5gEVMFoljSeKy0OUc9EjSRf1TVgQfO1GZvDrdDCeNJUMtEcqLnf3DisHPnKB 8/JLox6oBsm96ZvMrRRBW2cudccb4fiB0K7cSXcX6FPbJWadu/rJE1M2LTuRqYie y/dsLEPlKvAPGfif/7++X7VfKhIl2l4= -----END CERTIFICATE-----Generated at Tue Sep 9 08:18:26 2025 by rpki-client