$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: 1nPPayE67syFWi+TOg+Zs3VjSFAUmM57FSJEtEJfCuM= Subject key identifier: 0C:AF:00:EB:06:36:75:E3:5B:3B:BF:A3:FE:68:30:14:7D:7C:02:41 Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 107C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1067 Signing time: Sat 06 Sep 2025 17:30:46 +0000 Manifest this update: Sat 06 Sep 2025 17:30:45 +0000 Manifest next update: Sat 13 Sep 2025 17:30:45 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: behtbq79EHGia4BU4W8K1rjni//Lv3gV4EWiRhzpRgI=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Sep 6 17:30:45 2025 GMT Not After : Sep 13 17:30:45 2025 GMT Subject: CN=68bc6fc6-cb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:73:61:e4:f3:0d:e8:b4:8f:c8:35:0b:84: 1f:7c:d5:2b:46:ec:2b:27:d7:ab:c4:19:ed:ef:f4: 7c:75:43:9e:25:fd:d3:82:d0:79:3e:cd:24:aa:53: 3d:97:6c:f9:26:43:39:ae:13:c4:6f:fb:28:38:74: 48:a0:dd:cf:7d:51:fb:49:9c:7c:d8:18:61:2b:4b: 10:14:4b:f4:10:8e:fa:13:e1:c6:27:84:94:cb:4d: 99:61:44:f4:a5:7b:d3:09:ae:58:fa:89:e2:ac:78: bd:1a:24:8d:1f:f8:f7:f4:86:31:45:d7:72:08:71: 1f:0b:d6:6f:14:9e:ec:86:79:84:06:3d:3d:92:19: 0d:23:64:0a:0c:b4:ba:ab:c4:98:11:ba:4d:bc:64: 5c:f8:13:49:22:e1:11:ca:1d:51:f3:05:fd:ae:e2: f8:2f:e8:b4:de:5c:ea:6c:b6:ed:27:cb:4c:12:85: 3c:c9:20:7e:da:72:6c:18:bf:f2:fa:46:04:cf:5b: 72:5b:0e:8b:b0:95:4b:e0:99:f9:b1:8f:7a:2e:9f: d0:56:27:c4:ac:e5:00:4d:38:34:e0:3f:cb:65:35: f8:23:50:87:e6:49:dc:8e:18:79:08:43:cd:54:c4: b4:bd:b4:73:ad:c6:97:d4:fd:64:96:7c:72:95:8d: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AF:00:EB:06:36:75:E3:5B:3B:BF:A3:FE:68:30:14:7D:7C:02:41 X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ac:fe:5b:80:34:f5:46:01:a6:45:f5:f3:c2:b6:0d:65:e7: 50:3c:0e:dd:9f:15:9f:d1:a9:54:95:28:3c:6d:21:86:8a:87: 72:d5:b0:36:00:85:03:d4:ee:da:79:4f:1e:b6:a0:e5:28:fa: f0:88:8f:83:ed:86:8f:5b:b6:fb:d1:7d:57:aa:e9:1f:45:48: 10:f2:96:53:95:0a:6d:f5:09:09:20:c5:20:72:cc:98:af:fe: 58:db:a6:9d:cf:7e:85:c2:87:44:f2:48:fc:e6:19:58:5a:88: 77:2c:c7:27:21:d1:de:41:a0:da:4b:b1:07:5a:f0:79:d5:41: 8b:6d:e7:bf:7e:50:6e:f6:a2:2b:cf:63:ab:d3:d9:97:b4:78: 74:48:5e:84:4b:d4:20:2c:58:a1:f5:eb:20:5d:81:db:93:7c: 9b:ce:73:0b:41:39:24:75:28:c5:84:29:46:b0:0e:60:98:ed: 79:9b:81:43:01:f2:96:53:2e:26:83:98:7b:e1:d0:54:77:61: 5b:76:60:25:79:52:3d:70:ea:f9:31:2a:ba:eb:17:e5:0b:ae: 92:3f:9e:d8:23:cc:cb:b1:e2:93:2f:fa:98:3f:5d:ae:94:40: 3e:78:1c:f7:23:18:76:d1:74:81:de:63:8a:57:12:0a:79:62: bd:3b:db:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwOTA2MTczMDQ1WhcNMjUwOTEzMTczMDQ1WjAYMRYwFAYD VQQDEw02OGJjNmZjNi1jYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtipzYeTzDei0j8g1C4QffNUrRuwrJ9erxBnt7/R8dUOeJf3TgtB5Ps0kqlM9 l2z5JkM5rhPEb/soOHRIoN3PfVH7SZx82BhhK0sQFEv0EI76E+HGJ4SUy02ZYUT0 pXvTCa5Y+onirHi9GiSNH/j39IYxRddyCHEfC9ZvFJ7shnmEBj09khkNI2QKDLS6 q8SYEbpNvGRc+BNJIuERyh1R8wX9ruL4L+i03lzqbLbtJ8tMEoU8ySB+2nJsGL/y +kYEz1tyWw6LsJVL4Jn5sY96Lp/QVifErOUATTg04D/LZTX4I1CH5kncjhh5CEPN VMS0vbRzrcaX1P1klnxylY3ctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyvAOsG NnXjWzu/o/5oMBR9fAJBMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3rP5bgDT1RgGmRfXzwrYNZedQPA7dnxWf0alUlSg8bSGGiody1bA2 AIUD1O7aeU8etqDlKPrwiI+D7YaPW7b70X1XqukfRUgQ8pZTlQpt9QkJIMUgcsyY r/5Y26adz36FwodE8kj85hlYWoh3LMcnIdHeQaDaS7EHWvB51UGLbee/flBu9qIr z2Or09mXtHh0SF6ES9QgLFih9esgXYHbk3ybznMLQTkkdSjFhClGsA5gmO15m4FD AfKWUy4mg5h74dBUd2FbdmAleVI9cOr5MSq66xflC66SP57YI8zLseKTL/qYP12u lEA+eBz3Ixh20XSB3mOKVxIKeWK9O9u2 -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:51 2025 by rpki-client