$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: VzfOgLaS1XDaIduGG8gIw86Rrq0PTeapb87t5XGG//Q= Subject key identifier: D4:AF:D2:5B:A2:3E:26:E6:96:A6:35:E5:84:89:BB:6D:D4:A9:B6:7D Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 09 Signing time: Wed 17 Sep 2025 08:52:16 +0000 Manifest this update: Wed 17 Sep 2025 08:52:15 +0000 Manifest next update: Wed 24 Sep 2025 08:52:15 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: l/UesPOViB2vnCtSDAyozyh6dtZ9s7WMyXt9RQ41cNo=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: llPDQC2jO2w/FvD6c8zrwk1KVoD3gjXSKUJ2H5qo9rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Sep 17 08:52:15 2025 GMT Not After : Sep 24 08:52:15 2025 GMT Subject: CN=68ca76bf-1085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:1e:be:c7:d5:ce:5a:c3:8e:e5:f4:46:ef: 89:20:6b:a9:3b:25:b7:76:cb:cc:fb:be:a8:2e:92: 69:e8:06:ff:dd:04:78:62:f0:c0:cc:22:8d:a4:b5: 0b:04:d7:51:41:88:15:8b:ca:e5:0c:0a:ee:d3:49: 94:da:59:1c:15:49:fd:fe:14:84:6f:bb:24:5e:d0: cc:38:13:95:62:c6:52:c8:40:10:37:93:3b:79:8f: 6f:61:9e:39:90:38:41:9c:f7:50:57:fc:80:8d:74: d0:27:4e:78:b5:e5:65:e3:af:43:94:68:fe:f9:62: e2:f4:f9:61:de:98:77:24:00:e1:51:81:f7:3d:e7: 7e:0c:0a:44:d5:0f:ff:8b:56:14:c3:cd:f0:15:1e: c3:a4:69:6e:60:a2:39:6d:ee:20:a4:31:01:e9:b7: 42:c9:da:cc:52:34:1c:d2:06:fd:70:12:63:77:85: d7:fa:99:7e:95:ed:cf:ab:34:94:e7:2b:73:e1:07: c1:6b:0e:29:05:ea:2d:0d:44:42:e2:e7:16:1d:40: b4:c5:eb:c3:51:22:8e:0c:12:c1:b6:45:9e:52:35: 44:82:82:f7:33:ec:c1:fa:58:a2:cd:55:f6:9c:60: 74:2e:0c:9d:f8:ca:e5:5b:41:f8:08:b6:3c:c9:50: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:D2:5B:A2:3E:26:E6:96:A6:35:E5:84:89:BB:6D:D4:A9:B6:7D X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:53:74:7e:78:10:aa:25:8d:ea:e3:8e:61:49:4b:29:42:91: 7a:80:5a:d6:f0:e0:31:5a:71:43:0f:c7:34:6e:ca:10:4a:0a: c3:ac:3b:99:7f:98:86:22:13:e2:c5:8d:da:05:e8:dc:bf:98: 31:f3:4e:6c:61:50:31:ec:bc:6b:a4:0b:23:ed:91:42:38:ae: 3c:df:8a:61:47:99:90:32:50:13:70:90:bf:71:a8:44:8d:93: 3c:a1:c8:71:cd:d5:2d:36:7a:60:6f:3e:db:38:2d:c8:15:54: 51:67:75:34:c7:1a:78:9d:fb:26:7d:11:19:b5:95:a4:3c:ef: 34:29:cb:fe:12:9e:f5:c5:fc:12:b0:68:8c:72:42:d4:d3:0b: 01:d4:61:e5:53:38:0a:4e:ef:0b:57:9e:5e:a5:b8:91:43:94: 35:29:bc:fe:a1:81:f4:4b:33:81:c0:ac:b0:ac:a0:7b:19:11: 4e:bf:90:3a:93:06:93:5b:12:87:3e:51:c5:12:39:75:9b:a3: 28:6c:67:36:6a:8d:93:b4:06:ca:10:47:ba:49:f8:b7:ff:cf: 44:6d:aa:5b:68:4d:21:46:fc:e9:5e:59:f3:c9:2e:d8:de:a6: ac:cc:a7:50:ab:1c:28:7c:09:5e:b6:00:f2:b4:f2:1f:4d:0c: b2:11:96:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNTA5MTcwODUyMTVaFw0yNTA5MjQwODUyMTVaMBgxFjAUBgNV BAMTDTY4Y2E3NmJmLTEwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRQx6+x9XOWsOO5fRG74kga6k7Jbd2y8z7vqgukmnoBv/dBHhi8MDMIo2ktQsE 11FBiBWLyuUMCu7TSZTaWRwVSf3+FIRvuyRe0Mw4E5VixlLIQBA3kzt5j29hnjmQ OEGc91BX/ICNdNAnTni15WXjr0OUaP75YuL0+WHemHckAOFRgfc9534MCkTVD/+L VhTDzfAVHsOkaW5gojlt7iCkMQHpt0LJ2sxSNBzSBv1wEmN3hdf6mX6V7c+rNJTn K3PhB8FrDikF6i0NRELi5xYdQLTF68NRIo4MEsG2RZ5SNUSCgvcz7MH6WKLNVfac YHQuDJ34yuVbQfgItjzJUEwNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1K/SW6I+ JuaWpjXlhIm7bdSptn0wHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMdTdH54EKoljerjjmFJSylCkXqAWtbw4DFacUMPxzRuyhBKCsOsO5l/ mIYiE+LFjdoF6Ny/mDHzTmxhUDHsvGukCyPtkUI4rjzfimFHmZAyUBNwkL9xqESN kzyhyHHN1S02emBvPts4LcgVVFFndTTHGnid+yZ9ERm1laQ87zQpy/4SnvXF/BKw aIxyQtTTCwHUYeVTOApO7wtXnl6luJFDlDUpvP6hgfRLM4HArLCsoHsZEU6/kDqT BpNbEoc+UcUSOXWboyhsZzZqjZO0BsoQR7pJ+Lf/z0RtqltoTSFG/OleWfPJLtje pqzMp1CrHCh8CV62APK08h9NDLIRlrM= -----END CERTIFICATE-----Generated at Fri Sep 19 07:13:04 2025 by rpki-client