$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: /9ywcBFHDZ4LWyHEGIXsNG2qm/ksl/mhJKjhCw6Hm8A= Subject key identifier: 87:23:72:18:FD:2F:1F:70:EC:D8:35:E5:06:58:8E:72:D2:D9:9C:4D Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 0789 Signing time: Sat 06 Sep 2025 21:44:37 +0000 Manifest this update: Sat 06 Sep 2025 21:44:36 +0000 Manifest next update: Sat 13 Sep 2025 21:44:36 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: Z1rg+PwaPCUP20DhoPyFkDk1IjgN8Yu1XbPrDAz2AjU=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Sep 6 21:44:36 2025 GMT Not After : Sep 13 21:44:36 2025 GMT Subject: CN=68bcab44-2035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:17:b2:5a:62:3c:5f:1c:7e:0e:5e:40:c4: c0:ab:4e:b1:39:02:89:aa:13:0d:cb:ad:e1:ae:c4: 6c:dc:89:f1:d8:cc:0a:a6:97:98:e4:c3:64:f4:ff: 4e:9e:83:8b:f3:e6:82:14:73:44:22:c6:32:02:21: b0:ba:8f:34:9c:a2:b6:3c:ed:7c:f7:5e:4a:ab:94: 20:10:ad:01:d6:f1:4a:9e:f9:84:d7:75:dd:63:96: c3:39:91:02:32:c6:ca:2b:2e:90:30:66:4f:c5:50: e1:05:61:17:0e:09:c3:be:f9:27:71:80:bd:76:bc: 7b:60:d3:3f:44:6f:a6:b5:4a:6b:9e:12:4c:69:28: d4:d8:52:49:7a:89:71:39:ce:99:13:78:73:70:37: 40:b8:0f:3c:39:4f:2f:b6:f9:fd:ad:72:35:b8:0f: 59:e6:bf:8c:23:73:41:e4:3e:3a:c0:bf:46:e8:06: 15:01:8b:96:3a:1f:9a:4c:2f:1d:72:cd:79:c2:bf: b5:7d:24:67:a5:39:59:c6:06:0e:ad:1f:e3:95:9d: a9:0b:43:8c:9b:3e:fb:3d:cf:af:4b:35:8b:1a:3d: 78:e2:b0:75:0b:ea:23:cf:a5:76:8c:f2:a3:a4:f0: 42:e7:61:81:44:8b:a8:50:72:86:40:18:08:e1:84: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:72:18:FD:2F:1F:70:EC:D8:35:E5:06:58:8E:72:D2:D9:9C:4D X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b5:ad:b3:99:c3:14:d9:ef:63:a3:09:6c:8f:14:b3:39:1c: 87:8a:7f:b0:c7:81:a5:72:6a:f1:f6:da:8d:ba:e9:6c:1a:59: 31:3c:e3:b6:8b:3c:76:ce:57:e0:12:d0:d4:61:53:45:88:7d: 23:86:51:73:93:e9:cb:a3:05:c9:3a:b2:cd:63:c9:26:84:08: ef:53:63:bc:bc:0c:77:a2:76:19:c7:ae:75:fe:59:14:de:62: be:70:0f:3c:77:83:ca:e8:11:67:8a:03:85:c3:7b:99:85:fe: 37:a1:fe:09:1b:9d:94:3f:73:8d:3d:92:23:d6:07:4f:1e:bd: 04:b1:c7:a1:a9:1f:f8:6f:3e:9a:9e:b7:0c:2f:41:8b:b6:78: 26:f5:fb:f7:a6:4a:10:3a:81:cc:be:2d:21:3c:6c:14:e1:78: 5f:47:b4:db:14:9f:25:67:ec:6a:61:d6:e4:85:75:d9:b4:c6: ef:b7:8b:bc:89:ba:a4:56:4b:2c:b5:7d:0e:23:40:8e:96:13: a3:e9:ea:75:a1:0b:c2:9f:66:1c:26:1a:96:39:25:99:cf:1f: d0:95:7d:4c:55:c5:fd:c5:62:08:5a:34:02:c1:2f:d8:d7:ef: 37:dc:4d:ae:16:b8:7e:e6:e3:2b:0e:2c:61:a3:8b:bd:c7:ea: 71:6d:6e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUwOTA2MjE0NDM2WhcNMjUwOTEzMjE0NDM2WjAYMRYwFAYD VQQDEw02OGJjYWI0NC0yMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q8XslpiPF8cfg5eQMTAq06xOQKJqhMNy63hrsRs3Inx2MwKppeY5MNk9P9O noOL8+aCFHNEIsYyAiGwuo80nKK2PO18915Kq5QgEK0B1vFKnvmE13XdY5bDOZEC MsbKKy6QMGZPxVDhBWEXDgnDvvkncYC9drx7YNM/RG+mtUprnhJMaSjU2FJJeolx Oc6ZE3hzcDdAuA88OU8vtvn9rXI1uA9Z5r+MI3NB5D46wL9G6AYVAYuWOh+aTC8d cs15wr+1fSRnpTlZxgYOrR/jlZ2pC0OMmz77Pc+vSzWLGj144rB1C+ojz6V2jPKj pPBC52GBRIuoUHKGQBgI4YR7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcjchj9 Lx9w7Ng15QZYjnLS2ZxNMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnta2zmcMU2e9jowlsjxSzORyHin+wx4Glcmrx9tqNuulsGlkxPOO2 izx2zlfgEtDUYVNFiH0jhlFzk+nLowXJOrLNY8kmhAjvU2O8vAx3onYZx651/lkU 3mK+cA88d4PK6BFnigOFw3uZhf43of4JG52UP3ONPZIj1gdPHr0EscehqR/4bz6a nrcML0GLtngm9fv3pkoQOoHMvi0hPGwU4XhfR7TbFJ8lZ+xqYdbkhXXZtMbvt4u8 ibqkVksstX0OI0COlhOj6ep1oQvCn2YcJhqWOSWZzx/QlX1MVcX9xWIIWjQCwS/Y 1+833E2uFrh+5uMrDixho4u9x+pxbW4Z -----END CERTIFICATE-----Generated at Sun Sep 7 15:23:09 2025 by rpki-client