$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: GSHcbUgCBJscckreg4fWn0Oi3L4mopiNHzIHCLlE5Yg= Subject key identifier: 92:F6:1B:2C:F9:E1:14:B0:7E:2E:DF:2E:F5:28:13:EF:CA:F8:64:72 Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1DF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1DDA Signing time: Thu 18 Sep 2025 16:12:46 +0000 Manifest this update: Thu 18 Sep 2025 16:12:46 +0000 Manifest next update: Thu 25 Sep 2025 16:12:46 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: EfdslEkIOtmMRy4hcz7fhNcMGAGR57Fy/1gtl/JoXLA=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7667 (0x1df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Sep 18 16:12:46 2025 GMT Not After : Sep 25 16:12:46 2025 GMT Subject: CN=68cc2f7e-d0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:ea:4c:6d:71:16:0a:c4:fe:5d:4d:66:33: 5e:e3:8a:1b:32:6a:71:72:eb:59:79:1b:a0:19:fe: e5:7a:1d:6b:1b:15:8a:c7:f7:70:e2:fa:47:eb:74: 0d:4c:52:6b:2b:22:af:fe:18:17:39:9d:af:23:09: 2e:e0:19:7d:88:b2:ea:12:8c:f1:6e:5d:65:77:8f: ea:bf:82:98:1a:74:55:3e:9f:c9:47:60:de:77:64: aa:17:dd:e5:0b:dd:3d:74:c9:d1:5e:f3:7c:a5:82: ac:39:cb:46:98:88:aa:1e:9d:21:6d:08:09:4b:7c: aa:55:4b:f3:fd:be:9f:4f:dd:43:d5:e2:a3:7e:49: 81:ed:52:ba:ee:3a:0c:12:e1:f8:00:fc:d8:e9:b5: 6b:99:a8:02:34:a1:99:58:31:66:ce:45:12:a5:5a: 42:7c:ab:04:e9:19:d1:e0:5a:f5:28:5d:1e:40:a6: b1:91:1c:ce:77:51:13:86:80:17:b5:2a:9a:a5:de: 4a:e0:e8:f3:29:12:9a:33:7f:7a:b0:07:6d:2a:75: 7f:30:8b:1b:d2:27:04:ea:03:84:91:95:18:08:d3: 30:78:ce:b7:0f:ba:39:d8:ee:85:98:ec:fd:50:cf: 4c:fe:f7:1e:f7:97:21:f8:fa:22:86:a5:a4:4d:e9: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:1B:2C:F9:E1:14:B0:7E:2E:DF:2E:F5:28:13:EF:CA:F8:64:72 X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:b2:dc:d4:84:25:a3:87:80:68:7c:77:18:02:3b:4e:5b: 4d:5a:80:4f:9f:17:9a:ed:27:7b:19:e3:b9:34:6e:bd:76:e2: 64:1b:05:46:ad:97:fe:d5:fc:c2:40:e4:80:fd:6a:94:65:3b: b0:60:f3:4d:f4:dc:44:79:85:8d:57:b7:ba:66:42:ee:dc:8f: 92:5b:33:08:b9:44:e0:2e:96:18:58:30:33:b1:56:79:db:cf: 95:59:a7:64:e3:6c:d9:3c:31:87:06:b6:dc:1a:bd:46:45:76: e0:30:dc:a6:b9:41:8f:05:c6:0c:17:3b:cd:1f:3c:9a:08:f9: d6:c9:1e:c4:e7:32:eb:57:9b:bf:12:b1:6f:84:3a:5f:d3:1d: 10:1c:75:a6:df:3e:9d:c7:df:9d:be:4e:d2:d5:a5:01:2f:95: c4:7c:72:b1:1e:7a:09:75:30:59:e8:7b:f6:1c:11:75:d9:fe: 72:04:96:0f:70:06:79:16:a1:e2:22:b7:cc:5d:ea:9f:ae:b7: be:37:b7:4b:64:7b:97:15:12:d9:45:f0:8c:e2:2e:5c:5b:b2: b3:a5:01:3f:51:d0:ca:40:3c:63:c4:26:ce:03:ba:29:9b:bc: 7b:f7:a5:dc:d2:a2:ff:0d:82:3f:20:8a:f9:a1:ff:ca:67:99: f9:5e:05:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjUwOTE4MTYxMjQ2WhcNMjUwOTI1MTYxMjQ2WjAYMRYwFAYD VQQDEw02OGNjMmY3ZS1kMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvfqTG1xFgrE/l1NZjNe44obMmpxcutZeRugGf7leh1rGxWKx/dw4vpH63QN TFJrKyKv/hgXOZ2vIwku4Bl9iLLqEozxbl1ld4/qv4KYGnRVPp/JR2Ded2SqF93l C909dMnRXvN8pYKsOctGmIiqHp0hbQgJS3yqVUvz/b6fT91D1eKjfkmB7VK67joM EuH4APzY6bVrmagCNKGZWDFmzkUSpVpCfKsE6RnR4Fr1KF0eQKaxkRzOd1EThoAX tSqapd5K4OjzKRKaM396sAdtKnV/MIsb0icE6gOEkZUYCNMweM63D7o52O6FmOz9 UM9M/vce95ch+PoihqWkTendPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL2Gyz5 4RSwfi7fLvUoE+/K+GRyMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOp7Lc1IQlo4eAaHx3GAI7TltNWoBPnxea7Sd7GeO5NG69duJkGwVG rZf+1fzCQOSA/WqUZTuwYPNN9NxEeYWNV7e6ZkLu3I+SWzMIuUTgLpYYWDAzsVZ5 28+VWadk42zZPDGHBrbcGr1GRXbgMNymuUGPBcYMFzvNHzyaCPnWyR7E5zLrV5u/ ErFvhDpf0x0QHHWm3z6dx9+dvk7S1aUBL5XEfHKxHnoJdTBZ6Hv2HBF12f5yBJYP cAZ5FqHiIrfMXeqfrre+N7dLZHuXFRLZRfCM4i5cW7KzpQE/UdDKQDxjxCbOA7op m7x796Xc0qL/DYI/IIr5of/KZ5n5XgWW -----END CERTIFICATE-----Generated at Fri Sep 19 02:10:23 2025 by rpki-client