$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: QD3ziH6z5RZYzrIUWul+TGNSdn7tKvT7fwpdW3MhwWc= Subject key identifier: 1D:00:73:E2:35:BA:C6:93:AD:7C:50:8D:E3:5D:66:B9:A2:25:13:67 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34AC Signing time: Wed 20 Aug 2025 15:13:07 +0000 Manifest this update: Wed 20 Aug 2025 15:13:07 +0000 Manifest next update: Wed 27 Aug 2025 15:13:07 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: jYE3AhF1BSyJ0+wImOcbfB6aKMOnEPzKma1iFeKxf5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Aug 20 15:13:07 2025 GMT Not After : Aug 27 15:13:07 2025 GMT Subject: CN=68a5e603-29de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:e2:27:d4:ee:82:29:40:48:5e:b9:f7:34: df:77:34:01:fd:91:f8:05:31:76:67:64:7d:57:00: 38:ee:32:cc:2a:3b:a4:e8:1f:96:0d:34:40:fe:ab: 36:ce:18:5e:29:af:35:5b:e1:e9:2d:1e:f3:12:ad: 6a:7f:76:c5:14:8f:59:37:7c:fa:96:16:63:5e:ba: af:39:2e:da:0d:d9:8a:8f:3a:73:d2:7c:60:ee:59: 5f:c0:49:65:ee:2f:5f:fb:ba:cd:bd:0c:f5:77:f2: e9:06:89:03:ae:9d:fe:17:e6:05:ad:13:9f:81:c7: 15:0a:11:7d:6e:07:b8:15:04:85:44:2c:0b:ea:67: da:f2:2a:96:9d:56:ac:d5:22:79:4e:9a:5c:c8:25: be:1f:46:41:fa:38:a9:41:fc:61:36:82:c5:ed:07: fb:94:94:d0:f8:8f:fb:95:11:42:e0:ae:c7:3d:54: 81:4d:f6:4a:fc:61:71:63:88:af:03:1a:a1:ca:a7: 67:70:2d:6c:c6:10:9e:39:92:64:9e:26:67:09:69: 40:67:23:3a:c8:f2:fb:f6:0d:bc:be:36:10:d6:ae: 56:7a:d9:51:2a:c1:cc:fd:32:9d:75:2d:d5:1a:e3: b3:75:37:ab:02:23:e6:ae:d3:c1:70:5a:ef:15:28: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:00:73:E2:35:BA:C6:93:AD:7C:50:8D:E3:5D:66:B9:A2:25:13:67 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c9:aa:e5:23:16:6f:cf:8f:bd:fb:52:80:8b:60:0c:83:4d: a1:e8:1f:c0:24:c2:7d:53:32:a9:f6:42:58:da:b0:4b:90:fe: 07:33:bc:78:39:d0:8d:9a:f5:4c:1c:b2:eb:5e:ed:11:47:74: d2:68:47:7f:26:0e:ee:e9:21:0a:9b:c8:a8:ec:19:05:10:19: 07:0d:1e:f0:57:cf:18:43:62:fc:03:3b:58:ac:d9:72:5f:23: 21:e4:ee:4d:74:39:89:2d:36:20:91:9a:70:06:60:86:88:00: 2c:2e:36:af:d5:4d:ec:79:24:fc:f9:c2:c0:0b:53:21:c1:6c: e3:84:45:d0:f6:c9:3a:28:1c:72:fa:2a:f9:dc:2e:63:a0:99: 10:cf:a5:c3:92:95:b3:f4:3d:14:ca:80:fe:b4:16:e5:3e:ec: 73:8a:4d:58:e0:8c:a3:5c:69:89:a4:12:3e:20:24:19:89:71: c6:7e:55:10:33:b6:22:7b:5d:10:e0:32:10:36:50:2d:59:55: 60:29:f1:19:94:c0:b8:7b:93:cb:53:1d:7c:8f:df:bc:5d:ca: a0:a9:b3:0c:84:b2:de:fc:35:5b:cc:6b:b8:fe:24:f4:56:d8: 57:5d:b9:62:fd:6b:7f:7f:92:07:0a:84:8e:bf:2b:13:2c:c4: 9e:5d:87:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwODIwMTUxMzA3WhcNMjUwODI3MTUxMzA3WjAYMRYwFAYD VQQDEw02OGE1ZTYwMy0yOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuITiJ9TugilASF659zTfdzQB/ZH4BTF2Z2R9VwA47jLMKjuk6B+WDTRA/qs2 zhheKa81W+HpLR7zEq1qf3bFFI9ZN3z6lhZjXrqvOS7aDdmKjzpz0nxg7llfwEll 7i9f+7rNvQz1d/LpBokDrp3+F+YFrROfgccVChF9bge4FQSFRCwL6mfa8iqWnVas 1SJ5TppcyCW+H0ZB+jipQfxhNoLF7Qf7lJTQ+I/7lRFC4K7HPVSBTfZK/GFxY4iv AxqhyqdncC1sxhCeOZJkniZnCWlAZyM6yPL79g28vjYQ1q5WetlRKsHM/TKddS3V GuOzdTerAiPmrtPBcFrvFShYRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0Ac+I1 usaTrXxQjeNdZrmiJRNnMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBByarlIxZvz4+9+1KAi2AMg02h6B/AJMJ9UzKp9kJY2rBLkP4HM7x4 OdCNmvVMHLLrXu0RR3TSaEd/Jg7u6SEKm8io7BkFEBkHDR7wV88YQ2L8AztYrNly XyMh5O5NdDmJLTYgkZpwBmCGiAAsLjav1U3seST8+cLAC1MhwWzjhEXQ9sk6KBxy +ir53C5joJkQz6XDkpWz9D0UyoD+tBblPuxzik1Y4IyjXGmJpBI+ICQZiXHGflUQ M7Yie10Q4DIQNlAtWVVgKfEZlMC4e5PLUx18j9+8XcqgqbMMhLLe/DVbzGu4/iT0 VthXXbli/Wt/f5IHCoSOvysTLMSeXYdH -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client