$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: x2gYrDBe2fYLAS6qx8W3KPkCVS7BDW+XAb+uku0PCTI= Subject key identifier: 79:01:18:96:E4:56:78:44:67:E1:13:B2:BE:EF:CD:38:67:7F:37:6E Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0C15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0C09 Signing time: Sat 14 Jun 2025 18:35:45 +0000 Manifest this update: Sat 14 Jun 2025 18:35:44 +0000 Manifest next update: Sat 21 Jun 2025 18:35:44 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: LNSkJHDBbDdco2NOTo8bF4vEd6HX8234e6QYeK6+GSo=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Jun 14 18:35:44 2025 GMT Not After : Jun 21 18:35:44 2025 GMT Subject: CN=684dc100-0452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:6f:1e:4a:4e:9d:fd:e0:32:61:d0:99:ae: d8:0c:54:08:10:c1:0a:3b:7c:20:9c:02:eb:ca:98: 16:85:33:64:16:c2:24:ae:18:94:bc:a2:f6:4a:90: 88:20:34:e5:e1:3a:00:fc:e7:c2:43:40:81:28:79: 22:64:8f:a7:f7:cd:0f:fc:80:00:79:87:04:ae:8d: 0d:e3:9a:29:b7:f8:dc:a3:e3:fc:22:2e:20:1e:7a: ca:cb:53:99:87:02:ee:a7:04:9f:b6:35:75:4e:1b: d4:39:f1:35:5c:8b:69:7c:97:6c:c8:15:02:28:c9: 84:b4:9b:d6:03:56:df:a0:d8:dc:2a:ea:98:7b:d9: 10:6d:00:e8:ab:8d:21:c3:dd:61:e0:73:a7:09:a7: f4:ae:e6:f7:31:b6:b9:df:ac:29:ac:c5:3a:85:5e: 7e:9d:d6:64:31:5f:93:e6:d1:b7:bc:68:0e:62:25: fd:7e:8a:5c:57:e8:d0:30:60:de:a4:1d:2b:7a:e5: 7e:dd:74:9d:fb:9f:2a:80:e1:f4:a0:00:2a:f3:b1: 1b:3f:3c:24:1a:d1:16:19:b3:51:f5:6a:fc:56:e6: 03:e6:89:78:ee:46:22:1d:d6:1b:16:af:ac:6f:cc: 2b:bb:2f:bc:19:6c:04:42:2a:49:2d:c4:d6:c8:05: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:01:18:96:E4:56:78:44:67:E1:13:B2:BE:EF:CD:38:67:7F:37:6E X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:1f:d6:48:26:db:ae:5b:7a:68:38:87:bd:b3:fc:08:43: 3f:4e:e8:b1:27:7a:49:9d:15:ed:10:8a:ce:37:f7:41:c9:0d: 26:bf:14:1a:12:aa:4f:93:33:bc:a8:cf:7f:b4:b5:1c:37:43: cc:f2:fe:12:4e:e8:7e:74:ff:fc:b9:10:8a:ed:a8:5d:23:bd: 0d:ac:ff:b5:25:5d:89:38:fc:dd:ff:9d:7b:1c:ae:83:04:ea: de:92:7c:21:eb:ff:42:f8:10:91:8c:d3:05:3e:0d:9c:93:bd: a3:9b:26:f5:5f:81:ea:b4:7f:55:6a:aa:d3:fe:ae:eb:71:18: e0:5f:89:7e:3d:c5:59:20:14:39:98:a3:63:2e:4c:da:e0:03: d5:44:8c:1e:3b:be:91:b9:9c:e3:71:d1:91:21:79:06:1e:5e: 30:b3:7a:76:ba:7a:1b:13:93:a8:69:6a:e8:d7:b5:22:20:65: fe:05:97:93:f4:1f:36:85:28:b0:87:05:89:3b:47:4e:86:fe: 1a:8b:0d:37:c7:2d:ae:46:3c:2f:5b:99:37:97:44:bd:5c:0e: 36:3e:9a:82:37:52:1a:e1:b2:98:3e:24:37:a0:3f:d1:de:3a: f0:7e:a7:be:8f:df:3f:5c:a7:b8:8f:fd:d2:b7:2c:25:4b:52: 7d:9e:f3:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjUwNjE0MTgzNTQ0WhcNMjUwNjIxMTgzNTQ0WjAYMRYwFAYD VQQDEw02ODRkYzEwMC0wNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8RvHkpOnf3gMmHQma7YDFQIEMEKO3wgnALrypgWhTNkFsIkrhiUvKL2SpCI IDTl4ToA/OfCQ0CBKHkiZI+n980P/IAAeYcEro0N45opt/jco+P8Ii4gHnrKy1OZ hwLupwSftjV1ThvUOfE1XItpfJdsyBUCKMmEtJvWA1bfoNjcKuqYe9kQbQDoq40h w91h4HOnCaf0rub3Mba536wprMU6hV5+ndZkMV+T5tG3vGgOYiX9fopcV+jQMGDe pB0reuV+3XSd+58qgOH0oAAq87EbPzwkGtEWGbNR9Wr8VuYD5ol47kYiHdYbFq+s b8wruy+8GWwEQipJLcTWyAXd1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkBGJbk VnhEZ+ETsr7vzThnfzduMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP5B/WSCbbrlt6aDiHvbP8CEM/TuixJ3pJnRXtEIrON/dByQ0mvxQa EqpPkzO8qM9/tLUcN0PM8v4STuh+dP/8uRCK7ahdI70NrP+1JV2JOPzd/517HK6D BOreknwh6/9C+BCRjNMFPg2ck72jmyb1X4HqtH9VaqrT/q7rcRjgX4l+PcVZIBQ5 mKNjLkza4APVRIweO76RuZzjcdGRIXkGHl4ws3p2unobE5OoaWro17UiIGX+BZeT 9B82hSiwhwWJO0dOhv4aiw03xy2uRjwvW5k3l0S9XA42PpqCN1Ia4bKYPiQ3oD/R 3jrwfqe+j98/XKe4j/3StywlS1J9nvMQ -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:28 2025 by rpki-client