$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: aW5qBZUVrxl5z1wJvpPcvZP4nk0rYH4Lp+ELzgTrSYM= Subject key identifier: 2E:53:8D:A6:68:F2:24:75:94:4F:B3:DB:3B:0A:FC:95:86:40:92:F3 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E56 Signing time: Sat 14 Jun 2025 17:40:47 +0000 Manifest this update: Sat 14 Jun 2025 17:40:46 +0000 Manifest next update: Sat 21 Jun 2025 17:40:46 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: DOj8Od1hgDsBRVy95+kHF3nxihi2rJmIr6/OyVzVyUg=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3688 (0xe68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Jun 14 17:40:46 2025 GMT Not After : Jun 21 17:40:46 2025 GMT Subject: CN=684db41f-534d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:8b:5b:a5:b8:89:58:6c:d9:66:ea:86:eb: 70:de:20:a9:c7:98:64:dc:fb:7b:f7:21:20:ef:bf: 67:13:49:ba:f6:b0:36:4d:96:75:60:45:23:39:d5: 6e:b8:d6:9b:5c:6e:1e:b5:a2:7a:ba:e6:6b:66:aa: d0:1c:6f:3d:91:5b:3b:f6:fb:f7:17:50:13:ff:88: e6:0c:20:fc:f3:01:29:d1:e0:cf:d9:e6:1c:33:06: 03:f4:34:54:30:95:34:a4:25:4b:9b:a6:66:35:c9: 86:c5:b7:70:d4:37:58:c0:bd:0d:35:21:73:6f:40: 3f:8d:83:2a:c7:79:29:e2:c4:d4:1e:d8:15:4e:98: a1:2d:a6:1a:04:c8:09:d7:b7:c4:ee:a5:d3:82:dd: 88:a7:50:54:db:64:6b:f1:fb:0c:c0:5c:b2:fe:90: 68:38:ec:af:bd:29:4a:32:4b:e1:65:eb:ec:ff:95: 63:3c:66:08:f6:02:d5:74:bb:c2:f4:3e:bf:4f:3a: c1:ff:40:6e:eb:f1:26:72:a0:a9:18:d5:be:32:15: 8e:ad:6b:07:21:b3:1a:2b:72:be:8b:a3:2a:f0:0a: 45:a6:44:2d:0e:7f:0c:fc:92:d6:12:1c:f1:5a:16: 35:b1:85:64:20:60:48:52:04:ac:1d:d2:15:fd:71: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:53:8D:A6:68:F2:24:75:94:4F:B3:DB:3B:0A:FC:95:86:40:92:F3 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:00:fe:f1:86:e7:3d:df:18:4c:66:77:e7:16:27:ab:bc:8e: 4c:7f:98:da:9d:16:1a:e4:77:2c:b4:1b:67:8a:83:58:10:55: 37:ef:73:d4:cd:44:d6:de:97:80:5b:a2:ef:a1:17:52:b8:e4: 02:9d:96:dd:ef:d1:84:92:8b:67:f1:ba:8c:21:04:c5:9f:a2: 85:2f:c7:e1:41:90:f9:1e:3d:d4:db:dc:9d:22:ba:e8:36:2b: 15:48:40:c6:e7:44:43:f6:20:ae:c0:a9:ec:8e:e4:94:f0:47: 54:f6:6a:96:6e:38:ee:56:01:0a:e4:8d:b2:50:10:46:0c:bb: ac:14:5e:f7:ad:16:00:b9:ce:ac:da:de:58:6b:0b:79:2d:93: 99:17:3f:96:0d:d5:73:fc:1e:eb:d9:30:72:25:aa:89:25:5f: ac:5d:10:b8:b4:94:8e:3a:6e:f0:71:5e:e8:a2:8b:47:5c:4e: 88:3e:e0:7c:ff:ad:14:e9:4b:7d:01:eb:eb:18:da:2f:75:57: e3:83:30:8b:19:b9:ef:51:af:48:a5:2c:8e:a3:6e:a1:f5:b7: 05:11:3d:24:a6:38:f2:59:7a:c0:1d:29:ea:23:b0:89:5c:ab: 59:d4:54:18:ba:38:02:7a:14:0c:c5:f8:58:9c:93:87:61:9e: a6:f0:52:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwNjE0MTc0MDQ2WhcNMjUwNjIxMTc0MDQ2WjAYMRYwFAYD VQQDEw02ODRkYjQxZi01MzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmWLW6W4iVhs2Wbqhutw3iCpx5hk3Pt79yEg779nE0m69rA2TZZ1YEUjOdVu uNabXG4etaJ6uuZrZqrQHG89kVs79vv3F1AT/4jmDCD88wEp0eDP2eYcMwYD9DRU MJU0pCVLm6ZmNcmGxbdw1DdYwL0NNSFzb0A/jYMqx3kp4sTUHtgVTpihLaYaBMgJ 17fE7qXTgt2Ip1BU22Rr8fsMwFyy/pBoOOyvvSlKMkvhZevs/5VjPGYI9gLVdLvC 9D6/TzrB/0Bu6/EmcqCpGNW+MhWOrWsHIbMaK3K+i6Mq8ApFpkQtDn8M/JLWEhzx WhY1sYVkIGBIUgSsHdIV/XEjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5TjaZo 8iR1lE+z2zsK/JWGQJLzMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqAP7xhuc93xhMZnfnFiervI5Mf5janRYa5HcstBtnioNYEFU373PU zUTW3peAW6LvoRdSuOQCnZbd79GEkotn8bqMIQTFn6KFL8fhQZD5Hj3U29ydIrro NisVSEDG50RD9iCuwKnsjuSU8EdU9mqWbjjuVgEK5I2yUBBGDLusFF73rRYAuc6s 2t5Yawt5LZOZFz+WDdVz/B7r2TByJaqJJV+sXRC4tJSOOm7wcV7oootHXE6IPuB8 /60U6Ut9AevrGNovdVfjgzCLGbnvUa9IpSyOo26h9bcFET0kpjjyWXrAHSnqI7CJ XKtZ1FQYujgCehQMxfhYnJOHYZ6m8FKO -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:01 2025 by rpki-client