$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: XlX3SkchsXdb6sHh16F81Io/Uxuqc1WlUQ/Tbf5+t7o= Subject key identifier: EA:DC:92:AF:32:2B:AB:3B:E3:B8:64:DD:76:F2:A4:BD:29:FF:C7:16 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E73 Signing time: Sun 10 Aug 2025 17:45:19 +0000 Manifest this update: Sun 10 Aug 2025 17:45:19 +0000 Manifest next update: Sun 17 Aug 2025 17:45:19 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: 0Gp7zRUtuR+nAN3tG9Udf7eYxUmrx3a3bfvjMGexuak=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Aug 10 17:45:19 2025 GMT Not After : Aug 17 17:45:19 2025 GMT Subject: CN=6898daaf-3eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:52:cc:fb:d0:48:84:9d:c9:6d:12:93:e8: 2f:95:a9:08:8e:3f:a5:27:99:93:89:7b:78:8b:26: 85:94:65:df:be:4d:9c:59:e2:e3:7a:a3:db:a7:11: f5:54:ae:66:24:22:bc:0e:d4:a3:d0:7e:58:64:6f: 08:bf:4e:b7:72:93:c5:17:c2:5d:17:5e:6f:7d:57: 97:6b:63:21:21:21:b6:92:8b:97:46:46:b7:a1:4a: bb:ef:f5:ec:54:59:04:41:bb:ca:bf:67:c4:f9:d3: a7:25:aa:c0:00:57:04:64:39:0c:0c:60:9b:8e:47: 37:a8:ac:e5:c5:00:c9:33:f3:40:5d:1a:93:50:86: a6:7f:b3:98:40:cc:4d:6e:65:68:68:1d:8e:ad:d6: 82:c6:79:b2:a0:9f:87:29:ba:ee:e0:1c:4d:b8:69: 42:e4:fe:95:ea:88:b1:20:48:08:b2:79:d0:b7:57: 3f:a9:d1:2b:8e:f5:c1:8e:0e:40:83:ae:81:b1:74: 25:0d:64:07:0b:f0:ff:4e:86:7f:6f:27:03:88:07: 3e:51:86:e8:d5:88:c2:21:ea:10:97:5d:b5:9f:54: d8:35:5d:e7:90:21:69:a8:9a:9d:0b:56:c6:6c:28: 7a:56:77:cf:89:46:38:72:1d:1e:7c:7d:01:d8:9e: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:92:AF:32:2B:AB:3B:E3:B8:64:DD:76:F2:A4:BD:29:FF:C7:16 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5c:6b:a6:41:ce:67:86:f0:e4:59:3c:ce:ea:53:49:13:06: bf:e1:a9:9f:43:40:9f:2c:cc:45:72:53:49:0b:58:21:1b:16: 66:6a:44:d3:64:4f:9d:ce:b0:09:4a:37:f3:ca:48:f9:9c:17: 26:c8:d7:ee:a3:5f:46:29:88:c9:00:ed:73:f0:b5:e9:43:29: 5f:27:ef:36:48:15:df:d8:9a:c0:a4:a2:0f:c6:fe:a3:d4:62: a4:cd:72:b4:fb:82:23:db:0f:81:a2:4f:f4:ad:6a:64:c6:14: d0:c5:73:33:c9:a7:01:b7:9c:06:ce:a2:0e:70:16:d0:ab:e8: c6:4b:bc:8e:d1:d8:da:27:0a:8b:a0:dc:8c:0f:58:43:81:a1: 1c:23:80:2a:6c:30:6b:a0:d6:31:b5:ba:b0:56:ad:a1:d1:ea: ef:66:c3:d2:5d:7e:10:a6:0d:b9:61:61:6a:6f:c8:dc:21:20: 21:f2:44:18:f7:b5:3f:95:5b:69:d6:9c:4d:76:22:a8:1c:b5: d6:b2:e0:18:f8:39:fa:55:92:73:93:54:fd:9f:51:a0:dd:ed: 9d:c7:23:8e:85:77:f5:d0:f2:14:a9:36:84:84:a4:50:87:77: 73:5e:fe:1f:60:31:d6:57:40:98:c9:6e:e9:a6:2f:27:36:47: 46:eb:ad:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwODEwMTc0NTE5WhcNMjUwODE3MTc0NTE5WjAYMRYwFAYD VQQDEw02ODk4ZGFhZi0zZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygdSzPvQSISdyW0Sk+gvlakIjj+lJ5mTiXt4iyaFlGXfvk2cWeLjeqPbpxH1 VK5mJCK8DtSj0H5YZG8Iv063cpPFF8JdF15vfVeXa2MhISG2kouXRka3oUq77/Xs VFkEQbvKv2fE+dOnJarAAFcEZDkMDGCbjkc3qKzlxQDJM/NAXRqTUIamf7OYQMxN bmVoaB2OrdaCxnmyoJ+HKbru4BxNuGlC5P6V6oixIEgIsnnQt1c/qdErjvXBjg5A g66BsXQlDWQHC/D/ToZ/bycDiAc+UYbo1YjCIeoQl121n1TYNV3nkCFpqJqdC1bG bCh6VnfPiUY4ch0efH0B2J4niQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrckq8y K6s747hk3XbypL0p/8cWMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOXGumQc5nhvDkWTzO6lNJEwa/4amfQ0CfLMxFclNJC1ghGxZmakTT ZE+dzrAJSjfzykj5nBcmyNfuo19GKYjJAO1z8LXpQylfJ+82SBXf2JrApKIPxv6j 1GKkzXK0+4Ij2w+Bok/0rWpkxhTQxXMzyacBt5wGzqIOcBbQq+jGS7yO0djaJwqL oNyMD1hDgaEcI4AqbDBroNYxtbqwVq2h0ervZsPSXX4Qpg25YWFqb8jcISAh8kQY 97U/lVtp1pxNdiKoHLXWsuAY+Dn6VZJzk1T9n1Gg3e2dxyOOhXf10PIUqTaEhKRQ h3dzXv4fYDHWV0CYyW7ppi8nNkdG661b -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:06 2025 by rpki-client