$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: 8L1535+8KFszrMKW351Ko61lR1T6QTIFvmAIDq+HqL0= Subject key identifier: CD:E7:C3:40:84:E4:FF:2D:6B:87:02:E6:E7:68:C5:A6:4A:F7:75:74 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 1152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 1148 Signing time: Sat 14 Jun 2025 17:11:44 +0000 Manifest this update: Sat 14 Jun 2025 17:11:43 +0000 Manifest next update: Sat 21 Jun 2025 17:11:43 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: KvhFUc6rom3E0A1vy22poDl71KuSwB9ehW+0yuS27+M=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4434 (0x1152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Jun 14 17:11:43 2025 GMT Not After : Jun 21 17:11:43 2025 GMT Subject: CN=684dad4f-7356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:b5:62:c2:ad:31:0e:1b:a2:54:d1:a2:60: 7c:f5:5b:13:66:c3:fa:d8:3b:6f:e6:c3:67:f4:d3: 22:6e:f1:20:da:89:d0:e4:1a:e0:68:d7:be:67:55: cc:93:20:a9:95:c0:fd:4e:61:22:94:03:bc:22:59: 2f:c0:eb:b1:4b:eb:ae:78:ac:1c:d4:5a:24:b3:03: 24:40:91:c4:4e:2a:80:49:d2:f8:47:e4:91:f8:f0: 2d:7c:84:ea:51:f6:58:ca:a7:45:79:04:49:07:38: 95:ad:81:06:7c:50:b2:6d:3e:b7:81:c8:00:7f:b0: 5f:32:3b:9b:de:1a:4e:18:54:28:9b:da:b4:06:fa: 66:72:2c:2e:83:3a:c1:4a:a6:06:e3:2c:fc:2f:80: bd:e8:6a:dc:22:bd:c7:fa:65:71:83:dd:d0:1f:f0: 09:e3:57:67:55:1a:b4:13:16:8b:10:e2:61:5f:d3: 98:bd:54:f7:b4:d1:b5:d8:33:7a:3e:04:8a:cb:f9: cd:36:80:e5:89:56:0a:dc:0e:f5:2a:c1:0c:6b:80: 26:b5:d3:d2:ff:3f:0e:72:a1:8f:dd:fa:28:6c:26: 55:6b:b3:8d:ea:4a:5a:ac:d3:d5:3c:5e:38:88:b1: 3c:67:3d:3d:15:d1:bb:5f:88:a9:e5:c5:fa:52:f9: ab:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E7:C3:40:84:E4:FF:2D:6B:87:02:E6:E7:68:C5:A6:4A:F7:75:74 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9e:bb:24:e6:69:d8:54:db:18:f2:ae:4a:b1:0d:14:95:be: 30:a2:bc:1e:8b:7f:d2:4a:16:5a:27:8d:db:83:e6:0b:6c:23: a5:ed:18:e4:bb:0e:e4:32:93:4d:2d:ca:fa:78:75:75:cd:46: 65:2b:c8:0d:51:72:b0:95:f6:2a:dc:76:14:e3:b6:30:09:c9: b8:4c:d1:d1:e8:87:2f:93:12:29:d7:60:b5:1e:20:ae:12:eb: 36:e6:de:10:36:1a:8c:e9:93:49:7b:bf:60:54:23:f4:d1:d0: e2:d2:5f:a0:5d:b1:9b:43:c5:bf:44:b5:5f:f2:28:4c:c9:c2: 26:a9:9d:99:18:ea:00:ad:3f:42:20:80:c4:25:fb:1e:9a:5d: fc:57:4c:05:e8:e8:42:fc:43:ce:9d:37:cf:68:7a:1c:05:b4: 6c:42:42:80:19:42:c0:b6:6a:a3:f4:97:19:d0:e8:80:93:5d: e5:7a:d6:1b:0c:45:cb:98:fb:7f:17:60:f6:93:0d:a5:95:cd: dc:eb:4c:8b:7a:7f:f4:0b:4c:8f:b8:e6:ee:e9:3c:31:86:c3: 62:fa:95:16:11:8a:ed:25:07:0b:37:98:98:70:e8:3e:ad:2a: 27:6b:83:43:91:35:6f:75:12:4b:d7:17:8c:c7:c3:7a:45:20: 66:26:86:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjUwNjE0MTcxMTQzWhcNMjUwNjIxMTcxMTQzWjAYMRYwFAYD VQQDEw02ODRkYWQ0Zi03MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45W1YsKtMQ4bolTRomB89VsTZsP62Dtv5sNn9NMibvEg2onQ5BrgaNe+Z1XM kyCplcD9TmEilAO8IlkvwOuxS+uueKwc1FokswMkQJHETiqASdL4R+SR+PAtfITq UfZYyqdFeQRJBziVrYEGfFCybT63gcgAf7BfMjub3hpOGFQom9q0BvpmciwugzrB SqYG4yz8L4C96GrcIr3H+mVxg93QH/AJ41dnVRq0ExaLEOJhX9OYvVT3tNG12DN6 PgSKy/nNNoDliVYK3A71KsEMa4AmtdPS/z8OcqGP3foobCZVa7ON6kparNPVPF44 iLE8Zz09FdG7X4ip5cX6UvmrpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3nw0CE 5P8ta4cC5udoxaZK93V0MB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrnrsk5mnYVNsY8q5KsQ0Ulb4worwei3/SShZaJ43bg+YLbCOl7Rjk uw7kMpNNLcr6eHV1zUZlK8gNUXKwlfYq3HYU47YwCcm4TNHR6IcvkxIp12C1HiCu Eus25t4QNhqM6ZNJe79gVCP00dDi0l+gXbGbQ8W/RLVf8ihMycImqZ2ZGOoArT9C IIDEJfseml38V0wF6OhC/EPOnTfPaHocBbRsQkKAGULAtmqj9JcZ0OiAk13letYb DEXLmPt/F2D2kw2llc3c60yLen/0C0yPuObu6TwxhsNi+pUWEYrtJQcLN5iYcOg+ rSona4NDkTVvdRJL1xeMx8N6RSBmJobZ -----END CERTIFICATE-----Generated at Sun Jun 15 10:10:26 2025 by rpki-client