$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: eVSvKI5NHnoLqfc1yr3EdP6w8DtYAtu1h2zHhkTGQSs= Subject key identifier: 40:6F:FE:DF:A3:B4:EA:E4:D0:BD:7B:78:DD:1C:C8:07:2C:C7:C5:5A Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 106E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1059 Signing time: Sun 10 Aug 2025 17:24:44 +0000 Manifest this update: Sun 10 Aug 2025 17:24:44 +0000 Manifest next update: Sun 17 Aug 2025 17:24:44 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: UjhhTDW+z3zIFgWBpdwzBEH705SqDIJHOmxXEeCYDrg=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Aug 10 17:24:44 2025 GMT Not After : Aug 17 17:24:44 2025 GMT Subject: CN=6898d5dc-ade5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:b0:85:a0:f6:31:eb:72:d0:c5:fd:41:c8: c4:66:76:db:7c:3e:42:f5:91:ff:35:95:3f:c7:3d: 09:26:ab:2e:c9:3e:31:63:f1:04:3f:38:1e:26:1b: b9:fe:61:32:c9:2a:78:a4:6c:38:02:48:cd:59:aa: 0c:f9:00:93:33:0f:51:1f:d7:6a:90:c3:97:8c:0e: 8d:c7:3e:75:28:80:f3:9a:7f:3c:de:9c:e5:d1:f7: 90:1f:62:40:12:9f:01:ac:8f:69:ea:6c:d5:77:cb: 60:d8:2d:a0:bf:c7:6f:59:96:b7:14:cb:ee:af:db: c8:67:a6:f8:a0:fb:cd:4e:77:e5:5f:62:aa:5b:02: 54:00:33:a5:21:ed:96:b7:73:88:2e:3d:b2:62:b2: 5e:80:32:d3:2d:48:74:23:24:8b:72:44:bf:0d:b5: ed:f1:2d:40:08:15:28:e9:04:ce:52:3a:76:6c:59: 16:e2:21:16:a3:d0:eb:d1:06:08:17:d2:ce:25:25: 08:77:13:00:0b:ab:81:f4:ca:2e:4f:57:4e:f8:32: 61:a8:91:41:8f:dd:d9:82:a9:3a:dc:28:19:e3:44: 89:03:b3:50:1b:73:c6:c1:2e:0e:b5:7f:c5:58:8f: f5:e0:ae:01:d9:f6:ca:9d:7c:ee:cb:6c:56:97:39: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6F:FE:DF:A3:B4:EA:E4:D0:BD:7B:78:DD:1C:C8:07:2C:C7:C5:5A X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:03:e0:ba:bb:c2:b5:eb:47:9c:86:ae:93:81:12:0d:38:a3: 80:44:53:43:06:ce:8d:ff:73:74:50:df:b2:7d:76:d4:52:e6: d1:c8:f7:d1:0c:c3:39:14:ae:c8:09:b0:69:6f:4d:10:1c:b6: 88:23:45:62:01:44:99:42:db:78:30:89:32:51:8b:88:40:92: bc:3f:e0:17:84:60:21:1a:a8:5c:01:7d:14:fe:6c:dd:a5:17: 59:d2:26:b8:af:f3:12:48:2a:15:9e:0b:eb:5e:f7:f2:17:3b: 10:ea:d1:a9:a1:a5:b1:5b:e2:e5:92:a4:23:fc:1f:ac:37:9b: 99:16:c0:07:dc:09:11:d2:ce:c3:45:0d:10:9f:3a:eb:56:d0: 83:76:7e:2c:6b:44:fe:c2:dd:4c:4c:be:f9:0c:19:8b:59:40: 4b:f2:94:f4:97:a2:5a:a5:4d:06:5c:a1:96:b1:19:c6:68:04: 97:84:b8:8b:17:20:06:89:71:6d:44:cd:8c:52:c0:24:b1:8c: 51:05:5c:9f:2a:42:42:fb:83:26:dc:dd:46:1b:95:7f:94:a4: e0:e2:27:08:16:59:9d:bf:a2:56:9b:87:21:26:c8:17:cb:72: 65:77:59:f4:ea:17:01:f2:36:f9:0c:3e:ad:5b:a3:c7:ac:54: 4d:51:a5:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwODEwMTcyNDQ0WhcNMjUwODE3MTcyNDQ0WjAYMRYwFAYD VQQDEw02ODk4ZDVkYy1hZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7iwhaD2Mety0MX9QcjEZnbbfD5C9ZH/NZU/xz0JJqsuyT4xY/EEPzgeJhu5 /mEyySp4pGw4AkjNWaoM+QCTMw9RH9dqkMOXjA6Nxz51KIDzmn883pzl0feQH2JA Ep8BrI9p6mzVd8tg2C2gv8dvWZa3FMvur9vIZ6b4oPvNTnflX2KqWwJUADOlIe2W t3OILj2yYrJegDLTLUh0IySLckS/DbXt8S1ACBUo6QTOUjp2bFkW4iEWo9Dr0QYI F9LOJSUIdxMAC6uB9MouT1dO+DJhqJFBj93Zgqk63CgZ40SJA7NQG3PGwS4OtX/F WI/14K4B2fbKnXzuy2xWlzlDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBv/t+j tOrk0L17eN0cyAcsx8VaMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFA+C6u8K160echq6TgRINOKOARFNDBs6N/3N0UN+yfXbUUubRyPfR DMM5FK7ICbBpb00QHLaII0ViAUSZQtt4MIkyUYuIQJK8P+AXhGAhGqhcAX0U/mzd pRdZ0ia4r/MSSCoVngvrXvfyFzsQ6tGpoaWxW+LlkqQj/B+sN5uZFsAH3AkR0s7D RQ0QnzrrVtCDdn4sa0T+wt1MTL75DBmLWUBL8pT0l6JapU0GXKGWsRnGaASXhLiL FyAGiXFtRM2MUsAksYxRBVyfKkJC+4Mm3N1GG5V/lKTg4icIFlmdv6JWm4chJsgX y3Jld1n06hcB8jb5DD6tW6PHrFRNUaV3 -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:33 2025 by rpki-client