$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: FTJK1VnhAkJCkVF6+spL0XC4cSf1xu005PXLLg59p5g= Subject key identifier: 1D:E2:69:B0:47:4E:B8:C4:AD:3F:57:7F:36:70:37:95:B8:A2:16:F4 Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: 0139 Signing time: Mon 11 Aug 2025 04:37:15 +0000 Manifest this update: Mon 11 Aug 2025 04:37:15 +0000 Manifest next update: Mon 18 Aug 2025 04:37:15 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: TutJYuv0ZtdVRu2tOgoUlCjLQLuDQ/U1CU3at6nKSzo=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: ZWPK2ab0Ef3qAN+iabKfnFGe44+77H2KgSLOA0dY0EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Aug 11 04:37:15 2025 GMT Not After : Aug 18 04:37:15 2025 GMT Subject: CN=6899737b-aee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:85:d3:be:ef:32:b4:fd:7d:15:19:a2:0a:b5: 07:e1:60:8d:c7:ae:c6:dd:9e:22:c4:f3:93:ec:d7: cf:fe:e8:e1:8d:bc:44:fd:15:96:f9:23:b8:ca:e8: 5b:81:5e:d1:31:58:93:cd:6f:77:81:eb:f0:25:5f: ed:dc:43:96:39:3c:e9:bb:9c:a3:29:41:47:e7:a4: 5a:d1:a4:c6:77:5e:60:0b:99:27:46:cc:85:7b:6b: 29:73:0c:cb:98:dc:87:a2:2a:6d:ef:41:c3:54:9a: f9:4c:6a:18:c0:5f:7f:66:9f:b5:69:f7:8a:59:d2: 7f:f3:74:e6:1b:8d:da:23:0a:12:8c:87:26:f9:2e: f6:44:6a:83:3c:85:b8:59:9e:dc:35:f2:33:87:0a: ea:db:50:52:60:30:44:7d:c6:9b:b4:17:31:3d:b2: 93:fa:b6:a4:c0:26:f0:5f:e6:0c:cd:68:84:d7:dc: 28:b5:72:71:d8:a0:41:87:20:00:db:d1:4e:b5:e2: 8a:d3:4a:1a:b5:1c:a8:4b:77:5a:ef:ba:fd:41:b6: 30:72:ee:d9:c7:d1:2f:04:da:2f:b4:10:d4:cd:c1: 7e:29:aa:56:28:50:29:c4:22:88:39:52:3e:10:6e: 7f:5f:7e:92:ed:49:58:ed:b8:f3:c4:99:40:86:ee: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:69:B0:47:4E:B8:C4:AD:3F:57:7F:36:70:37:95:B8:A2:16:F4 X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:bc:b9:dc:eb:08:55:2b:2a:dd:9a:32:b4:7d:09:2e:b7:03: 07:e3:ef:4e:58:e2:64:b1:a7:c3:40:ad:30:e6:42:70:0c:44: d8:4d:1d:02:99:34:7a:ca:6c:e6:5a:7e:7e:dd:9c:a9:83:69: 6c:0c:b6:01:02:0f:af:27:6e:dd:94:e4:8a:c3:35:cc:3a:37: 3d:f4:cf:4a:75:3f:32:87:a4:7a:6b:99:c9:75:b8:52:8c:24: 0b:07:d2:17:bf:8d:bc:5c:f4:b8:01:df:53:77:4c:96:af:36: 53:a6:08:2f:d9:57:fe:9d:0c:e6:13:ce:af:1e:b7:1c:38:37: 72:da:47:b6:cc:93:a4:64:9b:4c:2a:ea:db:5b:71:f7:23:35: 51:21:c5:18:38:e2:ee:e1:bd:eb:fd:1d:b6:1a:bb:63:52:fc: b0:bb:b5:9f:6d:41:4e:c5:4c:f7:cf:f3:1b:de:57:80:ab:35: 1e:0a:6b:60:8a:b0:3a:9c:fe:8b:6a:27:72:a9:48:0b:07:71: 73:04:d8:1f:df:48:03:9f:72:57:1a:49:d4:51:8c:6b:91:02: 17:a9:d4:d5:11:c3:fc:ed:cd:86:00:e9:82:18:f0:ed:66:cc: 4b:dd:cb:cd:e7:66:b7:1c:aa:f2:9a:8a:b6:9d:2c:03:65:13: 80:1c:5b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUwODExMDQzNzE1WhcNMjUwODE4MDQzNzE1WjAYMRYwFAYD VQQDEw02ODk5NzM3Yi1hZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IXTvu8ytP19FRmiCrUH4WCNx67G3Z4ixPOT7NfP/ujhjbxE/RWW+SO4yuhb gV7RMViTzW93gevwJV/t3EOWOTzpu5yjKUFH56Ra0aTGd15gC5knRsyFe2spcwzL mNyHoipt70HDVJr5TGoYwF9/Zp+1afeKWdJ/83TmG43aIwoSjIcm+S72RGqDPIW4 WZ7cNfIzhwrq21BSYDBEfcabtBcxPbKT+rakwCbwX+YMzWiE19wotXJx2KBBhyAA 29FOteKK00oatRyoS3da77r9QbYwcu7Zx9EvBNovtBDUzcF+KapWKFApxCKIOVI+ EG5/X36S7UlY7bjzxJlAhu6ZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3iabBH TrjErT9XfzZwN5W4ohb0MB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhvLnc6whVKyrdmjK0fQkutwMH4+9OWOJksafDQK0w5kJwDETYTR0C mTR6ymzmWn5+3Zypg2lsDLYBAg+vJ27dlOSKwzXMOjc99M9KdT8yh6R6a5nJdbhS jCQLB9IXv428XPS4Ad9Td0yWrzZTpggv2Vf+nQzmE86vHrccODdy2ke2zJOkZJtM KurbW3H3IzVRIcUYOOLu4b3r/R22GrtjUvywu7WfbUFOxUz3z/Mb3leAqzUeCmtg irA6nP6LaidyqUgLB3FzBNgf30gDn3JXGknUUYxrkQIXqdTVEcP87c2GAOmCGPDt ZsxL3cvN52a3HKrymoq2nSwDZROAHFss -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:37 2025 by rpki-client