$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json) Hash identifier: O9NX5SnUDuGy4Eirqb6pKGlY04pBltsHqEIqnGKTKMA= Subject key identifier: 1C:DB:95:15:D0:41:F8:94:A6:44:AE:37:4A:8B:B4:56:AE:39:C0:65 Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft Manifest number: 0E Signing time: Thu 19 Jun 2025 07:27:28 +0000 Manifest this update: Thu 19 Jun 2025 07:27:28 +0000 Manifest next update: Thu 26 Jun 2025 07:27:28 +0000 Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: Mk3tXce279j3nEv5pooqkO+MwJzNTuGCZHuWk/ap3v8=) 2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: k8LJciNO3nbjiZjsCJ8G57U38keqVi40DfjRW/V+QTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Jun 19 07:27:28 2025 GMT Not After : Jun 26 07:27:28 2025 GMT Subject: CN=6853bbe0-7f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:51:72:42:7e:12:7e:b9:6d:c0:82:23:1f: 3d:f0:f5:bf:92:e7:44:7f:70:ab:2c:7b:d3:80:02: d4:e7:8a:12:a6:fc:7d:83:c0:6e:44:3e:34:09:93: c5:1e:dc:8b:eb:a9:05:d4:91:24:ad:87:fb:25:57: ac:cd:f7:35:98:39:2b:67:7d:b4:a9:34:d1:eb:5e: 82:5d:04:60:0a:ce:36:90:64:cb:e9:25:9d:cc:fc: 40:43:8e:ba:8a:e4:4a:a7:9e:04:7f:09:83:f2:10: c0:c3:9e:ad:dc:0c:79:3a:50:79:b7:e4:46:92:e6: 87:52:16:5d:60:d3:27:e5:07:0e:a0:69:2b:f6:4e: 63:3d:1a:52:5b:e4:72:8d:dc:bc:89:86:5c:08:bf: 10:c4:0c:52:19:31:7b:db:b3:34:fa:bd:1d:d6:45: 52:c4:e0:89:3f:11:34:d0:b7:86:f8:8a:60:89:01: 25:c1:50:93:86:e1:f1:f1:83:51:bf:a8:f9:af:9c: ad:f0:a8:49:2a:f5:49:67:a1:be:4d:e8:61:a1:ca: 0e:ee:98:ee:2c:7f:8d:2d:20:6e:60:af:b1:62:fc: d0:4d:c1:21:d0:ff:25:b1:a4:a4:de:f2:cf:b4:e2: ff:a3:7c:39:70:f2:cd:dd:7c:f7:5b:31:9d:b2:c2: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DB:95:15:D0:41:F8:94:A6:44:AE:37:4A:8B:B4:56:AE:39:C0:65 X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3d:8b:02:54:c0:a9:4e:7b:01:e9:d0:cb:80:9e:7e:9b:26: 0e:d3:6d:39:5f:17:7f:2a:42:9f:a9:a5:81:c9:23:74:2c:8c: a2:40:bf:92:e2:7b:32:cd:d1:e2:8d:cf:f4:2b:a6:b0:a6:5d: be:b4:41:41:e5:72:fa:8a:7e:9d:49:a3:3a:8e:1c:1e:4b:8b: 05:e0:ea:05:01:56:03:10:a5:0e:6a:1f:69:a5:66:df:8d:28: 10:49:1d:58:e0:6e:8a:b3:8d:12:28:97:62:fa:3b:53:9f:54: 27:f8:96:0c:3d:1c:af:e5:2c:48:01:78:82:64:94:8d:04:83: bd:a7:66:68:c6:33:30:fb:01:a8:2a:2c:c2:56:71:36:17:85: fe:c9:25:9c:2f:53:2d:45:46:3a:de:2f:d6:ca:fe:2b:f4:95: 0e:22:d4:a4:ab:f8:bc:27:56:17:a9:a4:5a:67:4d:9a:9a:cf: a1:e5:76:0a:72:58:9b:f2:83:e1:9f:1f:4d:38:01:3c:ca:a3: 4e:64:92:6d:9d:46:21:53:4f:24:18:b7:56:2c:de:b6:92:90: bd:ff:48:66:bc:15:97:a4:41:22:53:ee:17:f0:5b:5b:33:92: 18:a2:5a:3e:4e:eb:77:f4:a4:c9:63:6f:ca:7e:e3:46:bb:10: 60:5b:6a:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMEM2ODU4MjI4QzMwMTc0ODJCREM3RjM5ODFFODk4Qjk1 NkRBQTAyOTAeFw0yNTA2MTkwNzI3MjhaFw0yNTA2MjYwNzI3MjhaMBgxFjAUBgNV BAMTDTY4NTNiYmUwLTdmNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Z1FyQn4SfrltwIIjHz3w9b+S50R/cKsse9OAAtTnihKm/H2DwG5EPjQJk8Ue 3IvrqQXUkSSth/slV6zN9zWYOStnfbSpNNHrXoJdBGAKzjaQZMvpJZ3M/EBDjrqK 5EqnngR/CYPyEMDDnq3cDHk6UHm35EaS5odSFl1g0yflBw6gaSv2TmM9GlJb5HKN 3LyJhlwIvxDEDFIZMXvbszT6vR3WRVLE4Ik/ETTQt4b4imCJASXBUJOG4fHxg1G/ qPmvnK3wqEkq9Ulnob5N6GGhyg7umO4sf40tIG5gr7Fi/NBNwSHQ/yWxpKTe8s+0 4v+jfDlw8s3dfPdbMZ2ywi/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHNuVFdBB +JSmRK43Sou0Vq45wGUwHwYDVR0jBBgwFoAUDGhYIowwF0gr3H85geiYuVbaoCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzY3QzdBNDJBM0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9D ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdoWUlvd3dGMGdyM0g4NWdlaVl1VmJhb0NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzY3QzdBNDJBM0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0RHaFlJb3d3RjBn cjNIODVnZWlZdVZiYW9Day5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJU9iwJUwKlOewHp0MuAnn6bJg7TbTlfF38qQp+ppYHJI3QsjKJAv5Li ezLN0eKNz/QrprCmXb60QUHlcvqKfp1JozqOHB5LiwXg6gUBVgMQpQ5qH2mlZt+N KBBJHVjgboqzjRIol2L6O1OfVCf4lgw9HK/lLEgBeIJklI0Eg72nZmjGMzD7Aagq LMJWcTYXhf7JJZwvUy1FRjreL9bK/iv0lQ4i1KSr+LwnVheppFpnTZqaz6Hldgpy WJvyg+GfH004ATzKo05kkm2dRiFTTyQYt1Ys3raSkL3/SGa8FZekQSJT7hfwW1sz khiiWj5O63f0pMljb8p+40a7EGBbar0= -----END CERTIFICATE-----Generated at Fri Jun 20 05:36:41 2025 by rpki-client