$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft File: DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json) Hash identifier: FCMWCoSy9avKcr180LHOvHqvh0yxU/7NLtKFnjg9Ni4= Subject key identifier: 08:F0:7E:0A:96:5F:86:27:98:7A:AA:6E:15:83:F7:5F:23:04:95:83 Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft Manifest number: 73 Signing time: Mon 11 Aug 2025 06:10:28 +0000 Manifest this update: Mon 11 Aug 2025 06:10:28 +0000 Manifest next update: Mon 18 Aug 2025 06:10:28 +0000 Files and hashes: 1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: N1FmoNe382E6MCIr931uXeMuewvMXpvxBKxFLWR1YXM=) 2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: 4UcuR0Va16pIipTBZBi5kSdFR7fOLDQRz2cgCZTL1W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Validity Not Before: Aug 11 06:10:28 2025 GMT Not After : Aug 18 06:10:28 2025 GMT Subject: CN=68998954-9ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:bc:f0:60:2e:51:4d:96:94:61:14:eb:2f: 2c:d0:86:d9:18:ea:31:c1:c0:94:e0:3c:d4:28:ad: 4b:96:05:73:2b:4f:3b:74:df:94:72:3f:f8:d4:2c: 55:3a:9f:74:bd:48:cc:e8:74:10:a4:5d:12:4e:8c: 78:f8:5d:2e:c4:13:d7:fb:82:ba:17:ff:96:c2:e0: 92:a2:6f:49:11:dd:d6:1b:ae:a0:92:e3:6b:0d:81: 4e:49:dd:66:19:5a:d6:c9:0e:80:74:1a:d4:40:dc: 75:f7:cd:64:68:41:1c:1b:ff:7f:f4:89:d6:f1:8c: 60:bc:53:a4:ab:24:d6:3f:36:a5:54:87:9e:34:44: e3:f2:1d:39:89:00:5f:14:50:3f:29:f3:9b:2f:26: 91:99:4d:ca:0d:04:f5:39:67:51:37:5c:04:bb:0a: c8:09:4d:c7:c0:c1:91:e9:67:a1:ae:7e:1c:11:3d: b4:41:55:d6:ba:60:84:b6:5d:2b:ca:6b:10:58:9f: f3:88:cf:86:28:61:4a:e5:e9:62:80:10:3b:e1:5f: 2d:2d:32:fe:75:18:6a:6d:c7:80:61:17:04:9b:e7: ee:25:74:f5:a9:a0:aa:40:d6:98:13:d3:60:82:4c: 8b:5f:0e:b6:3b:eb:52:9c:fe:da:33:8e:28:c5:c7: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:7E:0A:96:5F:86:27:98:7A:AA:6E:15:83:F7:5F:23:04:95:83 X509v3 Authority Key Identifier: keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:94:0b:20:06:13:4f:aa:77:37:05:4d:a8:ac:1f:de:4f:35: 85:17:f6:39:10:0f:5c:de:1a:a6:22:63:9d:73:4e:1c:79:7a: 32:8a:7c:7d:55:a8:08:ee:cc:94:1e:0e:70:b8:ce:53:cf:3e: ca:73:c6:9c:36:bd:0d:4d:55:2a:8a:17:7d:a0:7d:96:e3:b1: a1:cf:8f:b3:30:a7:79:54:21:75:a4:73:4b:e6:c1:89:85:43: 68:a8:5c:fb:be:11:ef:fd:66:4d:92:f8:0c:09:7a:26:43:a1: 84:02:45:d8:39:b0:9d:83:5f:6f:a9:a5:a9:9a:d2:2c:f4:d4: 10:6e:d3:db:26:c9:f4:18:44:79:13:bb:7d:fd:d3:22:f2:18: 4e:31:83:67:64:57:64:43:04:21:e2:91:5b:1d:c5:1e:36:3b: d7:28:cc:3b:9f:7f:25:6b:d8:06:07:84:82:3e:1a:d0:5a:02: 59:ac:6b:93:62:82:af:3d:96:fc:10:d4:e0:6d:20:47:cc:0c: 2d:94:a4:1c:22:14:40:a3:6b:5b:e6:2a:9b:fb:22:36:b7:60: b9:ee:ea:29:0c:e6:a8:1e:4b:14:13:81:9f:6c:42:48:bc:8a: f0:07:07:92:a5:61:f3:4d:ab:5d:28:46:cc:97:f8:2e:64:99: 34:33:37:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTY3MjExMC8GA1UEBRMoMEM2OTcwQ0FCOURGOEU5QkQxMEUxQzNFOTE4OTFBMDlB N0U4OEMyMDAeFw0yNTA4MTEwNjEwMjhaFw0yNTA4MTgwNjEwMjhaMBgxFjAUBgNV BAMTDTY4OTk4OTU0LTlmZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbKbzwYC5RTZaUYRTrLyzQhtkY6jHBwJTgPNQorUuWBXMrTzt035RyP/jULFU6 n3S9SMzodBCkXRJOjHj4XS7EE9f7groX/5bC4JKib0kR3dYbrqCS42sNgU5J3WYZ WtbJDoB0GtRA3HX3zWRoQRwb/3/0idbxjGC8U6SrJNY/NqVUh540ROPyHTmJAF8U UD8p85svJpGZTcoNBPU5Z1E3XAS7CsgJTcfAwZHpZ6GufhwRPbRBVda6YIS2XSvK axBYn/OIz4YoYUrl6WKAEDvhXy0tMv51GGptx4BhFwSb5+4ldPWpoKpA1pgT02CC TItfDrY761Kc/tozjijFx4ZrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCPB+CpZf hieYeqpuFYP3XyMElYMwHwYDVR0jBBgwFoAUDGlwyrnfjpvRDhw+kYkaCafojCAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjcyLzg4QURDQTk4Q0JF RjExRUY5MTY1QzI0NkM0RjlBRTAyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pD QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdsd3lybmZqcHZSRGh3LWtZa2FDYWZvakNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NjcyLzg4QURDQTk4Q0JFRjExRUY5MTY1QzI0NkM0RjlBRTAyL0RHbHd5cm5manB2 UkRody1rWWthQ2Fmb2pDQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABCUCyAGE0+qdzcFTaisH95PNYUX9jkQD1zeGqYiY51zThx5ejKKfH1V qAjuzJQeDnC4zlPPPspzxpw2vQ1NVSqKF32gfZbjsaHPj7Mwp3lUIXWkc0vmwYmF Q2ioXPu+Ee/9Zk2S+AwJeiZDoYQCRdg5sJ2DX2+ppama0iz01BBu09smyfQYRHkT u3390yLyGE4xg2dkV2RDBCHikVsdxR42O9cozDuffyVr2AYHhII+GtBaAlmsa5Ni gq89lvwQ1OBtIEfMDC2UpBwiFECja1vmKpv7Ija3YLnu6ikM5qgeSxQTgZ9sQki8 ivAHB5KlYfNNq10oRsyX+C5kmTQzN8s= -----END CERTIFICATE-----Generated at Mon Aug 11 10:35:16 2025 by rpki-client