$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: 219b4ktFM5MH/tpnXjc4FmPT2ywJamZUtvKJFNz9bMw= Subject key identifier: 7F:F9:E6:94:03:D6:55:A6:48:7C:C2:CB:09:A6:8F:6E:00:F3:39:9E Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 07C4 Signing time: Fri 08 Aug 2025 21:32:21 +0000 Manifest this update: Fri 08 Aug 2025 21:32:20 +0000 Manifest next update: Fri 15 Aug 2025 21:32:20 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: OYBTE+1iH89T6MZwuO28oNUlK3yWzhItU1Irz0qJxDw=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: Aug 8 21:32:20 2025 GMT Not After : Aug 15 21:32:20 2025 GMT Subject: CN=68966ce4-16b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:d6:c9:65:72:35:5d:a4:47:39:39:d1:1e: 05:2d:ef:77:43:85:72:75:3e:f2:c3:0d:2a:f2:f6: f3:7c:64:2c:3d:09:da:52:a1:1c:43:39:8b:f6:df: de:9a:9b:8d:d1:b9:7f:a8:42:83:5e:32:06:1f:5e: c5:07:a0:4f:d5:bf:98:e3:bc:3f:fe:d7:30:3a:b5: b5:c6:2a:7e:54:1b:43:62:d2:55:74:e4:12:54:e2: f5:94:2d:03:cf:dd:d6:59:02:26:5b:2a:24:bc:55: 39:c6:aa:de:17:ee:4a:d8:df:6c:15:f4:6e:03:d5: 77:0e:da:8c:ae:8b:ce:d1:a8:19:46:0e:2d:39:79: 30:7d:62:70:74:83:29:26:28:7b:54:03:d8:31:aa: a2:77:3b:38:37:e2:79:64:4c:a4:96:78:87:f2:55: c0:58:fe:cc:ce:30:7c:be:ba:d2:0e:32:9f:05:92: 6d:cd:b6:f4:24:79:fd:c8:a0:dd:fa:3e:64:86:c0: a4:0b:7d:8c:a4:ed:2c:64:05:82:b5:13:4f:da:5e: b2:87:e0:28:d7:b9:d0:03:b4:5a:e3:ed:b3:30:ba: 00:e6:9f:a2:65:19:c3:37:64:41:cc:68:68:20:2a: 9b:c9:73:17:c1:7e:6b:69:4d:4d:4d:70:6d:6a:ef: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F9:E6:94:03:D6:55:A6:48:7C:C2:CB:09:A6:8F:6E:00:F3:39:9E X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:37:0e:81:9f:68:b4:11:df:c9:a1:b3:5d:a6:b1:94:7f:97: 8b:0c:a6:ba:61:5a:aa:9e:62:f5:95:67:85:2b:f5:bf:d9:9c: 3a:74:03:08:52:34:a1:d8:5f:75:a8:05:2f:dc:5b:7c:7a:01: 73:e2:25:0a:a1:0e:76:a7:d7:33:8e:d6:20:e6:f4:ce:87:c5: 72:6e:6d:9a:65:0a:7b:1d:a6:4d:78:1e:67:66:62:12:9a:56: a1:0e:53:65:ad:b6:2c:18:82:14:0c:65:2a:ef:6f:d4:91:9a: cb:f0:8b:a0:fb:d2:41:21:7b:d1:17:00:6c:ac:db:ba:bf:47: 76:02:30:b3:35:84:14:3f:34:df:3a:85:9f:4a:81:89:53:3e: 85:e0:ce:4c:11:1b:f0:5c:f0:03:7c:03:08:b0:2f:2e:72:e5: 6c:33:c7:3f:55:e5:6d:96:28:93:9f:a4:ec:88:14:c1:8f:26: 0e:ef:9d:c0:91:c9:82:e2:64:4f:98:18:97:95:5e:8b:72:b6: d8:59:8f:5d:5f:63:1c:5f:57:38:1a:13:7b:a5:2b:ef:e7:23: ed:7c:ac:84:86:09:ae:ee:98:f2:a0:bb:76:52:66:90:37:e6: cc:5b:f6:10:bb:b5:61:fc:aa:95:b1:b7:97:30:12:0b:ec:49: ff:d1:e7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjUwODA4MjEzMjIwWhcNMjUwODE1MjEzMjIwWjAYMRYwFAYD VQQDEw02ODk2NmNlNC0xNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CPWyWVyNV2kRzk50R4FLe93Q4VydT7yww0q8vbzfGQsPQnaUqEcQzmL9t/e mpuN0bl/qEKDXjIGH17FB6BP1b+Y47w//tcwOrW1xip+VBtDYtJVdOQSVOL1lC0D z93WWQImWyokvFU5xqreF+5K2N9sFfRuA9V3DtqMrovO0agZRg4tOXkwfWJwdIMp Jih7VAPYMaqidzs4N+J5ZEyklniH8lXAWP7MzjB8vrrSDjKfBZJtzbb0JHn9yKDd +j5khsCkC32MpO0sZAWCtRNP2l6yh+Ao17nQA7Ra4+2zMLoA5p+iZRnDN2RBzGho ICqbyXMXwX5raU1NTXBtau8/vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/55pQD 1lWmSHzCywmmj24A8zmeMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJNw6Bn2i0Ed/JobNdprGUf5eLDKa6YVqqnmL1lWeFK/W/2Zw6dAMI UjSh2F91qAUv3Ft8egFz4iUKoQ52p9czjtYg5vTOh8Vybm2aZQp7HaZNeB5nZmIS mlahDlNlrbYsGIIUDGUq72/UkZrL8Iug+9JBIXvRFwBsrNu6v0d2AjCzNYQUPzTf OoWfSoGJUz6F4M5MERvwXPADfAMIsC8ucuVsM8c/VeVtliiTn6TsiBTBjyYO753A kcmC4mRPmBiXlV6LcrbYWY9dX2McX1c4GhN7pSvv5yPtfKyEhgmu7pjyoLt2UmaQ N+bMW/YQu7Vh/KqVsbeXMBIL7En/0edf -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:26 2025 by rpki-client