$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: LAT5Q9jvzW0Z9fzLL+MPEfAkrlckcKPUrZxTjneObik= Subject key identifier: 78:A1:51:96:FE:15:EF:F4:35:77:95:EF:FB:8B:45:B7:AA:C4:40:76 Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 07A8 Signing time: Sat 14 Jun 2025 21:00:48 +0000 Manifest this update: Sat 14 Jun 2025 21:00:47 +0000 Manifest next update: Sat 21 Jun 2025 21:00:47 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: tTrevQACOGBSiDt121X9Nl/AceDe5EoAO/zBudAq09k=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: Jun 14 21:00:47 2025 GMT Not After : Jun 21 21:00:47 2025 GMT Subject: CN=684de2ff-6ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:7f:1f:8e:a3:5b:cd:5f:88:4a:d4:5c:68: 20:fd:f5:7d:50:62:7a:ef:36:99:c9:3f:d3:ae:34: aa:69:bd:ad:0e:5d:cd:16:92:fe:ce:82:30:bc:9c: 54:cc:f5:b1:72:aa:80:1c:6e:c9:ff:40:23:fa:d8: 23:54:9a:03:e1:07:18:d2:34:17:36:c7:b3:c1:85: 4f:60:3c:52:2a:a2:8e:bd:ab:c6:1d:69:77:8f:b9: 55:9f:16:f9:9d:ae:3f:e4:40:a8:cb:6f:3d:02:2a: 69:20:8f:b1:27:48:75:67:83:4b:84:22:30:7a:ad: f7:f4:8c:cb:96:b3:ca:13:b0:8f:8a:5c:0f:8b:b7: 88:6f:e1:8c:cb:3c:17:a9:12:fd:5f:0a:e5:74:80: db:62:d5:0e:b2:3a:ca:ac:f0:91:68:12:7c:85:57: 82:23:f4:e0:9b:f0:43:a8:7e:c4:63:bc:bd:b5:a2: 96:4a:93:ef:a9:73:e2:32:80:10:21:ca:38:c5:8d: d0:8e:05:f9:53:c5:90:24:14:a2:f3:8f:c4:7f:29: 99:d2:28:56:49:7f:fd:75:a4:4c:44:71:77:a7:48: 81:ef:6e:dd:e8:e5:e8:60:9d:e9:88:1c:02:93:3b: b0:a9:9d:99:70:86:72:82:69:69:9f:79:c8:5f:41: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A1:51:96:FE:15:EF:F4:35:77:95:EF:FB:8B:45:B7:AA:C4:40:76 X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:45:b2:9a:63:ce:fd:75:d9:31:f3:f4:91:a7:a9:fc:84:f5: db:e3:72:53:b9:9d:1d:b6:0f:ad:79:c0:48:45:14:15:5a:d6: 57:08:e3:7b:d0:98:3f:12:9a:fe:b6:71:3b:01:7a:36:6c:45: 22:43:47:05:4a:be:b3:67:c5:6b:cd:2f:9c:08:a9:45:d0:fa: 22:be:f8:dc:07:aa:22:df:37:b7:b8:77:ec:26:74:10:91:bc: 25:90:bb:b9:fa:95:14:03:42:6b:52:70:b1:35:b4:7f:fe:ef: ab:43:4d:76:c9:a5:93:d9:34:be:67:1e:5d:fa:83:a6:d3:29: 20:dd:15:8e:13:22:03:c0:18:dd:90:a8:a6:79:4a:51:29:d3: da:34:b2:f6:ae:fd:c1:38:7e:0f:b9:ef:28:68:5e:90:19:e2: 98:00:0e:b4:46:d3:b1:96:94:91:d0:bf:99:b2:07:03:b0:9a: 08:d6:8b:c9:b3:65:ff:da:cd:ba:a2:0c:12:31:a1:af:49:f1: e2:d7:86:c8:ec:9a:99:b6:c2:d6:d8:c4:da:8b:19:06:33:7c: b6:8f:85:ad:ef:89:21:d8:e4:86:64:7b:17:c8:5c:d2:33:c2: eb:11:70:c8:5e:94:90:52:47:d1:06:7c:53:2f:9b:6a:5f:1d: b5:77:0a:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjUwNjE0MjEwMDQ3WhcNMjUwNjIxMjEwMDQ3WjAYMRYwFAYD VQQDEw02ODRkZTJmZi02ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R1/H46jW81fiErUXGgg/fV9UGJ67zaZyT/TrjSqab2tDl3NFpL+zoIwvJxU zPWxcqqAHG7J/0Aj+tgjVJoD4QcY0jQXNsezwYVPYDxSKqKOvavGHWl3j7lVnxb5 na4/5ECoy289AippII+xJ0h1Z4NLhCIweq339IzLlrPKE7CPilwPi7eIb+GMyzwX qRL9XwrldIDbYtUOsjrKrPCRaBJ8hVeCI/Tgm/BDqH7EY7y9taKWSpPvqXPiMoAQ Ico4xY3QjgX5U8WQJBSi84/EfymZ0ihWSX/9daRMRHF3p0iB727d6OXoYJ3piBwC kzuwqZ2ZcIZygmlpn3nIX0Hs3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHihUZb+ Fe/0NXeV7/uLRbeqxEB2MB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPRbKaY879ddkx8/SRp6n8hPXb43JTuZ0dtg+tecBIRRQVWtZXCON7 0Jg/Epr+tnE7AXo2bEUiQ0cFSr6zZ8VrzS+cCKlF0PoivvjcB6oi3ze3uHfsJnQQ kbwlkLu5+pUUA0JrUnCxNbR//u+rQ012yaWT2TS+Zx5d+oOm0ykg3RWOEyIDwBjd kKimeUpRKdPaNLL2rv3BOH4Pue8oaF6QGeKYAA60RtOxlpSR0L+ZsgcDsJoI1ovJ s2X/2s26ogwSMaGvSfHi14bI7JqZtsLW2MTaixkGM3y2j4Wt74kh2OSGZHsXyFzS M8LrEXDIXpSQUkfRBnxTL5tqXx21dwrb -----END CERTIFICATE-----Generated at Sun Jun 15 09:48:44 2025 by rpki-client