$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: xsdaG7QBZ5dfL4SAdkbBOjeuiLZ4xZ9xT3EHIE6mKdo= Subject key identifier: 5B:2E:0A:C2:56:6F:77:63:87:E9:9F:50:DC:FC:7D:C0:29:FD:1B:AF Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34A7 Signing time: Sun 10 Aug 2025 15:10:44 +0000 Manifest this update: Sun 10 Aug 2025 15:10:43 +0000 Manifest next update: Sun 17 Aug 2025 15:10:43 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: F9kdbFonSfF4ipGz89FYYzk48403jDGTiH1TUFyTNGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Aug 10 15:10:43 2025 GMT Not After : Aug 17 15:10:43 2025 GMT Subject: CN=6898b674-5eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:27:90:b9:cb:bb:6e:70:5c:8d:24:75:df: 36:7b:94:cd:3e:8e:0a:6d:1d:d1:5c:f9:20:b7:33: c4:11:0e:b0:24:73:07:36:4a:9a:8e:5c:ce:dd:fe: fe:2b:b1:53:01:b8:fc:3f:c0:34:cb:f6:ac:4a:71: af:cb:18:d0:57:32:d2:16:bc:05:82:25:ec:ea:d6: 20:92:49:c2:70:51:31:3b:20:55:84:e8:b1:f1:db: 58:62:30:18:62:37:3e:4a:95:d4:8b:99:1e:25:96: 29:00:65:e1:95:52:2d:bf:c3:dc:cd:fe:b2:d9:1e: 76:1a:f9:66:5a:d4:6f:e3:04:94:a1:a5:57:58:78: 7c:77:60:51:e9:4a:93:d9:1b:7a:c0:ce:77:4e:41: 7b:68:33:0b:3a:d3:9d:fd:69:1a:9d:8e:82:96:5e: 09:c9:d3:5b:37:5a:55:80:a0:78:ad:78:e7:b0:58: 29:94:97:68:cc:e9:94:b4:31:7d:62:61:7d:5e:b0: 2d:e5:b5:35:de:cb:74:8e:65:ab:eb:e3:ac:4a:7f: 51:ce:df:d3:64:8c:d8:ab:5d:a0:af:f6:0d:98:58: 25:aa:23:5d:2c:50:b5:5f:e6:e3:92:11:a4:83:a6: ae:eb:5b:e3:4e:32:84:b3:d7:57:c1:fe:05:ac:bd: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:0A:C2:56:6F:77:63:87:E9:9F:50:DC:FC:7D:C0:29:FD:1B:AF X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:8f:d5:6a:2f:7e:06:21:71:d1:c9:97:91:21:f3:9b:e3: f4:4d:e6:e1:1d:cc:f8:c3:ef:81:e0:bd:4f:e9:ec:55:24:2b: 1d:4c:02:c2:d3:ea:97:c9:f1:9e:b1:71:68:ad:dd:50:bd:41: 6a:8a:ba:b3:33:a9:2e:72:95:20:67:51:85:7f:e3:18:50:7f: c6:82:79:56:5f:15:0e:78:72:ce:ab:46:a4:c6:d3:82:fa:5e: 78:d8:1e:80:28:bb:3a:56:3f:dc:9e:5f:c2:09:46:5c:fc:6f: bd:9d:86:32:a5:f6:06:38:82:19:31:8b:fd:0f:67:14:87:0b: 12:05:e3:e5:59:ae:84:d4:a9:aa:ba:69:56:41:90:83:62:88: 53:56:5b:7d:9d:1c:d8:59:28:3f:d3:e9:6e:1a:7a:81:45:ca: d5:24:b1:69:4a:4d:dd:b7:17:0e:9e:0c:5e:b0:ee:74:72:c2: 1e:4d:f0:47:e0:ca:8c:99:81:0c:c6:f8:13:7a:40:14:2b:ff: 82:54:db:f9:95:a1:03:b2:37:cd:7f:41:53:07:42:6b:a3:4c: 0f:c6:63:66:5c:04:d0:82:a9:cb:cb:d8:2a:02:cb:ef:b3:64: 53:b8:2c:20:5c:e6:e2:0f:ae:84:78:b2:ca:1c:0d:a1:e1:9d: c7:58:33:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUwODEwMTUxMDQzWhcNMjUwODE3MTUxMDQzWjAYMRYwFAYD VQQDEw02ODk4YjY3NC01ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxAnkLnLu25wXI0kdd82e5TNPo4KbR3RXPkgtzPEEQ6wJHMHNkqajlzO3f7+ K7FTAbj8P8A0y/asSnGvyxjQVzLSFrwFgiXs6tYgkknCcFExOyBVhOix8dtYYjAY Yjc+SpXUi5keJZYpAGXhlVItv8Pczf6y2R52GvlmWtRv4wSUoaVXWHh8d2BR6UqT 2Rt6wM53TkF7aDMLOtOd/WkanY6Cll4JydNbN1pVgKB4rXjnsFgplJdozOmUtDF9 YmF9XrAt5bU13st0jmWr6+OsSn9Rzt/TZIzYq12gr/YNmFglqiNdLFC1X+bjkhGk g6au61vjTjKEs9dXwf4FrL1UIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsuCsJW b3djh+mfUNz8fcAp/RuvMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA68I/Vai9+BiFx0cmXkSHzm+P0TebhHcz4w++B4L1P6exVJCsdTALC 0+qXyfGesXFord1QvUFqirqzM6kucpUgZ1GFf+MYUH/GgnlWXxUOeHLOq0akxtOC +l542B6AKLs6Vj/cnl/CCUZc/G+9nYYypfYGOIIZMYv9D2cUhwsSBePlWa6E1Kmq umlWQZCDYohTVlt9nRzYWSg/0+luGnqBRcrVJLFpSk3dtxcOngxesO50csIeTfBH 4MqMmYEMxvgTekAUK/+CVNv5laEDsjfNf0FTB0Jro0wPxmNmXATQgqnLy9gqAsvv s2RTuCwgXObiD66EeLLKHA2h4Z3HWDPu -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:06 2025 by rpki-client