$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json) Hash identifier: 6oKHm3o7m8U7uz7naBfYU9RK86I0MHaNvNJ2W7uaAaA= Subject key identifier: FA:0E:75:F3:F3:90:2D:83:E5:95:3F:2A:D6:93:9E:44:43:E7:96:52 Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft Manifest number: 026D Signing time: Sat 19 Jul 2025 02:11:33 +0000 Manifest this update: Sat 19 Jul 2025 02:11:32 +0000 Manifest next update: Sat 26 Jul 2025 02:11:32 +0000 Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: 4Ojb2PR2WqLRiS7aVx6+pLJ6OLLj5Mt1RoPipDQlIgk=) 2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Validity Not Before: Jul 19 02:11:32 2025 GMT Not After : Jul 26 02:11:32 2025 GMT Subject: CN=687afed5-85c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:75:1a:91:1a:ad:15:d2:44:67:0e:34:49: dd:35:bd:77:80:08:dc:fc:48:88:99:5a:27:b8:7e: 3b:6d:34:4f:e1:b8:d5:ef:cc:bb:72:28:9f:6b:4f: fd:d0:f9:03:ce:97:c0:5c:76:62:e4:9b:af:e2:5b: 42:04:53:a0:0d:c8:0f:50:53:0f:08:cf:ce:8c:6b: 26:af:0c:0a:e0:e3:c3:5c:84:97:03:a0:94:5d:55: b2:f0:8b:7e:55:e0:5c:df:76:0d:36:eb:10:53:06: 69:15:54:21:08:85:69:52:6a:0c:2e:39:3b:24:c7: d2:86:7e:f5:f9:91:00:00:32:13:d2:ad:84:e9:bd: 36:af:5d:f2:d3:53:48:93:0d:2c:df:be:de:df:19: b8:15:67:ee:3c:0a:e9:82:5b:69:bb:85:9f:a6:67: ac:9f:23:80:4d:43:cf:e1:64:f4:24:3c:18:d6:01: 3b:00:d6:d0:71:71:2e:0c:65:33:6c:28:87:a3:71: af:27:1a:d8:0b:de:4e:77:fc:93:8c:24:8d:c2:a1: 10:6f:e7:e1:ad:1c:55:1f:68:ac:f1:b6:11:56:44: 91:cf:42:14:df:1c:67:b5:17:b5:23:0f:6f:93:58: ed:2f:ef:da:38:29:31:67:85:b8:1a:3e:a4:09:08: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:75:F3:F3:90:2D:83:E5:95:3F:2A:D6:93:9E:44:43:E7:96:52 X509v3 Authority Key Identifier: keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:e8:1d:ea:1a:57:82:ae:73:43:6f:d5:01:a8:56:bb:bc: 4a:b1:08:bc:98:c6:db:53:68:cd:94:23:1a:13:79:42:fe:7e: e2:4f:cd:0e:4a:60:ac:fc:92:76:c2:a1:4b:d2:36:42:3a:3f: d8:79:01:39:29:ce:39:7c:d2:1b:a0:c1:43:cb:68:84:5a:a6: cb:22:bd:c6:68:43:fd:b4:e0:ff:4c:e8:ff:21:92:e7:d6:11: a0:5c:e1:76:83:2e:66:66:57:17:a6:7e:ed:52:ab:84:53:41: 1f:83:2e:82:cb:28:44:ec:66:b8:4f:2d:b0:28:34:ab:08:d6: f0:a7:f8:cf:7e:68:59:9a:9f:d5:e4:6d:73:39:96:d8:9d:5c: 65:5b:ab:c6:43:d7:e6:8f:46:73:3f:01:9f:38:c9:af:11:83: b5:fa:51:d9:5b:26:8d:eb:89:5a:e4:36:bb:dc:4f:a2:37:ae: a6:95:6f:19:8d:ae:f8:5f:ec:d8:07:0d:79:7f:d0:78:b2:b6: 64:65:b0:b1:7f:ea:44:ff:2f:f1:4e:44:9f:3a:04:30:ed:80: c3:e9:bb:8e:40:f8:28:cb:6c:f4:5c:06:c1:0e:b3:02:9b:be: b7:65:b7:21:82:d5:22:5f:a4:ec:e4:e8:e9:e3:41:a0:91:43: 92:9f:b8:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NjExMTAvBgNVBAUTKDMzQjBENTY4OTUwNDgzNkMxMUU5RUNERDBEMTE5QzA1 OEQzRjc2MEIwHhcNMjUwNzE5MDIxMTMyWhcNMjUwNzI2MDIxMTMyWjAYMRYwFAYD VQQDEw02ODdhZmVkNS04NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSR1GpEarRXSRGcONEndNb13gAjc/EiImVonuH47bTRP4bjV78y7ciifa0/9 0PkDzpfAXHZi5Juv4ltCBFOgDcgPUFMPCM/OjGsmrwwK4OPDXISXA6CUXVWy8It+ VeBc33YNNusQUwZpFVQhCIVpUmoMLjk7JMfShn71+ZEAADIT0q2E6b02r13y01NI kw0s377e3xm4FWfuPArpgltpu4WfpmesnyOATUPP4WT0JDwY1gE7ANbQcXEuDGUz bCiHo3GvJxrYC95Od/yTjCSNwqEQb+fhrRxVH2is8bYRVkSRz0IU3xxntRe1Iw9v k1jtL+/aOCkxZ4W4Gj6kCQhMwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoOdfPz kC2D5ZU/KtaTnkRD55ZSMB8GA1UdIwQYMBaAFDOw1WiVBINsEens3Q0RnAWNP3YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk2MS9GRUJCRkE4MDFC RTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcyd1I2ZXpkRFJHY0JZMF9k Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003RFZhSlVFZzJ3UjZlemREUkdjQlkwX2Rncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk2MS9GRUJCRkE4MDFCRTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcy d1I2ZXpkRFJHY0JZMF9kZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2f+gd6hpXgq5zQ2/VAahWu7xKsQi8mMbbU2jNlCMaE3lC/n7iT80O SmCs/JJ2wqFL0jZCOj/YeQE5Kc45fNIboMFDy2iEWqbLIr3GaEP9tOD/TOj/IZLn 1hGgXOF2gy5mZlcXpn7tUquEU0Efgy6CyyhE7Ga4Ty2wKDSrCNbwp/jPfmhZmp/V 5G1zOZbYnVxlW6vGQ9fmj0ZzPwGfOMmvEYO1+lHZWyaN64la5Da73E+iN66mlW8Z ja74X+zYBw15f9B4srZkZbCxf+pE/y/xTkSfOgQw7YDD6buOQPgoy2z0XAbBDrMC m763ZbchgtUiX6Ts5Ojp40GgkUOSn7gY -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:10 2025 by rpki-client