$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: iQTh3olFR3lCOrc1ydCpS18TwjOt465YREA5W+y6QGk= Subject key identifier: 71:2E:E8:21:80:25:E4:4B:A2:37:7E:54:25:5F:33:BD:13:E6:04:D9 Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 01D6 Signing time: Mon 21 Jul 2025 02:55:38 +0000 Manifest this update: Mon 21 Jul 2025 02:55:37 +0000 Manifest next update: Mon 28 Jul 2025 02:55:37 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: HTVmy8jxfxnzlDFp9+hrMjNSTfBuwm+OKwb75umJ4ac=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Jul 21 02:55:37 2025 GMT Not After : Jul 28 02:55:37 2025 GMT Subject: CN=687dac29-ee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:e4:bd:fd:cc:b8:dd:e5:14:c7:e7:15:1c: e3:ee:8d:62:98:7c:4c:b2:48:1b:fa:3a:70:9c:48: 1a:c7:3b:5e:bb:6f:2b:6d:1c:75:68:8f:4a:80:0c: 2f:af:40:79:56:0b:9b:ce:0d:ab:b2:76:46:46:15: f5:8c:db:12:14:95:81:17:9e:e5:54:d1:06:ba:96: 92:47:ff:94:34:b3:d3:82:bf:61:7f:1e:8e:80:60: 63:16:b2:c1:d8:34:f8:a0:49:7e:c9:a1:c6:48:b8: 5e:94:11:78:19:9a:af:e7:66:70:13:88:a8:8f:46: 12:7a:ff:7c:56:4b:93:70:12:54:a4:cd:54:8d:87: 58:8a:6a:74:61:f2:15:b5:82:dd:4a:69:8d:b5:44: 10:4f:5d:f4:9f:92:99:ec:1a:4f:6c:65:4c:5b:97: 8d:dc:da:15:e8:a6:b4:78:04:05:b9:d0:ba:b2:6c: 72:e8:0f:a6:4c:81:e7:da:bd:a0:1e:2d:68:0b:ae: 1c:87:7a:c2:5b:af:62:a3:81:5c:96:50:d5:5d:ef: dd:8d:f5:61:00:f5:c1:62:c8:35:15:0c:aa:d9:67: 9c:61:54:68:d4:1c:67:4a:78:d8:7e:dc:eb:8b:6f: a7:82:6c:1b:e7:57:0e:50:a4:2d:f5:58:e7:0b:9a: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:E8:21:80:25:E4:4B:A2:37:7E:54:25:5F:33:BD:13:E6:04:D9 X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ca:85:bf:e3:23:1d:15:96:74:65:c1:3e:aa:67:f5:6e:2f: 20:af:5a:c3:1a:1b:46:7f:21:da:1b:e6:24:a7:cb:6b:bd:f9: 7f:22:d5:57:0f:9c:1e:77:a5:bf:1a:aa:4a:35:64:be:f1:bc: 46:3b:6c:fd:30:67:35:11:1c:00:47:61:d1:ca:e5:d7:00:a7: 90:be:3f:95:60:dd:7b:74:2f:80:4e:ca:32:3e:f3:4e:6f:aa: 9f:b0:1f:ee:42:d1:c2:4b:eb:96:88:23:32:8e:0c:30:0d:ed: 88:0f:68:5c:d8:85:00:5d:d4:45:2b:7b:e1:d7:72:9e:e2:06: 3a:09:b7:5d:1d:40:77:5e:3b:9d:cb:23:2f:c5:07:0e:45:50: c8:b5:73:15:62:9e:75:ae:19:56:cc:de:f2:7c:3d:c0:6e:e4: a0:72:a7:2a:3f:96:5f:4b:b0:01:92:40:27:8a:51:3f:b8:29: 99:78:c9:54:b0:18:12:72:06:c4:93:be:83:65:0e:a3:56:1b: 70:da:49:1b:cd:21:32:2e:49:9e:22:87:00:e5:68:6a:11:8d: c4:41:29:a0:88:ee:ad:f9:82:aa:33:6c:af:82:d7:43:f1:da: d2:3e:f8:0f:35:ba:54:00:da:10:88:15:20:b7:d5:8f:49:32: b5:c3:04:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUwNzIxMDI1NTM3WhcNMjUwNzI4MDI1NTM3WjAYMRYwFAYD VQQDEw02ODdkYWMyOS1lZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRPkvf3MuN3lFMfnFRzj7o1imHxMskgb+jpwnEgaxzteu28rbRx1aI9KgAwv r0B5Vgubzg2rsnZGRhX1jNsSFJWBF57lVNEGupaSR/+UNLPTgr9hfx6OgGBjFrLB 2DT4oEl+yaHGSLhelBF4GZqv52ZwE4ioj0YSev98VkuTcBJUpM1UjYdYimp0YfIV tYLdSmmNtUQQT130n5KZ7BpPbGVMW5eN3NoV6Ka0eAQFudC6smxy6A+mTIHn2r2g Hi1oC64ch3rCW69io4FcllDVXe/djfVhAPXBYsg1FQyq2WecYVRo1BxnSnjYftzr i2+ngmwb51cOUKQt9VjnC5rFmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEu6CGA JeRLojd+VCVfM70T5gTZMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMyoW/4yMdFZZ0ZcE+qmf1bi8gr1rDGhtGfyHaG+Ykp8trvfl/ItVX D5wed6W/GqpKNWS+8bxGO2z9MGc1ERwAR2HRyuXXAKeQvj+VYN17dC+ATsoyPvNO b6qfsB/uQtHCS+uWiCMyjgwwDe2ID2hc2IUAXdRFK3vh13Ke4gY6CbddHUB3Xjud yyMvxQcORVDItXMVYp51rhlWzN7yfD3AbuSgcqcqP5ZfS7ABkkAnilE/uCmZeMlU sBgScgbEk76DZQ6jVhtw2kkbzSEyLkmeIocA5WhqEY3EQSmgiO6t+YKqM2yvgtdD 8drSPvgPNbpUANoQiBUgt9WPSTK1wwR7 -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:35 2025 by rpki-client