$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: 12SYLZr8fuCOiuaq794PHwJ0yT2Kyw3Q1YsZbYmpeeM= Subject key identifier: AB:F7:91:71:B3:A6:8A:FA:87:66:D9:ED:BD:D3:9B:D1:07:8E:93:ED Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 019D Signing time: Sat 29 Mar 2025 02:59:13 +0000 Manifest this update: Sat 29 Mar 2025 02:59:12 +0000 Manifest next update: Sat 05 Apr 2025 02:59:12 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: lxQEkAA3BWbDd4xLz9AZ7HfmE2hdobuDi81yvsx+VL8=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9 Validity Not Before: Mar 29 02:59:12 2025 GMT Not After : Apr 5 02:59:12 2025 GMT Subject: CN=67e76200-a4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:52:4b:5a:5d:8f:9d:fa:8a:90:bb:a5:6e: 43:8d:b7:4b:b3:94:dd:b0:a3:02:50:14:43:2b:27: 66:0c:e5:43:1f:d6:f2:73:85:3f:5e:4f:5c:69:41: 61:15:9d:6f:0d:c7:2f:9b:a0:11:8f:c0:7a:51:1a: 57:9c:91:84:c6:e8:c5:3f:72:d1:53:d6:89:8f:b8: f4:74:be:5d:98:de:6c:33:f4:a8:71:c3:9e:63:e7: 3e:91:43:e8:14:4e:c7:30:58:25:5f:1f:19:8d:bb: cb:be:0e:da:b2:2d:ab:bd:7f:c8:ce:84:8e:51:9d: 33:a4:6c:1c:99:49:19:08:8a:4c:7c:f4:ad:72:ab: 91:55:4d:0d:e6:e8:fe:84:72:e5:df:79:67:dd:03: a0:2c:a7:74:a5:8d:85:72:80:ca:8a:06:2d:be:aa: e5:5c:6b:eb:20:da:a6:fe:72:ff:74:5d:37:26:62: 9f:c4:68:fe:b1:63:5d:24:92:ea:b4:a3:d1:86:3d: 4a:91:0a:f9:6a:4e:09:70:95:a3:94:b9:06:23:40: ff:1f:f8:8f:6b:71:7c:4e:ab:f7:17:52:1f:5f:6b: 54:ba:e8:41:f4:62:36:47:fa:84:65:cf:06:51:e6: f4:3b:8c:e7:65:93:ef:8a:7d:2b:5c:51:a8:e9:a7: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:91:71:B3:A6:8A:FA:87:66:D9:ED:BD:D3:9B:D1:07:8E:93:ED X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:51:f6:85:8f:db:a8:53:ba:c6:bf:69:3e:cd:6f:0d:74:fb: 58:3d:56:c0:b4:f9:9e:94:36:16:de:0c:b8:1e:4a:2c:04:c7: 5f:9a:ba:f7:05:95:72:ea:77:02:2e:2e:e1:e6:8b:a2:39:88: 8f:93:1f:8a:f0:f8:c2:72:e7:6e:d9:72:e0:26:ca:83:67:5a: d7:d5:96:39:99:6f:22:b3:e3:04:e3:8a:59:bc:c6:c3:ec:38: 92:63:37:91:30:f5:5e:ae:6e:4b:ad:d7:8b:3e:11:ae:c0:2e: 29:4a:88:f3:25:f7:0b:02:6b:1c:e8:5a:9a:19:5f:93:ac:9e: 3d:ee:e0:a5:bb:c0:d7:fa:84:51:e3:c9:21:47:74:f9:c0:9a: 10:d8:d2:b3:9b:d8:0a:84:0c:5e:bd:7b:eb:3c:aa:23:7f:a5: f3:21:a5:ad:4d:b4:c4:45:97:ca:9c:fc:a2:46:5e:33:91:44: 67:a5:41:46:95:15:83:ce:cc:34:d4:b5:52:8f:0b:02:4a:8f: 6e:13:a0:08:dc:69:7e:50:6e:60:e2:a4:f4:f5:13:72:4a:a7: 4f:9d:af:10:11:d8:3c:61:52:e1:94:74:60:73:ad:f9:d7:54: f1:2e:1a:1d:21:46:2d:66:d7:88:a3:04:7b:1b:86:ac:77:56: 2f:34:15:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUwMzI5MDI1OTEyWhcNMjUwNDA1MDI1OTEyWjAYMRYwFAYD VQQDEw02N2U3NjIwMC1hNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBtSS1pdj536ipC7pW5DjbdLs5TdsKMCUBRDKydmDOVDH9byc4U/Xk9caUFh FZ1vDccvm6ARj8B6URpXnJGExujFP3LRU9aJj7j0dL5dmN5sM/SoccOeY+c+kUPo FE7HMFglXx8ZjbvLvg7asi2rvX/IzoSOUZ0zpGwcmUkZCIpMfPStcquRVU0N5uj+ hHLl33ln3QOgLKd0pY2FcoDKigYtvqrlXGvrINqm/nL/dF03JmKfxGj+sWNdJJLq tKPRhj1KkQr5ak4JcJWjlLkGI0D/H/iPa3F8Tqv3F1IfX2tUuuhB9GI2R/qEZc8G Ueb0O4znZZPvin0rXFGo6acxcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv3kXGz por6h2bZ7b3Tm9EHjpPtMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZUfaFj9uoU7rGv2k+zW8NdPtYPVbAtPmelDYW3gy4HkosBMdfmrr3 BZVy6ncCLi7h5ouiOYiPkx+K8PjCcudu2XLgJsqDZ1rX1ZY5mW8is+ME44pZvMbD 7DiSYzeRMPVerm5LrdeLPhGuwC4pSojzJfcLAmsc6FqaGV+TrJ497uClu8DX+oRR 48khR3T5wJoQ2NKzm9gKhAxevXvrPKojf6XzIaWtTbTERZfKnPyiRl4zkURnpUFG lRWDzsw01LVSjwsCSo9uE6AI3Gl+UG5g4qT09RNySqdPna8QEdg8YVLhlHRgc635 11TxLhodIUYtZteIowR7G4asd1YvNBUO -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client