$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: Nl52l21+n5RNptb/gqinUD2KC+IK8PZfCxEBRlYOh1w= Subject key identifier: 9F:4A:37:4D:BB:A5:60:6B:E8:CD:AF:BC:C2:52:58:52:EF:51:00:3F Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 01BC Signing time: Sat 31 May 2025 02:50:49 +0000 Manifest this update: Sat 31 May 2025 02:50:49 +0000 Manifest next update: Sat 07 Jun 2025 02:50:49 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: cAaQBDG5zEqjJM1q3zoe+kevEab9k1QpKekmdavLKZs=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: May 31 02:50:49 2025 GMT Not After : Jun 7 02:50:49 2025 GMT Subject: CN=683a6e89-74f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:c3:8a:5c:cf:e3:eb:f5:ec:a2:b3:d2:c2: a5:5b:2e:32:c2:5b:84:05:d7:36:d1:cc:47:c8:be: 0c:a5:8e:6d:73:3e:f1:0d:49:6a:19:b0:27:2c:15: f0:3a:46:57:45:e2:3b:a9:ca:c7:10:75:cb:73:f1: 7f:3f:da:dd:15:c3:4c:ef:96:bd:8a:26:fa:2f:a0: 7d:d8:aa:5b:01:ad:b8:0a:93:2a:f3:e1:cb:1a:ca: 09:e5:3d:96:df:4c:51:b5:1d:ff:5d:9d:9c:49:4d: 47:d0:c8:14:51:cd:bc:db:0e:dd:a2:d7:4d:da:80: 2e:69:15:9a:d0:59:54:3e:e2:a1:2b:8a:4c:86:88: f2:c7:3d:9f:f4:88:d4:e1:77:6a:05:aa:99:d6:01: 66:1e:8a:0f:fa:fe:56:2d:a0:85:f7:57:59:51:69: f8:1c:66:08:5f:8d:0c:35:18:0a:93:a2:d0:7f:ce: fc:d0:b6:58:ee:57:5f:31:fa:ff:83:70:12:d8:21: b7:8b:0d:d1:0f:16:04:c0:44:29:fb:51:36:95:e8: 30:c5:43:d5:6e:06:73:51:c4:65:71:6e:ab:84:d6: 91:c2:8b:0b:9b:92:66:ff:5b:45:5d:e2:f8:10:1c: 54:77:5f:52:b0:d7:68:c1:b8:2f:01:43:8b:5b:9a: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:37:4D:BB:A5:60:6B:E8:CD:AF:BC:C2:52:58:52:EF:51:00:3F X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f2:bb:da:33:46:7e:a0:f8:c4:a3:14:11:21:ee:49:af:19: 37:71:e0:2c:59:66:36:f7:67:15:54:b6:b6:4a:a1:2e:6c:4f: 2d:6e:61:2f:b4:4b:31:c0:3f:fa:ec:9a:f2:83:2d:7c:c7:18: b4:b6:63:4b:9e:94:26:54:01:87:21:1f:c7:a4:60:15:2c:7d: 83:2e:c2:25:b7:8a:08:e9:29:05:71:b9:eb:46:e2:ff:da:e5: 6e:70:f5:a5:cf:91:e6:34:97:6d:72:24:a9:6d:97:ba:e5:68: e4:9f:97:be:72:ff:0e:3e:1a:3f:b0:4b:4a:4a:7f:e9:19:23: 13:89:ad:df:31:d0:3c:da:b3:d7:a3:49:f6:66:81:66:81:bf: 8a:84:1f:ad:65:be:44:3f:3b:92:1c:10:af:e0:12:dd:b3:f3: 60:be:84:d8:10:f9:3e:be:08:74:93:3e:24:fa:f4:2c:3d:f2: 5a:11:1c:d2:ee:df:11:f8:36:f4:93:e4:d3:21:1e:09:67:61: 1d:e5:a6:d3:02:44:9c:82:c2:77:ad:b8:50:c7:3a:e5:0b:f2: 85:ce:ff:e7:79:59:b7:cb:5f:dd:31:fe:23:b0:e7:56:1c:fe: 3f:83:b7:b3:77:62:93:ee:83:be:80:91:97:bb:e1:2d:60:17: cf:0b:e3:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUwNTMxMDI1MDQ5WhcNMjUwNjA3MDI1MDQ5WjAYMRYwFAYD VQQDEw02ODNhNmU4OS03NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0TDilzP4+v17KKz0sKlWy4ywluEBdc20cxHyL4MpY5tcz7xDUlqGbAnLBXw OkZXReI7qcrHEHXLc/F/P9rdFcNM75a9iib6L6B92KpbAa24CpMq8+HLGsoJ5T2W 30xRtR3/XZ2cSU1H0MgUUc282w7dotdN2oAuaRWa0FlUPuKhK4pMhojyxz2f9IjU 4XdqBaqZ1gFmHooP+v5WLaCF91dZUWn4HGYIX40MNRgKk6LQf8780LZY7ldfMfr/ g3AS2CG3iw3RDxYEwEQp+1E2legwxUPVbgZzUcRlcW6rhNaRwosLm5Jm/1tFXeL4 EBxUd19SsNdowbgvAUOLW5ozoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9KN027 pWBr6M2vvMJSWFLvUQA/MB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV8rvaM0Z+oPjEoxQRIe5Jrxk3ceAsWWY292cVVLa2SqEubE8tbmEv tEsxwD/67Jrygy18xxi0tmNLnpQmVAGHIR/HpGAVLH2DLsIlt4oI6SkFcbnrRuL/ 2uVucPWlz5HmNJdtciSpbZe65Wjkn5e+cv8OPho/sEtKSn/pGSMTia3fMdA82rPX o0n2ZoFmgb+KhB+tZb5EPzuSHBCv4BLds/NgvoTYEPk+vgh0kz4k+vQsPfJaERzS 7t8R+Db0k+TTIR4JZ2Ed5abTAkScgsJ3rbhQxzrlC/KFzv/neVm3y1/dMf4jsOdW HP4/g7ezd2KT7oO+gJGXu+EtYBfPC+Nh -----END CERTIFICATE-----Generated at Sat May 31 17:51:42 2025 by rpki-client