$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: HTSeseknmY/9oQ0JwnKbaRhXeqCBS952+N88XSEJzsU= Subject key identifier: 88:CE:2F:0A:40:F4:96:86:08:07:44:A1:FE:C2:11:8B:77:6B:43:5C Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 01F4 Signing time: Wed 17 Sep 2025 03:02:54 +0000 Manifest this update: Wed 17 Sep 2025 03:02:53 +0000 Manifest next update: Wed 24 Sep 2025 03:02:53 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: lNS9RaieFf1aMcGxWcLtLcA/0KGJ40c1NP6brryVxnQ=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Sep 17 03:02:53 2025 GMT Not After : Sep 24 03:02:53 2025 GMT Subject: CN=68ca24dd-bb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:84:12:08:f1:ea:cb:23:01:63:a4:85:90: 38:cc:71:83:f7:2e:8a:c4:a2:01:37:bd:23:4b:cd: b1:30:ec:14:a5:d3:ca:73:b3:77:94:0b:a1:e6:ca: 44:4c:5d:95:b3:3b:b2:a4:ee:01:fc:9a:94:61:ff: 26:49:e2:68:5e:3f:7d:1e:55:73:50:d0:4b:65:59: ae:64:64:d0:0e:6e:d9:c3:4f:0e:80:e6:90:be:36: 75:1d:6a:43:6a:51:67:33:13:e4:14:36:2d:ee:e5: 47:20:88:4d:ce:3c:c5:16:98:a7:f8:90:43:8c:46: d9:f3:fe:70:be:c4:e5:8c:09:32:0c:53:2d:bd:32: c5:64:e1:25:25:bd:75:e8:12:61:7c:db:a1:bd:c0: 61:7d:d2:19:6d:93:f7:d4:c6:6a:17:0c:fa:f1:02: a2:cf:75:5d:0a:5e:f9:fc:4c:4b:d4:d5:2b:77:0e: 4d:c5:e1:15:81:46:2e:ad:1b:f3:f5:2e:1b:fb:4c: bb:43:70:75:1b:a7:8a:15:cf:60:7c:cd:ee:1e:6f: 23:0b:48:d7:7d:a3:95:24:80:d6:ec:ac:08:02:37: 07:50:44:56:e2:c8:7d:16:a6:5a:0a:be:ab:8b:dd: fe:2e:cf:03:df:8e:83:1e:05:67:b9:ea:36:49:9b: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:2F:0A:40:F4:96:86:08:07:44:A1:FE:C2:11:8B:77:6B:43:5C X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d0:ca:d0:0c:f4:5b:b5:1a:f8:15:e3:50:a2:10:34:b1:42: c7:7f:29:a7:52:4a:51:e8:a1:c1:b1:c4:e4:fb:22:2c:4a:c6: b7:9e:35:11:96:dd:aa:dc:f3:6d:f2:18:3f:07:5b:32:7b:8e: 69:c2:2c:9e:71:85:7f:0c:3d:9b:04:b6:ee:d5:f0:fa:cc:cd: 66:24:6a:b6:56:6c:1e:ea:e7:dc:92:ff:ec:27:91:e9:62:3b: 5e:ad:fb:4a:ca:d4:99:be:03:76:73:3b:1e:c1:6e:29:3c:7a: 56:38:2a:2f:14:97:5b:ca:d9:ca:a9:f2:b4:58:18:c5:7d:1a: 07:10:ab:b8:76:ef:7c:fc:32:f2:29:ac:92:dd:cc:21:cd:14: 43:97:7a:7a:12:de:91:66:2a:b5:cf:67:b0:fe:57:f2:16:74: 65:09:11:22:a5:5f:88:4a:d1:af:fc:60:64:87:74:9d:57:a2: 52:fe:6e:bf:47:2b:b4:fc:e3:7a:0c:f4:fe:a5:80:0f:be:3d: 0e:c2:4a:7d:be:5a:14:35:78:3a:a4:52:a2:6c:83:58:df:71: b2:c7:1c:c8:af:06:e7:b4:e0:05:8c:09:15:2c:0e:02:74:c8: 5b:25:6c:97:ff:ac:52:53:fd:72:bf:b8:82:c4:58:58:b6:4f: 98:87:87:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUwOTE3MDMwMjUzWhcNMjUwOTI0MDMwMjUzWjAYMRYwFAYD VQQDEw02OGNhMjRkZC1iYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHaEEgjx6ssjAWOkhZA4zHGD9y6KxKIBN70jS82xMOwUpdPKc7N3lAuh5spE TF2VszuypO4B/JqUYf8mSeJoXj99HlVzUNBLZVmuZGTQDm7Zw08OgOaQvjZ1HWpD alFnMxPkFDYt7uVHIIhNzjzFFpin+JBDjEbZ8/5wvsTljAkyDFMtvTLFZOElJb11 6BJhfNuhvcBhfdIZbZP31MZqFwz68QKiz3VdCl75/ExL1NUrdw5NxeEVgUYurRvz 9S4b+0y7Q3B1G6eKFc9gfM3uHm8jC0jXfaOVJIDW7KwIAjcHUERW4sh9FqZaCr6r i93+Ls8D346DHgVnueo2SZvvjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjOLwpA 9JaGCAdEof7CEYt3a0NcMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS0MrQDPRbtRr4FeNQohA0sULHfymnUkpR6KHBscTk+yIsSsa3njUR lt2q3PNt8hg/B1sye45pwiyecYV/DD2bBLbu1fD6zM1mJGq2Vmwe6ufckv/sJ5Hp YjterftKytSZvgN2czsewW4pPHpWOCovFJdbytnKqfK0WBjFfRoHEKu4du98/DLy KayS3cwhzRRDl3p6Et6RZiq1z2ew/lfyFnRlCREipV+IStGv/GBkh3SdV6JS/m6/ Ryu0/ON6DPT+pYAPvj0Owkp9vloUNXg6pFKibINY33GyxxzIrwbntOAFjAkVLA4C dMhbJWyX/6xSU/1yv7iCxFhYtk+Yh4ff -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:15 2025 by rpki-client