$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json) Hash identifier: Z5ZvV4VzFIEM8LSZbUm/Gf633JSZwZQLjpHUaptnIUk= Subject key identifier: 09:DE:11:55:37:FB:BC:4A:A0:92:A1:CE:97:64:18:A2:DD:CA:E2:3C Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft Manifest number: 024C Signing time: Tue 13 May 2025 01:39:23 +0000 Manifest this update: Tue 13 May 2025 01:39:22 +0000 Manifest next update: Tue 20 May 2025 01:39:22 +0000 Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: IUz4NB/ofkbufin9/gQsCTKHvM6M+kEjwHcyhdnZNnE=) 2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Validity Not Before: May 13 01:39:22 2025 GMT Not After : May 20 01:39:22 2025 GMT Subject: CN=6822a2ca-e015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:52:5f:5e:d2:06:ae:9e:07:ee:cd:e8:80: be:bb:06:7c:60:6a:2d:60:65:be:75:10:77:87:0d: 47:5d:2a:da:70:44:9d:41:a0:8e:31:2d:2e:85:07: 94:c5:c5:27:4f:9b:35:c8:bf:68:49:3e:33:2f:30: 18:b0:de:ec:90:3e:d5:12:67:50:ee:29:c7:ff:ab: 1b:95:bb:f9:b9:dd:76:70:b1:04:63:66:b9:cf:0b: 71:63:cd:83:4b:6f:6c:41:c7:26:47:4c:00:a9:03: 3b:ef:97:6e:d8:ad:9b:1e:c2:b0:39:db:01:8b:c0: cf:d1:1f:3f:08:9a:14:ba:e0:63:10:61:7b:9d:1d: 42:06:bc:1f:9a:f7:2e:df:1c:07:5b:e0:7c:e1:a2: 81:4d:13:5d:48:7c:fe:35:bb:66:92:1c:2f:ec:3d: 34:dc:f9:99:4b:26:62:0b:ec:b4:94:42:b9:8e:b4: e3:2f:1e:76:ce:98:f4:4d:b6:75:07:9a:e9:af:29: e3:89:94:f7:a0:bc:f2:56:71:73:89:4f:2b:77:46: b7:58:cc:ed:e1:77:04:52:a3:41:76:eb:02:5e:24: 6a:8b:f4:62:c7:e7:3b:13:45:37:7c:90:95:99:08: 1a:4a:89:a7:72:06:9f:f9:e7:69:b3:ef:16:16:d5: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:11:55:37:FB:BC:4A:A0:92:A1:CE:97:64:18:A2:DD:CA:E2:3C X509v3 Authority Key Identifier: keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:25:1c:ad:30:ae:65:20:08:df:b5:46:bf:56:03:67:e9:e7: b7:e0:84:da:e3:76:a4:dc:40:68:f7:e9:bf:a9:05:4a:1c:a9: 55:e0:e6:b3:7d:74:15:b8:6f:82:df:51:95:dd:12:62:3b:dc: 6e:84:88:81:ae:31:20:06:43:4c:77:75:49:74:4a:83:80:8d: a3:c2:79:6b:27:ba:52:f7:54:ba:10:f7:ab:43:44:94:2c:94: ab:a8:35:9f:23:ba:c2:1a:9a:80:44:d5:3f:a0:a6:64:9a:fa: fe:4b:f1:46:ea:dd:3e:da:b1:ef:f7:a6:bb:3c:78:55:d7:4b: 07:5b:5a:ca:a0:0b:ec:b7:3f:dc:12:e7:50:3a:6c:f9:c8:1f: 8d:77:36:fe:1e:97:a4:79:ed:9a:33:85:0f:7e:83:90:8f:6d: a7:98:b1:0c:39:d0:f6:74:4e:43:6b:eb:3b:cb:02:77:26:d5: e7:f3:82:8d:69:a9:bd:80:f7:74:80:82:32:eb:70:8f:40:49: 71:c3:a5:fc:82:e9:f7:91:22:19:a1:d4:68:e8:85:2c:a3:25: 86:d2:bd:6f:86:1f:cd:1e:76:5f:bc:12:a1:ac:24:b8:ca:ca: e0:c7:a1:ab:87:a9:c1:32:b9:aa:f5:ce:52:89:17:18:cd:b5: e5:76:ca:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NjExMTAvBgNVBAUTKDMzQjBENTY4OTUwNDgzNkMxMUU5RUNERDBEMTE5QzA1 OEQzRjc2MEIwHhcNMjUwNTEzMDEzOTIyWhcNMjUwNTIwMDEzOTIyWjAYMRYwFAYD VQQDEw02ODIyYTJjYS1lMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/xSX17SBq6eB+7N6IC+uwZ8YGotYGW+dRB3hw1HXSracESdQaCOMS0uhQeU xcUnT5s1yL9oST4zLzAYsN7skD7VEmdQ7inH/6sblbv5ud12cLEEY2a5zwtxY82D S29sQccmR0wAqQM775du2K2bHsKwOdsBi8DP0R8/CJoUuuBjEGF7nR1CBrwfmvcu 3xwHW+B84aKBTRNdSHz+Nbtmkhwv7D003PmZSyZiC+y0lEK5jrTjLx52zpj0TbZ1 B5rprynjiZT3oLzyVnFziU8rd0a3WMzt4XcEUqNBdusCXiRqi/Rix+c7E0U3fJCV mQgaSomncgaf+edps+8WFtVoiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAneEVU3 +7xKoJKhzpdkGKLdyuI8MB8GA1UdIwQYMBaAFDOw1WiVBINsEens3Q0RnAWNP3YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk2MS9GRUJCRkE4MDFC RTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcyd1I2ZXpkRFJHY0JZMF9k Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003RFZhSlVFZzJ3UjZlemREUkdjQlkwX2Rncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk2MS9GRUJCRkE4MDFCRTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcy d1I2ZXpkRFJHY0JZMF9kZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JRytMK5lIAjftUa/VgNn6ee34ITa43ak3EBo9+m/qQVKHKlV4Oaz fXQVuG+C31GV3RJiO9xuhIiBrjEgBkNMd3VJdEqDgI2jwnlrJ7pS91S6EPerQ0SU LJSrqDWfI7rCGpqARNU/oKZkmvr+S/FG6t0+2rHv96a7PHhV10sHW1rKoAvstz/c EudQOmz5yB+Ndzb+Hpekee2aM4UPfoOQj22nmLEMOdD2dE5Da+s7ywJ3JtXn84KN aam9gPd0gIIy63CPQElxw6X8gun3kSIZodRo6IUsoyWG0r1vhh/NHnZfvBKhrCS4 ysrgx6Grh6nBMrmq9c5SiRcYzbXldsrO -----END CERTIFICATE-----Generated at Wed May 14 21:58:39 2025 by rpki-client