$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json) Hash identifier: jokMGzZD7UuI3LmrVnehEV6lIgZIwo63uwPr5scupy0= Subject key identifier: 52:A8:4D:8A:A1:BB:C2:B3:E2:D0:1A:28:AC:03:60:1F:9D:E4:AD:64 Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft Manifest number: 027F Signing time: Sat 23 Aug 2025 01:56:21 +0000 Manifest this update: Sat 23 Aug 2025 01:56:21 +0000 Manifest next update: Sat 30 Aug 2025 01:56:21 +0000 Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: 477Ej3JX8jILlt6cGUJu+Jc2W/gymI7VjEMbVHAjp8s=) 2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Validity Not Before: Aug 23 01:56:21 2025 GMT Not After : Aug 30 01:56:21 2025 GMT Subject: CN=68a91fc5-81a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:44:1c:59:3d:a1:38:73:be:ac:3c:e0:3d: 48:3d:26:10:7c:47:3e:82:06:b0:58:05:4a:b4:e7: 31:21:bd:5e:f8:cf:e3:67:4f:52:5c:c3:76:03:b7: e9:12:a6:aa:7b:30:30:d7:34:a9:76:74:9a:ed:1f: 1f:b6:78:c7:a8:d0:40:f4:48:12:13:c5:1a:b1:b8: 78:61:74:e6:25:7a:fa:16:40:05:df:ae:a5:7d:82: 02:7b:e6:e9:fb:76:c5:94:07:46:8b:df:4a:74:61: a9:a7:51:79:9a:a0:fc:04:42:ec:24:ab:66:29:2d: 2a:81:8b:f2:04:aa:fc:de:ad:b4:01:39:7a:0b:8b: a6:af:e9:a2:30:49:38:c9:e1:19:fa:e1:4e:cb:b0: 9c:7c:6b:ef:d7:84:53:6d:eb:de:db:c7:6e:a4:6a: e7:48:f4:68:9c:13:27:f1:81:09:04:72:b8:95:ce: dc:cc:57:dc:18:a0:59:1a:c3:ba:a4:3d:5c:0a:78: 9f:11:62:9c:35:78:d5:5e:cd:52:5a:d2:4e:d2:0e: a1:57:51:58:5e:d3:1f:69:e7:04:b5:fb:8b:f3:7f: 12:96:e7:19:18:2e:a2:ce:0b:55:5e:e4:25:5f:81: 17:86:86:fa:20:08:87:9e:97:f2:39:04:e5:d9:fd: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:4D:8A:A1:BB:C2:B3:E2:D0:1A:28:AC:03:60:1F:9D:E4:AD:64 X509v3 Authority Key Identifier: keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:8d:4d:49:03:30:a0:80:bd:91:0e:87:bc:e2:ae:c7:ac:6b: 16:ab:04:4a:32:bb:d9:4c:4d:00:a3:4d:00:69:76:41:b7:88: 94:d5:92:a0:53:fc:c3:a3:48:c4:ec:83:ab:e7:fd:65:26:6e: 7f:1c:b1:1f:d7:f8:c3:5e:d7:27:de:7c:50:d4:77:a1:03:45: 79:ee:99:39:bd:e3:6d:de:66:6f:d5:3e:c1:29:db:d8:45:85: bf:fb:95:9f:cb:14:2a:73:2a:5c:0b:ce:9e:60:3b:9b:5d:81: 66:a1:40:70:59:88:7a:12:d4:c4:5d:b9:d5:03:46:a5:48:1d: 6f:3b:45:36:78:62:fc:c6:6d:bc:82:74:27:0d:70:14:24:47: 67:fe:7e:b5:89:11:80:59:1b:36:de:b1:fb:2d:cd:b1:38:9a: ca:9f:0f:79:68:23:87:c2:f7:e7:9a:5f:68:8c:8d:6b:3f:ba: ad:4c:aa:9c:16:d2:1c:11:03:61:5d:48:42:34:9d:1d:e3:67: 3b:12:88:a7:4a:f4:a1:b7:34:38:d6:a2:da:cc:00:70:24:44: 89:e9:e1:ef:1a:0d:4d:be:13:ba:e2:96:c3:7c:b5:35:e4:2a: 54:89:a8:2a:10:28:09:89:36:60:aa:a7:c7:1c:d2:c4:b3:25: b9:64:e5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NjExMTAvBgNVBAUTKDMzQjBENTY4OTUwNDgzNkMxMUU5RUNERDBEMTE5QzA1 OEQzRjc2MEIwHhcNMjUwODIzMDE1NjIxWhcNMjUwODMwMDE1NjIxWjAYMRYwFAYD VQQDEw02OGE5MWZjNS04MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgtEHFk9oThzvqw84D1IPSYQfEc+ggawWAVKtOcxIb1e+M/jZ09SXMN2A7fp EqaqezAw1zSpdnSa7R8ftnjHqNBA9EgSE8Uasbh4YXTmJXr6FkAF366lfYICe+bp +3bFlAdGi99KdGGpp1F5mqD8BELsJKtmKS0qgYvyBKr83q20ATl6C4umr+miMEk4 yeEZ+uFOy7CcfGvv14RTbeve28dupGrnSPRonBMn8YEJBHK4lc7czFfcGKBZGsO6 pD1cCnifEWKcNXjVXs1SWtJO0g6hV1FYXtMfaecEtfuL838SlucZGC6izgtVXuQl X4EXhob6IAiHnpfyOQTl2f3LDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKoTYqh u8Kz4tAaKKwDYB+d5K1kMB8GA1UdIwQYMBaAFDOw1WiVBINsEens3Q0RnAWNP3YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk2MS9GRUJCRkE4MDFC RTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcyd1I2ZXpkRFJHY0JZMF9k Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003RFZhSlVFZzJ3UjZlemREUkdjQlkwX2Rncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk2MS9GRUJCRkE4MDFCRTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcy d1I2ZXpkRFJHY0JZMF9kZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2jU1JAzCggL2RDoe84q7HrGsWqwRKMrvZTE0Ao00AaXZBt4iU1ZKg U/zDo0jE7IOr5/1lJm5/HLEf1/jDXtcn3nxQ1HehA0V57pk5veNt3mZv1T7BKdvY RYW/+5WfyxQqcypcC86eYDubXYFmoUBwWYh6EtTEXbnVA0alSB1vO0U2eGL8xm28 gnQnDXAUJEdn/n61iRGAWRs23rH7Lc2xOJrKnw95aCOHwvfnml9ojI1rP7qtTKqc FtIcEQNhXUhCNJ0d42c7EoinSvShtzQ41qLazABwJESJ6eHvGg1NvhO64pbDfLU1 5CpUiagqECgJiTZgqqfHHNLEsyW5ZOW9 -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:13 2025 by rpki-client