$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: sJtWxvYkGYyO5gUUad+DwXBXoIpltQFfr1cKk8VHBQ0= Subject key identifier: 34:DD:03:A9:5A:DC:F7:6F:8C:31:C2:B8:CF:7C:EF:48:F4:2D:7A:42 Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 0204 Signing time: Sun 19 Oct 2025 04:46:43 +0000 Manifest this update: Sun 19 Oct 2025 04:46:42 +0000 Manifest next update: Sun 26 Oct 2025 04:46:41 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: e/qLnDnU6ho4r1Xc5NgyAapmPqZElbMS9TNGYuNTDag=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Oct 19 04:46:42 2025 GMT Not After : Oct 26 04:46:41 2025 GMT Subject: CN=68f46d32-e7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:e3:55:bf:c6:64:ac:2d:d0:e3:03:95:a2: 69:36:2c:43:f1:3c:a8:8e:cb:a5:8b:72:d3:6c:74: 61:c3:e0:78:e7:66:39:2e:8d:bb:08:c6:34:19:a3: d2:5f:b8:a3:96:47:d1:10:c7:df:8b:27:2b:45:47: b7:9e:3f:a0:f5:9a:25:0a:cb:cc:98:64:73:be:7b: 5d:34:de:4d:1c:a3:5d:28:a1:bd:4c:a7:d6:00:b6: a8:f4:b2:72:93:40:27:71:8a:05:54:a4:7b:ef:f8: c1:fa:37:87:fa:c3:9a:70:9f:28:19:42:71:10:08: 01:b6:58:9d:f2:a2:51:b1:c7:52:a0:e9:dd:a9:13: 77:ba:2e:d7:a3:ee:13:45:11:89:e6:e7:38:5e:07: 08:86:26:0c:f5:c5:0e:01:8a:ac:3f:f3:30:a1:4a: 90:44:d6:dc:22:3a:8a:39:94:eb:5f:cd:79:b5:4f: c8:7d:ae:26:e7:fe:55:7b:eb:44:ee:e8:c8:da:7c: 35:a6:58:2f:f8:1e:fd:be:53:ce:bf:9c:17:fe:02: 4f:dc:e0:16:b6:e3:c2:b5:6a:d6:f9:b3:a4:42:9c: 75:5d:47:cd:35:fc:35:98:57:3e:1c:56:fe:6d:26: e6:07:6d:af:65:62:a0:68:8d:9c:23:eb:dc:76:6c: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:03:A9:5A:DC:F7:6F:8C:31:C2:B8:CF:7C:EF:48:F4:2D:7A:42 X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:2b:28:0b:59:e6:ed:97:62:19:75:28:f4:e0:88:e9:b6: db:bc:18:8c:94:a0:a8:6c:3d:85:aa:7b:8c:9f:e1:1e:97:ec: 54:e5:61:03:9b:99:41:f0:fa:c1:a1:97:4e:c3:2b:7c:fe:d8: 20:07:09:08:bf:65:36:72:2e:8d:b7:d0:ce:02:07:4d:c6:c2: 66:be:d7:a2:c1:80:33:e7:6e:d1:92:f1:bd:98:fa:99:a1:43: 12:38:74:9a:dc:54:80:1d:b7:a5:3e:22:21:ee:7b:ad:8e:9e: d3:8c:51:5e:59:b7:33:b3:6e:2f:f3:69:3f:54:5f:73:bb:b7: 7f:0a:63:54:b0:58:41:0a:97:f0:d7:c8:34:5f:df:a1:b6:aa: 7e:b9:aa:86:5a:b1:20:9c:72:40:74:9b:35:e9:c9:37:dd:48: 45:0a:98:c7:09:80:d2:c5:5f:c5:b3:4e:6e:e3:48:12:6f:b0: bb:ad:a5:fc:ee:85:05:78:5d:eb:0b:6e:05:aa:30:c4:b9:f7: aa:7d:cb:ce:73:73:70:4b:d6:e0:89:46:cb:48:42:ae:da:5e: 67:35:93:ae:85:f4:a0:2d:37:7e:2c:e2:96:be:59:bd:b1:17: a9:7c:94:17:48:ea:1c:11:7e:8f:47:4a:cb:9e:f2:0c:11:1d: 84:8a:30:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUxMDE5MDQ0NjQyWhcNMjUxMDI2MDQ0NjQxWjAYMRYwFAYD VQQDEw02OGY0NmQzMi1lN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6jjVb/GZKwt0OMDlaJpNixD8Tyojsuli3LTbHRhw+B452Y5Lo27CMY0GaPS X7ijlkfREMffiycrRUe3nj+g9ZolCsvMmGRzvntdNN5NHKNdKKG9TKfWALao9LJy k0AncYoFVKR77/jB+jeH+sOacJ8oGUJxEAgBtlid8qJRscdSoOndqRN3ui7Xo+4T RRGJ5uc4XgcIhiYM9cUOAYqsP/MwoUqQRNbcIjqKOZTrX815tU/Ifa4m5/5Ve+tE 7ujI2nw1plgv+B79vlPOv5wX/gJP3OAWtuPCtWrW+bOkQpx1XUfNNfw1mFc+HFb+ bSbmB22vZWKgaI2cI+vcdmzrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTdA6la 3PdvjDHCuM9870j0LXpCMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLlisoC1nm7ZdiGXUo9OCI6bbbvBiMlKCobD2FqnuMn+Eel+xU5WED m5lB8PrBoZdOwyt8/tggBwkIv2U2ci6Nt9DOAgdNxsJmvteiwYAz527RkvG9mPqZ oUMSOHSa3FSAHbelPiIh7nutjp7TjFFeWbczs24v82k/VF9zu7d/CmNUsFhBCpfw 18g0X9+htqp+uaqGWrEgnHJAdJs16ck33UhFCpjHCYDSxV/Fs05u40gSb7C7raX8 7oUFeF3rC24FqjDEufeqfcvOc3NwS9bgiUbLSEKu2l5nNZOuhfSgLTd+LOKWvlm9 sRepfJQXSOocEX6PR0rLnvIMER2EijC8 -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:24 2025 by rpki-client