$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json) Hash identifier: m2L0QswUDTDUHS/3oQQ82zqE8rtF46fWDr2RJYaCImQ= Subject key identifier: 12:7D:EA:FE:4B:96:88:AE:D3:1D:E5:CE:53:04:2C:47:D1:54:10:41 Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft Manifest number: 025B Signing time: Fri 13 Jun 2025 01:18:47 +0000 Manifest this update: Fri 13 Jun 2025 01:18:47 +0000 Manifest next update: Fri 20 Jun 2025 01:18:47 +0000 Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: pVapXmUeATgo/blpBWY3jTi1onXMd9mA5Vd7pIwZXf0=) 2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B Validity Not Before: Jun 13 01:18:47 2025 GMT Not After : Jun 20 01:18:47 2025 GMT Subject: CN=684b7c77-e405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:91:7d:00:96:1d:10:79:1a:44:11:43:ee: 09:8c:16:ca:76:d7:08:1e:08:23:af:db:0c:30:7b: 1d:ba:3e:94:b6:76:02:84:16:ca:cb:bc:f4:c5:0f: 3b:39:b4:68:8f:e4:ae:af:35:bf:93:9d:69:1d:06: 77:8f:c6:2b:af:cc:5f:92:b7:80:0d:49:86:5e:ac: 27:d8:6e:9c:ba:62:10:69:2f:6c:e1:32:11:0a:9e: 51:d0:80:cf:66:17:14:80:a4:be:1e:58:3f:60:29: 24:f7:c8:66:db:d6:0c:ee:53:80:12:38:7e:85:8c: 82:dc:7a:a7:54:7f:f8:f8:48:21:0b:0b:eb:41:f7: 65:ee:b2:9a:6b:6d:15:16:7c:b0:40:94:f8:47:30: 42:82:bf:02:86:3d:a8:b7:1e:19:7b:ce:15:d8:11: 34:aa:55:6a:25:76:27:bf:95:29:f1:2e:c7:ea:fa: 1e:5b:8a:89:66:db:da:a6:6f:70:1c:a1:15:de:42: 21:c4:8f:3c:84:2c:7d:04:76:bb:87:fa:c2:75:66: 2f:3b:d8:48:bf:d6:1b:8d:e1:72:1e:c2:3c:01:bb: b1:b4:51:e5:77:18:27:dc:99:c8:1d:72:32:ad:f6: 5f:43:b5:50:5b:24:9e:a2:45:db:24:33:82:22:5b: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:EA:FE:4B:96:88:AE:D3:1D:E5:CE:53:04:2C:47:D1:54:10:41 X509v3 Authority Key Identifier: keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8d:6e:b0:27:a6:c5:6f:38:0c:ba:e4:f8:ef:3f:e4:6c:44: de:7d:a9:fe:46:e1:36:55:5c:d2:b8:8a:68:3c:b4:b3:4f:06: d5:73:be:18:b6:bd:eb:d2:ab:08:a2:85:72:07:8d:9a:cd:64: 09:bc:a1:b8:a2:c6:0d:5f:9a:9f:fc:55:35:11:71:4b:ac:5a: 85:5c:73:c0:65:81:40:2b:86:7e:d8:0c:18:63:18:f7:dc:c7: d8:0a:b7:d8:d8:cb:96:0f:2d:16:00:3e:d5:48:3e:54:59:1e: 43:13:d0:02:4d:25:5e:a2:1a:14:4a:0b:22:e9:41:9c:dc:50: 53:9b:3a:27:a9:a7:97:1d:d6:26:d1:9b:08:75:20:ec:4b:2c: 35:e8:43:f7:bd:53:d4:56:5f:c7:f3:d2:b3:f5:4d:6a:c2:c0: 04:12:52:8f:f4:f2:21:44:73:98:bb:d5:26:14:09:84:b0:0a: 4b:21:21:8f:d2:85:5d:cd:8c:c9:e1:0a:05:91:f8:63:02:db: b6:d7:59:50:d2:50:6a:51:58:51:a9:53:56:3a:c5:0f:93:2b: 5f:89:60:73:63:95:4a:1a:3a:62:89:33:b0:ca:fa:10:98:e0: ab:e9:1d:61:7e:8a:bd:ce:24:44:aa:99:c1:77:31:63:62:3d: a3:62:b6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NjExMTAvBgNVBAUTKDMzQjBENTY4OTUwNDgzNkMxMUU5RUNERDBEMTE5QzA1 OEQzRjc2MEIwHhcNMjUwNjEzMDExODQ3WhcNMjUwNjIwMDExODQ3WjAYMRYwFAYD VQQDEw02ODRiN2M3Ny1lNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CORfQCWHRB5GkQRQ+4JjBbKdtcIHggjr9sMMHsduj6UtnYChBbKy7z0xQ87 ObRoj+SurzW/k51pHQZ3j8Yrr8xfkreADUmGXqwn2G6cumIQaS9s4TIRCp5R0IDP ZhcUgKS+Hlg/YCkk98hm29YM7lOAEjh+hYyC3HqnVH/4+EghCwvrQfdl7rKaa20V FnywQJT4RzBCgr8Chj2otx4Ze84V2BE0qlVqJXYnv5Up8S7H6voeW4qJZtvapm9w HKEV3kIhxI88hCx9BHa7h/rCdWYvO9hIv9YbjeFyHsI8AbuxtFHldxgn3JnIHXIy rfZfQ7VQWySeokXbJDOCIltYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ96v5L loiu0x3lzlMELEfRVBBBMB8GA1UdIwQYMBaAFDOw1WiVBINsEens3Q0RnAWNP3YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk2MS9GRUJCRkE4MDFC RTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcyd1I2ZXpkRFJHY0JZMF9k Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003RFZhSlVFZzJ3UjZlemREUkdjQlkwX2Rncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk2MS9GRUJCRkE4MDFCRTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcy d1I2ZXpkRFJHY0JZMF9kZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBejW6wJ6bFbzgMuuT47z/kbETefan+RuE2VVzSuIpoPLSzTwbVc74Y tr3r0qsIooVyB42azWQJvKG4osYNX5qf/FU1EXFLrFqFXHPAZYFAK4Z+2AwYYxj3 3MfYCrfY2MuWDy0WAD7VSD5UWR5DE9ACTSVeohoUSgsi6UGc3FBTmzonqaeXHdYm 0ZsIdSDsSyw16EP3vVPUVl/H89Kz9U1qwsAEElKP9PIhRHOYu9UmFAmEsApLISGP 0oVdzYzJ4QoFkfhjAtu211lQ0lBqUVhRqVNWOsUPkytfiWBzY5VKGjpiiTOwyvoQ mOCr6R1hfoq9ziREqpnBdzFjYj2jYrZV -----END CERTIFICATE-----Generated at Sat Jun 14 17:30:44 2025 by rpki-client