$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: GEa7nH0MqW43hfwZezrGo/wqxbwkn6vWC0M7YBC3GSs= Subject key identifier: 4D:AC:B4:BB:35:F0:3D:70:EF:81:0B:49:BD:BF:23:1C:4F:F4:AF:27 Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0C0D Signing time: Fri 04 Jul 2025 19:02:40 +0000 Manifest this update: Fri 04 Jul 2025 19:02:39 +0000 Manifest next update: Fri 11 Jul 2025 19:02:39 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: U+aMBsXUGtZ03xgZrI36A/0OQdHAS8ezpTFVsCAh26U=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Jul 4 19:02:39 2025 GMT Not After : Jul 11 19:02:39 2025 GMT Subject: CN=6868254f-be20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:43:bb:29:df:da:eb:89:92:6a:d5:4e:d0: 15:90:de:51:7c:0c:d6:1f:b1:9f:af:02:16:0e:75: a2:81:a5:b0:b7:f0:c5:7d:a7:9b:4d:2d:a7:83:ac: 64:33:c1:e4:1d:94:9e:c9:a4:6b:80:f5:b3:77:31: f7:56:24:64:43:8e:01:d8:fe:9d:a3:7d:64:28:e4: f4:d8:73:4b:bb:90:c9:c0:96:85:97:5f:94:31:aa: ba:7f:b6:8d:ed:9d:27:e6:c6:73:26:4c:39:61:47: e8:69:15:bf:d1:99:13:6d:dd:80:dd:b3:98:99:5f: 8e:b0:26:bd:41:e2:a4:c6:62:fc:bb:1f:33:29:5b: f9:d3:d7:47:7d:55:3c:67:50:03:cf:be:76:68:68: 98:80:c8:ef:ff:0b:95:6b:03:32:52:d0:db:5d:0a: 86:6a:bf:aa:3e:79:65:6f:16:1f:12:a7:08:76:3b: aa:5c:c9:51:aa:43:9c:74:06:66:40:60:1a:c5:53: 98:aa:9a:67:de:d9:c9:1d:d8:46:35:e5:9e:0d:2f: 12:e7:cf:35:2d:19:2b:07:a6:68:bf:31:45:fa:73: 5d:59:e4:6e:d3:48:e3:26:f7:00:e7:b9:13:23:0e: cb:db:e9:1e:2f:bc:f6:3b:1d:99:5c:48:be:f1:b6: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AC:B4:BB:35:F0:3D:70:EF:81:0B:49:BD:BF:23:1C:4F:F4:AF:27 X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:02:24:4d:18:ae:2d:e0:c4:b9:c5:dd:50:4f:15:3b:c3:66: e4:63:db:59:48:d4:84:a7:2a:52:38:33:5f:5f:30:34:a2:62: d3:c6:a4:77:6e:b3:78:cc:40:49:82:a5:3c:9e:b8:33:a9:96: 7f:8a:26:72:f8:3e:06:26:86:50:f0:61:8c:7f:7d:ec:c5:d4: 3a:70:a7:45:07:9b:f9:e7:44:43:83:0e:ba:77:ec:89:03:d3: c5:dd:7c:81:d4:fa:f3:43:c4:89:bb:fc:27:95:fc:78:2a:73: d4:3f:76:e8:1a:a0:1d:39:b2:7b:c8:9c:13:aa:c3:ba:6c:2b: 86:10:ce:fd:91:ce:64:0b:f2:ac:70:29:00:d2:48:e9:e0:5c: ce:55:f2:87:9d:91:4f:77:17:68:bf:72:15:a0:31:61:a6:f6: 8f:e0:07:a0:b9:9b:69:ce:08:c7:29:90:e6:a0:83:d6:54:0d: 8b:ea:e8:21:7d:0e:3e:4f:de:6c:2a:4a:f7:22:19:6e:b9:f9: df:73:7b:c1:b6:d6:16:18:40:61:94:dc:fc:ea:b8:ac:0b:96: 16:f2:64:01:c0:c5:5e:94:49:4b:52:d1:0e:22:8a:f6:3a:25: 50:58:b4:92:8c:aa:a5:95:ff:a9:70:07:51:2b:0f:15:a6:3f: f5:a6:25:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwNzA0MTkwMjM5WhcNMjUwNzExMTkwMjM5WjAYMRYwFAYD VQQDEw02ODY4MjU0Zi1iZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnitDuynf2uuJkmrVTtAVkN5RfAzWH7GfrwIWDnWigaWwt/DFfaebTS2ng6xk M8HkHZSeyaRrgPWzdzH3ViRkQ44B2P6do31kKOT02HNLu5DJwJaFl1+UMaq6f7aN 7Z0n5sZzJkw5YUfoaRW/0ZkTbd2A3bOYmV+OsCa9QeKkxmL8ux8zKVv509dHfVU8 Z1ADz752aGiYgMjv/wuVawMyUtDbXQqGar+qPnllbxYfEqcIdjuqXMlRqkOcdAZm QGAaxVOYqppn3tnJHdhGNeWeDS8S5881LRkrB6ZovzFF+nNdWeRu00jjJvcA57kT Iw7L2+keL7z2Ox2ZXEi+8bYIfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2stLs1 8D1w74ELSb2/IxxP9K8nMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0AiRNGK4t4MS5xd1QTxU7w2bkY9tZSNSEpypSODNfXzA0omLTxqR3 brN4zEBJgqU8nrgzqZZ/iiZy+D4GJoZQ8GGMf33sxdQ6cKdFB5v550RDgw66d+yJ A9PF3XyB1PrzQ8SJu/wnlfx4KnPUP3boGqAdObJ7yJwTqsO6bCuGEM79kc5kC/Ks cCkA0kjp4FzOVfKHnZFPdxdov3IVoDFhpvaP4AeguZtpzgjHKZDmoIPWVA2L6ugh fQ4+T95sKkr3Ihluufnfc3vBttYWGEBhlNz86risC5YW8mQBwMVelElLUtEOIor2 OiVQWLSSjKqllf+pcAdRKw8Vpj/1piVR -----END CERTIFICATE-----Generated at Sat Jul 5 22:15:39 2025 by rpki-client