$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: HbS7PoQK8CUtpzH5nDoZTADoAMXeYD3jVdTOCh3sN4Q= Subject key identifier: A7:9B:51:C7:CA:74:C9:65:D2:3F:0F:32:D1:5C:94:5D:25:D3:EB:0A Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 7F Signing time: Sun 19 Oct 2025 10:00:07 +0000 Manifest this update: Sun 19 Oct 2025 10:00:06 +0000 Manifest next update: Sun 26 Oct 2025 10:00:06 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: OF3IQ7ya3ckt5vWoHFDY6Xx+ktjNw7j1B+mLhJwKgrc=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: Oct 19 10:00:06 2025 GMT Not After : Oct 26 10:00:06 2025 GMT Subject: CN=68f4b6a6-70ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:0d:79:ca:ff:de:08:7c:50:78:32:15:92: f4:a7:26:b2:69:99:70:44:57:83:1f:d4:a4:2e:bd: 16:08:dd:b1:49:a2:10:64:8f:a1:50:1d:ff:bf:4a: 95:65:f4:35:b4:79:0d:ae:8e:54:dc:ce:b1:ca:d2: ea:3d:36:9f:51:dd:4b:70:de:bf:1c:8d:c6:bb:2f: 10:76:df:03:c2:5d:cf:b9:46:3b:91:1a:a4:3c:14: 2f:82:b8:85:95:4f:32:b2:e6:10:2e:b7:a0:ee:82: e7:03:98:6d:a5:f2:0f:56:e8:2a:45:1e:fe:6f:ec: 04:2d:d4:54:e5:4c:ea:ea:50:49:65:7e:ba:1b:19: 88:32:ee:d0:cb:04:9b:64:c3:db:04:f7:e0:7d:af: 32:ac:ac:84:26:50:91:82:bf:ce:4e:bd:82:2e:c1: 2e:bb:ec:ca:5b:32:25:51:87:cf:6d:2c:0f:a3:93: 13:b3:b4:45:04:d2:d5:72:56:64:b4:8d:3b:7a:00: 45:82:da:be:01:42:1a:05:4c:25:00:aa:c3:6b:f0: aa:37:99:3f:04:44:93:2f:23:c3:a6:ab:45:9b:d1: e1:77:55:52:3d:1e:fe:ef:78:04:e7:0e:ae:04:d9: 54:f7:39:c6:d7:1e:92:2d:3b:c8:50:5f:2a:0c:66: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:51:C7:CA:74:C9:65:D2:3F:0F:32:D1:5C:94:5D:25:D3:EB:0A X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:42:b0:7e:71:95:fc:8f:ad:63:ea:e1:76:8e:92:84:49:6c: f5:87:20:8c:68:17:ad:1b:38:cc:f8:b2:2c:63:25:58:fd:0f: 13:f1:87:e3:a8:19:89:68:5b:2c:a5:af:74:c1:af:4c:5b:c1: 58:b2:7e:18:93:fd:97:27:23:20:a2:51:be:91:56:65:e9:9c: eb:ac:bd:f2:9f:ff:07:2c:68:83:f5:04:ba:39:5f:a2:19:4a: 8c:c9:fa:0a:7f:f3:7a:5a:3b:5c:6f:3d:eb:54:87:85:32:fe: dd:2c:a4:a2:9d:0c:17:24:01:55:d9:e2:14:23:b4:d8:e5:87: 3e:21:96:71:ff:c8:35:ad:a1:af:55:b2:2b:d8:5b:94:d3:1f: 71:45:6a:0d:50:c2:64:9c:ad:63:3d:8a:f4:ba:f7:71:2d:fe: c5:9d:09:02:d3:53:5a:8f:9f:99:41:f3:91:bf:63:8f:e5:81: 16:e1:a0:e2:40:b9:19:49:5f:bb:a1:81:0f:d2:90:fd:42:4b: fe:3c:2d:a8:c9:60:56:73:63:7c:1d:e9:17:d2:0e:e9:57:46: 0e:8b:1e:f2:00:49:b4:c4:97:f5:01:82:ed:5a:67:b9:1d:76: 5c:30:63:7c:53:92:9c:f3:e7:8f:85:0b:c9:fa:0f:09:67:16: 2e:a1:c8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQ0YxMTAvBgNVBAUTKDBDODU1OUQyMzNEQkZCQUZCRDEwMzIyMjk5ODVERjNE RjkxMzQ4RkMwHhcNMjUxMDE5MTAwMDA2WhcNMjUxMDI2MTAwMDA2WjAYMRYwFAYD VQQDEw02OGY0YjZhNi03MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLANecr/3gh8UHgyFZL0pyayaZlwRFeDH9SkLr0WCN2xSaIQZI+hUB3/v0qV ZfQ1tHkNro5U3M6xytLqPTafUd1LcN6/HI3Guy8Qdt8Dwl3PuUY7kRqkPBQvgriF lU8ysuYQLreg7oLnA5htpfIPVugqRR7+b+wELdRU5Uzq6lBJZX66GxmIMu7QywSb ZMPbBPfgfa8yrKyEJlCRgr/OTr2CLsEuu+zKWzIlUYfPbSwPo5MTs7RFBNLVclZk tI07egBFgtq+AUIaBUwlAKrDa/CqN5k/BESTLyPDpqtFm9Hhd1VSPR7+73gE5w6u BNlU9znG1x6SLTvIUF8qDGZ6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKebUcfK dMll0j8PMtFclF0l0+sKMB8GA1UdIwQYMBaAFAyFWdIz2/uvvRAyIpmF3z35E0j8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JDRi81RTc4QjYxNEVB NzMxMUVGQUM4QkM5MTFDNEY5QUUwMi9ESVZaMGpQYi02LTlFRElpbVlYZlBma1RT UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JDRi81RTc4QjYxNEVBNzMxMUVGQUM4QkM5MTFDNEY5QUUwMi9ESVZaMGpQYi02 LTlFRElpbVlYZlBma1RTUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQrB+cZX8j61j6uF2jpKESWz1hyCMaBetGzjM+LIsYyVY/Q8T8Yfj qBmJaFsspa90wa9MW8FYsn4Yk/2XJyMgolG+kVZl6ZzrrL3yn/8HLGiD9QS6OV+i GUqMyfoKf/N6Wjtcbz3rVIeFMv7dLKSinQwXJAFV2eIUI7TY5Yc+IZZx/8g1raGv VbIr2FuU0x9xRWoNUMJknK1jPYr0uvdxLf7FnQkC01Naj5+ZQfORv2OP5YEW4aDi QLkZSV+7oYEP0pD9Qkv+PC2oyWBWc2N8HekX0g7pV0YOix7yAEm0xJf1AYLtWme5 HXZcMGN8U5Kc8+ePhQvJ+g8JZxYuocjb -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:31 2025 by rpki-client