$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: QHPleN53F43U7ufYkhaVJtk4hhL3RHBwWhMHpY6n/vo= Subject key identifier: A9:DF:0B:8B:1E:E6:0B:57:86:E8:8D:09:FB:79:19:FE:64:7D:0B:B3 Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 48 Signing time: Thu 03 Jul 2025 07:36:45 +0000 Manifest this update: Thu 03 Jul 2025 07:36:44 +0000 Manifest next update: Thu 10 Jul 2025 07:36:44 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: oEJkk7aPSuevQwUyzNdOQOjeGr6jFMGxTkwrXbn6bYM=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: Jul 3 07:36:44 2025 GMT Not After : Jul 10 07:36:44 2025 GMT Subject: CN=6866330c-18f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:93:72:ad:4e:58:25:b4:21:8d:19:48:b5: 52:24:8c:4a:ed:23:07:50:06:0d:ea:bf:95:41:4a: f7:4b:82:10:3d:77:8b:2d:fc:81:39:ae:fe:6c:72: 69:f7:c3:df:14:45:b8:9c:43:e9:0b:8e:40:e5:0a: a9:67:5d:4b:a9:fd:86:5d:f8:2b:b1:df:1d:74:e2: e9:91:5f:f4:4f:d8:2d:05:ed:99:b1:b8:1e:50:0d: 48:ec:ea:5a:0e:6c:7b:57:98:9c:eb:39:00:b5:fd: 82:5e:aa:90:0c:ab:bc:44:d6:9b:24:43:c1:8b:de: 8e:e0:58:a4:be:f6:68:88:d1:c5:84:a6:e3:91:bc: 5f:45:86:8e:da:36:d8:0a:46:5d:a3:8a:5e:57:6f: d9:e6:13:80:57:44:25:4c:77:75:01:da:6e:7f:25: e2:83:d9:ce:f1:da:14:9f:98:e9:5a:06:71:6b:54: d0:d9:52:7e:15:3d:de:c8:94:69:88:66:c4:7f:fb: bb:1e:48:82:e7:62:67:9b:a1:f6:49:00:49:c9:eb: 2f:d6:a8:a4:6c:d3:33:9e:01:b4:d1:d3:c9:38:3f: 6e:b9:ad:bd:bd:d1:18:86:30:d1:0a:c2:cf:4a:22: df:1e:16:62:d1:91:ab:00:63:b7:26:74:0c:44:86: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:0B:8B:1E:E6:0B:57:86:E8:8D:09:FB:79:19:FE:64:7D:0B:B3 X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1a:39:ff:2d:02:95:9b:0c:c9:f9:2e:a0:b0:6e:5b:ad:a1: 45:30:0c:c8:b0:7b:e2:17:d2:79:02:3b:c9:28:7d:72:de:34: d3:32:b9:03:38:53:8d:03:8d:59:f9:61:22:eb:6b:09:4b:5e: d1:7c:1e:b1:1e:91:38:94:0b:21:6b:05:56:2c:56:a0:e1:a9: 71:32:f4:6c:84:86:bb:7a:18:18:df:4f:c5:b4:01:62:db:e8: 1d:64:3c:41:25:2b:e1:c7:e8:68:21:59:e0:88:b8:04:24:77: f5:bb:3a:e0:d6:0d:7f:24:d1:66:53:7f:32:4b:5c:a3:38:af: bd:99:85:cb:82:b1:23:1d:44:83:25:41:20:3f:6b:25:38:62: 00:44:94:4c:79:f6:f8:a9:cb:fd:60:04:84:a8:a0:37:61:72: dd:7a:e4:03:26:b0:04:7a:ba:61:cb:e5:a0:b1:08:4a:9c:94: 0a:31:63:ef:bd:95:29:8b:16:92:73:c4:db:3c:95:7c:04:70: 2a:d5:2e:e3:8e:3a:2c:c8:76:d0:2d:ee:68:23:28:10:d5:76: 18:82:ee:1b:41:a4:ba:05:16:4f:ac:97:75:31:43:e3:00:20: 36:dc:53:a0:a0:36:9d:91:6b:ba:b3:4d:35:70:29:77:8f:0a: 40:a1:88:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JDRjExMC8GA1UEBRMoMEM4NTU5RDIzM0RCRkJBRkJEMTAzMjIyOTk4NURGM0RG OTEzNDhGQzAeFw0yNTA3MDMwNzM2NDRaFw0yNTA3MTAwNzM2NDRaMBgxFjAUBgNV BAMTDTY4NjYzMzBjLTE4ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKD5NyrU5YJbQhjRlItVIkjErtIwdQBg3qv5VBSvdLghA9d4st/IE5rv5scmn3 w98URbicQ+kLjkDlCqlnXUup/YZd+Cux3x104umRX/RP2C0F7ZmxuB5QDUjs6loO bHtXmJzrOQC1/YJeqpAMq7xE1pskQ8GL3o7gWKS+9miI0cWEpuORvF9Fho7aNtgK Rl2jil5Xb9nmE4BXRCVMd3UB2m5/JeKD2c7x2hSfmOlaBnFrVNDZUn4VPd7IlGmI ZsR/+7seSILnYmebofZJAEnJ6y/WqKRs0zOeAbTR08k4P265rb290RiGMNEKws9K It8eFmLRkasAY7cmdAxEhtebAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqd8Lix7m C1eG6I0J+3kZ/mR9C7MwHwYDVR0jBBgwFoAUDIVZ0jPb+6+9EDIimYXfPfkTSPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkNGLzVFNzhCNjE0RUE3 MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRElWWjBqUGItNi05RURJaW1ZWGZQZmtUU1B3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkNGLzVFNzhCNjE0RUE3MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYt OUVESWltWVhmUGZrVFNQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKEaOf8tApWbDMn5LqCwblutoUUwDMiwe+IX0nkCO8kofXLeNNMyuQM4 U40DjVn5YSLrawlLXtF8HrEekTiUCyFrBVYsVqDhqXEy9GyEhrt6GBjfT8W0AWLb 6B1kPEElK+HH6GghWeCIuAQkd/W7OuDWDX8k0WZTfzJLXKM4r72ZhcuCsSMdRIMl QSA/ayU4YgBElEx59vipy/1gBISooDdhct165AMmsAR6umHL5aCxCEqclAoxY++9 lSmLFpJzxNs8lXwEcCrVLuOOOizIdtAt7mgjKBDVdhiC7htBpLoFFk+sl3UxQ+MA IDbcU6CgNp2Ra7qzTTVwKXePCkChiHQ= -----END CERTIFICATE-----Generated at Fri Jul 4 18:16:17 2025 by rpki-client