$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: 2De7xp7eYql+aymERPYcA7i62fG5Z4TKF7+gnUwFyLI= Subject key identifier: 4A:40:57:FA:27:FB:43:73:1A:FC:98:40:9F:8A:7A:2A:2E:5B:96:FB Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 2F Signing time: Tue 13 May 2025 06:53:36 +0000 Manifest this update: Tue 13 May 2025 06:53:35 +0000 Manifest next update: Tue 20 May 2025 06:53:35 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: Wl56gK6ABby98LjBMgQte9j18fzb5SqWaqkMHcR4s9E=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: May 13 06:53:35 2025 GMT Not After : May 20 06:53:35 2025 GMT Subject: CN=6822ec6f-7ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:b0:aa:2f:a7:80:6d:a5:e3:8c:7e:79:16: 71:05:eb:77:f3:b2:5f:10:42:d1:75:8a:bf:b5:f0: 1d:8a:8d:7e:8f:a6:1a:d5:f4:e2:87:ac:0b:27:45: 05:01:52:08:dc:45:83:24:eb:59:77:11:c5:c4:58: 1f:ab:c0:5a:38:5d:fe:31:1f:42:ec:cd:c7:cb:dd: 50:17:5b:26:00:9b:08:bf:7b:35:2c:46:40:8d:d4: b4:95:60:f9:0e:28:d3:d0:42:5e:83:bc:a8:9d:e5: 25:5f:28:3c:f0:09:ea:d4:42:58:9f:e8:76:0e:67: 69:e5:71:ae:f4:a1:59:00:77:62:0c:2e:eb:ce:22: f7:5c:2f:9b:73:67:67:c3:85:56:32:d8:60:95:6a: 27:8a:ce:70:e7:d9:c3:a5:c1:37:2f:70:33:01:be: 62:57:63:ec:f9:86:7d:8a:95:05:ba:4b:68:88:06: 06:4f:fa:0b:70:ae:8b:28:ea:5b:4e:e9:e7:4f:f0: 36:7c:d6:f3:b2:ce:a4:49:99:c2:a2:35:33:f9:f6: 78:c7:7e:47:a3:2e:52:15:c4:8e:77:9f:f8:4d:e9: 91:e0:a9:54:c8:d1:d5:7f:97:fa:c0:7f:8f:75:38: 4f:af:9e:65:2f:18:6e:bb:58:6d:64:d4:ae:f3:1b: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:40:57:FA:27:FB:43:73:1A:FC:98:40:9F:8A:7A:2A:2E:5B:96:FB X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:07:c1:72:71:60:a1:84:fa:0c:66:5c:c3:de:25:3b:02:3e: 4d:d9:e8:5c:bc:04:80:5e:b7:4f:1f:bc:5b:2a:26:6b:ff:aa: d3:6b:c8:c9:4f:72:51:8e:03:ad:70:7c:1c:2f:a3:cb:c3:2e: e2:c7:2a:0f:b4:da:c6:4a:a9:b3:6f:20:f7:56:49:3d:4e:65: 06:5f:c5:38:e4:4b:57:86:3c:a2:f9:27:4a:85:5a:d7:aa:43: 78:39:79:48:24:67:90:3c:37:81:2d:ff:af:9e:49:25:68:fb: e7:79:b6:d5:60:7d:44:35:af:0b:9b:a4:52:c4:ae:3f:f2:d1: e3:10:76:5f:b6:0b:cc:c2:af:cc:f9:f5:8d:c4:1f:60:08:9d: 7b:7e:ce:9e:c3:c1:9a:83:0c:89:87:df:aa:93:a9:7f:9c:b1: d0:76:08:5c:a0:8a:bf:6d:7a:71:0f:21:43:00:fa:41:8d:cd: b7:36:f4:45:c2:44:1d:82:ea:6b:da:9a:3f:84:eb:ba:49:ae: 8d:16:b9:76:25:a1:69:ee:b0:86:16:29:e6:76:7a:7b:da:1c: 09:02:d6:f0:32:d9:0f:9f:93:03:a4:6e:be:9c:6b:1c:98:bc: 8c:48:37:81:72:83:c2:d6:a4:3e:1f:2c:07:c5:b2:9f:bc:26: 74:cc:c3:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JDRjExMC8GA1UEBRMoMEM4NTU5RDIzM0RCRkJBRkJEMTAzMjIyOTk4NURGM0RG OTEzNDhGQzAeFw0yNTA1MTMwNjUzMzVaFw0yNTA1MjAwNjUzMzVaMBgxFjAUBgNV BAMTDTY4MjJlYzZmLTdhZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlW7CqL6eAbaXjjH55FnEF63fzsl8QQtF1ir+18B2KjX6PphrV9OKHrAsnRQUB UgjcRYMk61l3EcXEWB+rwFo4Xf4xH0LszcfL3VAXWyYAmwi/ezUsRkCN1LSVYPkO KNPQQl6DvKid5SVfKDzwCerUQlif6HYOZ2nlca70oVkAd2IMLuvOIvdcL5tzZ2fD hVYy2GCVaieKznDn2cOlwTcvcDMBvmJXY+z5hn2KlQW6S2iIBgZP+gtwroso6ltO 6edP8DZ81vOyzqRJmcKiNTP59njHfkejLlIVxI53n/hN6ZHgqVTI0dV/l/rAf491 OE+vnmUvGG67WG1k1K7zGwhxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSkBX+if7 Q3Ma/JhAn4p6Ki5blvswHwYDVR0jBBgwFoAUDIVZ0jPb+6+9EDIimYXfPfkTSPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkNGLzVFNzhCNjE0RUE3 MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRElWWjBqUGItNi05RURJaW1ZWGZQZmtUU1B3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkNGLzVFNzhCNjE0RUE3MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYt OUVESWltWVhmUGZrVFNQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcHwXJxYKGE+gxmXMPeJTsCPk3Z6Fy8BIBet08fvFsqJmv/qtNryMlP clGOA61wfBwvo8vDLuLHKg+02sZKqbNvIPdWST1OZQZfxTjkS1eGPKL5J0qFWteq Q3g5eUgkZ5A8N4Et/6+eSSVo++d5ttVgfUQ1rwubpFLErj/y0eMQdl+2C8zCr8z5 9Y3EH2AInXt+zp7DwZqDDImH36qTqX+csdB2CFygir9tenEPIUMA+kGNzbc29EXC RB2C6mvamj+E67pJro0WuXYloWnusIYWKeZ2envaHAkC1vAy2Q+fkwOkbr6caxyY vIxIN4Fyg8LWpD4fLAfFsp+8JnTMw3o= -----END CERTIFICATE-----Generated at Tue May 13 18:34:27 2025 by rpki-client