$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft File: DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft (raw, json) Hash identifier: RVvxuoG4KMpHGfFQSfPEda5oVz+uND6KpRFrpChi0gg= Subject key identifier: F4:3E:4B:0D:5A:F2:91:78:F2:9E:D1:95:2C:91:88:17:D4:10:23:76 Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 Certificate issuer: /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft Manifest number: 037A Signing time: Sat 17 May 2025 01:09:35 +0000 Manifest this update: Sat 17 May 2025 01:09:34 +0000 Manifest next update: Sat 24 May 2025 01:09:34 +0000 Files and hashes: 1: DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl (hash: yHblldspUNK93Evnjw7RSfCgYpqNQeTa6I9YilpuXBE=) 2: E747F80C6AA411EDB76B7A36C4F9AE02.roa (hash: dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153838, serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15 Validity Not Before: May 17 01:09:34 2025 GMT Not After : May 24 01:09:34 2025 GMT Subject: CN=6827e1cf-e8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:1a:76:ed:43:35:ad:f3:1c:ff:8e:86:e4: fe:43:fc:85:c7:1b:2f:9e:cb:38:f1:83:90:a2:81: 1a:7d:ee:e9:88:e6:1f:6e:fc:23:5c:bc:d1:6f:34: ef:a2:39:f8:fd:67:24:f0:eb:ef:7a:a7:11:dc:6b: b6:d0:e4:ef:d5:05:5d:c9:7c:c8:2f:7e:08:cd:31: d2:55:f2:d8:dd:e8:7a:55:34:d0:f7:42:da:f1:97: 54:21:af:e7:90:7f:72:ee:c3:18:74:21:00:bc:3d: db:8e:d4:9f:ab:46:4b:f0:21:7a:9b:66:7f:1a:79: 4e:5f:d2:0d:65:34:a6:be:98:54:d7:35:57:81:11: 83:27:c4:1a:d7:f4:a0:7a:c4:73:d7:af:b9:33:09: 01:d1:ac:86:35:25:55:8b:a0:b0:1f:88:d8:83:8e: 8e:ff:7e:e4:49:0c:53:6d:d4:90:8d:d8:d9:65:b4: db:3d:f0:eb:c1:d6:cc:03:3b:ab:02:c8:97:65:21: ff:9a:48:0b:c8:64:ea:40:74:7f:d4:91:fc:72:ab: db:1e:de:b7:e5:b6:d0:e4:2c:5d:57:5c:37:be:89: 4e:78:d8:95:c0:33:d8:ca:93:1a:06:f4:ce:1b:1d: 6d:6a:2e:c7:93:9f:81:d6:38:ee:77:e1:96:4a:7c: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:4B:0D:5A:F2:91:78:F2:9E:D1:95:2C:91:88:17:D4:10:23:76 X509v3 Authority Key Identifier: keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:2d:f5:bb:d1:0d:cd:69:06:fb:b4:ed:0c:83:75:5d:03:89: 99:23:2b:5e:29:a7:f5:57:49:31:ce:ee:d0:a3:28:a3:78:79: 46:98:52:e7:c2:63:9a:b2:67:c9:a7:ee:0d:89:08:97:8e:93: 43:ff:d6:fa:f2:5a:30:c5:1d:de:fc:35:02:64:13:43:07:33: 04:4a:8e:26:0d:c4:fb:4e:c8:40:99:e8:cc:78:7e:0e:d2:ca: 25:9d:6d:df:1c:7c:a8:30:be:46:59:e8:98:af:da:52:34:fd: a0:45:f1:ff:b2:17:b2:a9:9e:62:88:18:4a:df:a2:63:5b:88: ec:9e:a6:de:51:38:f6:11:a3:ad:05:33:62:fe:94:b1:cb:8c: 43:6d:c3:f8:79:d8:5c:00:b5:f8:bc:55:00:86:88:13:91:f2: c3:a7:38:23:c3:f2:9b:fb:b4:af:3e:91:67:50:0a:8e:3a:6a: ec:5a:f9:69:6e:d4:cc:49:c7:05:f1:bc:be:4a:e1:9f:eb:93: 4d:8d:e7:05:f8:00:4a:4a:9b:83:93:63:a6:fa:c5:ee:f8:99: 9a:14:14:d2:78:46:f8:1f:06:85:f7:12:0a:c8:56:bc:40:8d: a7:80:e7:fc:1e:df:2d:10:5e:1d:2b:91:8f:3b:45:19:53:19: 72:f5:24:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4MzgxMTAvBgNVBAUTKDBDOUE0Njk5ODg5NjE3NzhFMkQxMUU4QUU4QTQzRTQ4 Mjk2REFEMTUwHhcNMjUwNTE3MDEwOTM0WhcNMjUwNTI0MDEwOTM0WjAYMRYwFAYD VQQDEw02ODI3ZTFjZi1lOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEsadu1DNa3zHP+OhuT+Q/yFxxsvnss48YOQooEafe7piOYfbvwjXLzRbzTv ojn4/Wck8OvveqcR3Gu20OTv1QVdyXzIL34IzTHSVfLY3eh6VTTQ90La8ZdUIa/n kH9y7sMYdCEAvD3bjtSfq0ZL8CF6m2Z/GnlOX9INZTSmvphU1zVXgRGDJ8Qa1/Sg esRz16+5MwkB0ayGNSVVi6CwH4jYg46O/37kSQxTbdSQjdjZZbTbPfDrwdbMAzur AsiXZSH/mkgLyGTqQHR/1JH8cqvbHt635bbQ5CxdV1w3volOeNiVwDPYypMaBvTO Gx1tai7Hk5+B1jjud+GWSnxPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ+Sw1a 8pF48p7RlSyRiBfUECN2MB8GA1UdIwQYMBaAFAyaRpmIlhd44tEeiuikPkgpba0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzgzOC85RUNBNDU1NkE2 N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0YzamkwUjZLNktRLVNDbHRy UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RKcEdtWWlXRjNqaTBSNks2S1EtU0NsdHJSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzgzOC85RUNBNDU1NkE2N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0Yz amkwUjZLNktRLVNDbHRyUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8LfW70Q3NaQb7tO0Mg3VdA4mZIyteKaf1V0kxzu7QoyijeHlGmFLn wmOasmfJp+4NiQiXjpND/9b68lowxR3e/DUCZBNDBzMESo4mDcT7TshAmejMeH4O 0solnW3fHHyoML5GWeiYr9pSNP2gRfH/sheyqZ5iiBhK36JjW4jsnqbeUTj2EaOt BTNi/pSxy4xDbcP4edhcALX4vFUAhogTkfLDpzgjw/Kb+7SvPpFnUAqOOmrsWvlp btTMSccF8by+SuGf65NNjecF+ABKSpuDk2Om+sXu+JmaFBTSeEb4HwaF9xIKyFa8 QI2ngOf8Ht8tEF4dK5GPO0UZUxly9SRX -----END CERTIFICATE-----Generated at Sat May 17 06:01:46 2025 by rpki-client