$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: BTpOZ5M+gKbcHDX4xfRAxc7yG/Rh4h9vsAzb1YLJn/Y= Subject key identifier: A5:54:83:5B:2C:E7:66:5F:53:73:B3:DA:6B:63:F2:5B:45:13:E9:5C Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0BED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0BE0 Signing time: Fri 04 Apr 2025 18:53:28 +0000 Manifest this update: Fri 04 Apr 2025 18:53:28 +0000 Manifest next update: Fri 11 Apr 2025 18:53:28 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: U0nREudosgde5maAof6HYIVAbipvKbLlyK4dkak7Qyo=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730 Validity Not Before: Apr 4 18:53:28 2025 GMT Not After : Apr 11 18:53:28 2025 GMT Subject: CN=67f02aa8-52fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:a1:dd:14:d8:d9:c5:fe:61:98:5b:50:65: d4:2e:2b:51:95:3e:95:cc:d0:1a:96:ae:80:1e:0a: 37:3a:90:a1:2e:e2:a7:cc:a3:41:ff:b6:e9:fa:9d: de:6c:98:20:56:51:12:da:e5:a4:56:53:05:c0:19: e3:35:dd:9f:0c:0d:be:21:a8:4d:99:17:b2:1c:af: 78:a1:0d:34:de:eb:10:37:af:31:40:d7:27:e2:85: 0b:4e:8f:c6:0a:e6:14:6b:1a:4d:91:e7:c0:31:b5: 90:37:4a:53:c7:46:fe:5b:ba:7c:62:37:95:cc:06: 56:89:98:9f:7b:e3:cb:ab:71:bc:88:b5:ce:b5:ca: b4:76:7a:0c:c2:6b:7e:61:b2:17:1c:18:06:31:bb: d3:82:21:60:63:9b:1f:cd:29:28:d6:04:1b:f6:10: fd:5d:c6:7c:63:b7:93:20:90:08:8c:af:15:88:07: 3f:c0:26:62:17:33:5a:c0:de:a3:31:66:6d:58:30: 23:24:b4:f6:28:5d:1b:c3:1a:cd:31:f4:94:71:67: 85:65:cd:e3:3d:ae:7e:ce:3c:7e:81:96:4b:83:ec: 6e:50:f1:55:89:60:fb:7f:f3:64:e0:b6:4c:e2:9d: dc:c1:78:4f:12:f8:88:5f:8c:e0:3b:18:74:97:d6: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:54:83:5B:2C:E7:66:5F:53:73:B3:DA:6B:63:F2:5B:45:13:E9:5C X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b8:88:6e:81:4f:7b:51:55:75:dc:fa:42:c8:a8:a3:4b:80: a2:27:4b:fa:93:01:b6:5d:6c:11:7c:99:85:40:2f:44:ec:31: f8:20:61:00:04:3e:f3:d9:04:c3:82:8d:32:a3:69:7e:7c:79: 38:b8:08:7f:b7:ad:bb:a2:4e:16:ab:37:a4:cd:e3:dc:08:27: 95:b2:04:03:bc:30:b2:16:14:81:3d:0b:8d:e9:86:ba:6a:70: 1d:85:df:88:5f:80:de:1b:9b:0c:2b:62:89:aa:75:7c:82:f6: 2b:bd:c7:b4:11:ca:0b:56:4d:94:fc:e1:c3:95:c0:b6:0f:d2: 20:8c:c3:34:e3:74:84:df:74:d3:a6:77:2a:6f:c2:d8:c6:34: 6a:af:a7:2c:ba:47:88:1c:2e:c5:c6:27:6b:bb:7d:82:d7:15: 9e:72:2e:ba:98:e4:fb:3c:6e:06:9d:92:a9:33:dc:b1:0a:56: 7a:52:61:34:f6:c0:34:69:1b:8f:5e:92:ec:91:fd:a7:f1:70: bd:ae:35:0e:c1:f4:de:31:c6:92:3f:55:40:06:89:6a:55:56: d2:a0:23:e1:5f:05:3d:b0:13:ab:43:94:8f:42:df:39:e9:15: 28:2d:34:32:6a:27:aa:9f:cb:0d:09:08:fd:10:50:39:cc:cb: 8b:3e:b9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwNDA0MTg1MzI4WhcNMjUwNDExMTg1MzI4WjAYMRYwFAYD VQQDEw02N2YwMmFhOC01MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8mh3RTY2cX+YZhbUGXULitRlT6VzNAalq6AHgo3OpChLuKnzKNB/7bp+p3e bJggVlES2uWkVlMFwBnjNd2fDA2+IahNmReyHK94oQ003usQN68xQNcn4oULTo/G CuYUaxpNkefAMbWQN0pTx0b+W7p8YjeVzAZWiZife+PLq3G8iLXOtcq0dnoMwmt+ YbIXHBgGMbvTgiFgY5sfzSko1gQb9hD9XcZ8Y7eTIJAIjK8ViAc/wCZiFzNawN6j MWZtWDAjJLT2KF0bwxrNMfSUcWeFZc3jPa5+zjx+gZZLg+xuUPFViWD7f/Nk4LZM 4p3cwXhPEviIX4zgOxh0l9aqLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVUg1ss 52ZfU3Oz2mtj8ltFE+lcMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZuIhugU97UVV13PpCyKijS4CiJ0v6kwG2XWwRfJmFQC9E7DH4IGEA BD7z2QTDgo0yo2l+fHk4uAh/t627ok4WqzekzePcCCeVsgQDvDCyFhSBPQuN6Ya6 anAdhd+IX4DeG5sMK2KJqnV8gvYrvce0EcoLVk2U/OHDlcC2D9IgjMM043SE33TT pncqb8LYxjRqr6csukeIHC7Fxidru32C1xWeci66mOT7PG4GnZKpM9yxClZ6UmE0 9sA0aRuPXpLskf2n8XC9rjUOwfTeMcaSP1VABolqVVbSoCPhXwU9sBOrQ5SPQt85 6RUoLTQyaieqn8sNCQj9EFA5zMuLPrlT -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:52 2025 by rpki-client