$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: UjS+12wxbQOoDkDKmOqap6dhsG2+VRvXIEqswN2864I= Subject key identifier: BE:38:A3:BA:CB:19:3E:6E:52:EF:18:DF:B2:D6:B5:8D:FF:49:25:D2 Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0BFB Signing time: Fri 30 May 2025 18:55:17 +0000 Manifest this update: Fri 30 May 2025 18:55:17 +0000 Manifest next update: Fri 06 Jun 2025 18:55:17 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: Y0QenxoOQnTwvUeK58Vz8QWqFcgiBaNxP5YRrm+wpGs=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: May 30 18:55:17 2025 GMT Not After : Jun 6 18:55:17 2025 GMT Subject: CN=6839ff15-dec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:d4:06:83:cb:d6:8b:02:d6:b3:a5:0e:82: 39:e1:ca:83:86:2e:87:06:e7:05:92:a8:73:fb:e0: 90:b5:6e:ed:1b:ba:06:3e:d0:03:90:0d:6f:b3:a0: 45:fe:db:af:fc:ed:8d:71:43:78:64:f2:34:41:e4: 89:ad:39:d7:50:44:8e:1f:40:b7:71:e2:e1:5d:03: 70:e0:bc:f7:52:56:a8:6e:b8:88:09:e9:c6:7a:73: 38:91:c2:44:5e:c0:2b:6b:02:a8:be:85:7d:a8:01: 0e:e7:53:9a:fd:fc:28:04:86:53:ee:b8:d9:33:1a: 0a:0d:a0:ad:2b:34:71:2f:58:c8:0b:60:bf:4e:99: 0e:af:ed:b0:1d:09:3c:2a:67:7f:a0:51:87:d2:41: df:e1:af:a4:13:79:de:8c:96:44:c6:05:c3:0c:e3: b2:06:9b:a6:82:29:45:52:92:72:02:cf:5a:f6:7c: 56:e9:8a:d4:88:20:6f:47:4b:29:d3:2d:1a:1c:5d: 23:54:c4:20:6e:87:d4:f5:0b:d6:a4:56:cc:35:1f: 07:8f:76:b3:df:f0:51:81:5d:ba:bf:73:80:d7:66: 7d:8b:0b:3c:43:fd:23:ac:bb:61:3b:60:17:77:97: b8:5b:7f:3e:92:46:ea:77:5c:90:9c:73:c1:28:0e: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:38:A3:BA:CB:19:3E:6E:52:EF:18:DF:B2:D6:B5:8D:FF:49:25:D2 X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:42:b1:b8:92:f9:78:c4:07:ab:51:d3:93:87:b0:1a:f8:2a: f5:e6:0d:76:63:ea:88:48:92:45:35:2f:cc:54:f3:38:2e:1f: de:d7:11:0a:a4:e7:06:7b:21:19:bb:0f:60:e9:0c:a4:5a:81: bf:48:66:38:97:e3:05:ff:52:8d:21:a3:cf:00:b1:af:df:25: 04:18:c7:2b:07:d3:88:f3:98:ea:3e:e0:35:9a:7c:52:72:05: e8:a1:c4:50:2d:be:35:2f:70:37:89:7c:5d:76:e4:2e:fb:d2: 41:40:e1:b8:cd:6f:6a:25:45:44:e2:6b:99:9e:c5:4d:f0:86: 43:e6:81:5b:51:c8:94:6f:f6:60:9a:f0:d7:96:20:2d:be:cd: 89:3a:3c:f6:94:e5:ce:ef:07:d3:8a:80:5c:de:52:b7:66:d8: 9a:fe:26:16:d9:c8:bd:2f:a2:5b:fc:85:eb:c4:66:f2:6d:15: 19:6e:35:ca:a4:3c:7f:71:32:bc:c3:ff:de:8c:24:1b:10:20: c8:2a:79:bf:f3:ce:8a:a0:65:e3:b8:d4:da:07:6b:d5:15:fc: a9:8a:26:ba:e5:d9:c0:fc:48:42:d7:25:3f:ee:1f:3b:98:b6: a4:27:c7:54:7d:2c:0f:de:45:86:52:3e:32:4b:b7:1d:8f:04: c6:e3:0d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwNTMwMTg1NTE3WhcNMjUwNjA2MTg1NTE3WjAYMRYwFAYD VQQDEw02ODM5ZmYxNS1kZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6zUBoPL1osC1rOlDoI54cqDhi6HBucFkqhz++CQtW7tG7oGPtADkA1vs6BF /tuv/O2NcUN4ZPI0QeSJrTnXUESOH0C3ceLhXQNw4Lz3UlaobriICenGenM4kcJE XsArawKovoV9qAEO51Oa/fwoBIZT7rjZMxoKDaCtKzRxL1jIC2C/TpkOr+2wHQk8 Kmd/oFGH0kHf4a+kE3nejJZExgXDDOOyBpumgilFUpJyAs9a9nxW6YrUiCBvR0sp 0y0aHF0jVMQgbofU9QvWpFbMNR8Hj3az3/BRgV26v3OA12Z9iws8Q/0jrLthO2AX d5e4W38+kkbqd1yQnHPBKA79VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL44o7rL GT5uUu8Y37LWtY3/SSXSMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2QrG4kvl4xAerUdOTh7Aa+Cr15g12Y+qISJJFNS/MVPM4Lh/e1xEK pOcGeyEZuw9g6QykWoG/SGY4l+MF/1KNIaPPALGv3yUEGMcrB9OI85jqPuA1mnxS cgXoocRQLb41L3A3iXxdduQu+9JBQOG4zW9qJUVE4muZnsVN8IZD5oFbUciUb/Zg mvDXliAtvs2JOjz2lOXO7wfTioBc3lK3Ztia/iYW2ci9L6Jb/IXrxGbybRUZbjXK pDx/cTK8w//ejCQbECDIKnm/886KoGXjuNTaB2vVFfypiia65dnA/EhC1yU/7h87 mLakJ8dUfSwP3kWGUj4yS7cdjwTG4w0O -----END CERTIFICATE-----Generated at Sat May 31 17:27:58 2025 by rpki-client