$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: 0WGlUmYTrGamYWwdnCpSHi71LcXYUUrkxGyCQdG1lvE= Subject key identifier: C1:1B:0F:A7:C5:2B:A5:38:C7:D5:34:3D:25:C1:1A:E7:57:B2:1F:3A Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 6F Signing time: Wed 17 Sep 2025 07:37:06 +0000 Manifest this update: Wed 17 Sep 2025 07:37:05 +0000 Manifest next update: Wed 24 Sep 2025 07:37:05 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: MRa5rQDcxe8iCkCkXLLXVlT5KbcB6cFSMBb+UvKUFV4=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: Sep 17 07:37:05 2025 GMT Not After : Sep 24 07:37:05 2025 GMT Subject: CN=68ca6521-db53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:02:b7:45:05:2a:90:c2:0b:41:e9:05:cc: 9a:21:bf:ce:cc:b0:21:f4:8b:bf:40:b8:80:79:6e: 69:4d:9c:bf:a4:dc:b8:c2:78:5c:11:e7:41:a5:8c: ca:8a:60:51:2c:06:b1:67:41:dc:a5:5c:33:33:08: e8:68:46:dc:35:fa:e9:fb:8e:f6:96:c2:b3:50:6f: a4:52:38:91:57:74:21:ae:ea:47:8b:7c:8d:b3:40: 9e:83:c2:6d:6f:1a:17:fa:73:e2:35:c8:bd:7f:93: 71:9f:f5:86:f9:f6:3c:f6:54:3c:dc:bd:74:ce:92: e7:59:70:f0:94:56:6f:98:a1:c7:ad:3d:d2:d6:bb: 8b:d9:ea:a5:9b:04:f8:bb:f9:7f:ba:96:ad:fa:38: 4d:fc:8d:18:0d:96:5c:b4:40:34:b8:60:d7:01:90: c1:3f:8d:f5:70:a5:ee:f6:b1:1b:b1:20:00:f8:f1: 08:93:de:0f:ea:ad:ea:ee:6f:51:d7:ea:38:dd:ba: 0f:e2:ec:fb:0d:37:bf:f1:d5:19:9b:b2:bc:cc:77: c1:fb:1e:58:5b:c8:70:ed:64:df:50:ce:8e:e4:e3: 86:05:15:40:fd:9e:77:15:ee:ec:8c:14:29:64:d6: 6e:db:cd:1c:9f:fa:e6:1e:81:d6:6d:21:f0:fa:25: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:0F:A7:C5:2B:A5:38:C7:D5:34:3D:25:C1:1A:E7:57:B2:1F:3A X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:53:fa:b6:0b:0e:cf:38:f2:23:e8:82:5b:5d:dd:84:68: 2a:f9:39:fd:40:fb:13:69:07:0b:1a:ce:0c:b9:50:00:46:bf: b4:c4:ac:b1:66:27:ad:5e:60:c8:1a:78:58:e4:8a:04:30:82: af:f4:b1:8a:31:a5:f4:ce:51:58:1d:87:a9:8b:ef:02:61:cb: 26:7c:93:9c:5a:c2:54:32:14:de:30:a4:70:34:16:da:b2:ed: 5f:b6:54:43:94:14:c1:de:f9:5b:c6:4d:b5:ed:bb:26:b5:9d: d8:83:89:ed:54:22:9c:e7:d5:11:0d:16:6c:bc:c9:6d:f9:a9: c6:f6:3c:51:0a:cb:0d:bc:6c:a4:aa:c7:0f:b7:bd:32:73:a1: c8:d9:46:57:71:66:d6:87:8a:5d:78:73:b6:06:61:63:92:c6: 1c:7e:d9:8e:96:0a:83:b2:4f:5b:e0:67:55:d5:0d:99:38:da: 96:a9:52:4c:99:e4:66:8a:3a:5e:5a:22:13:19:ad:9d:e3:84: e2:36:2e:f2:af:97:36:57:eb:37:68:5b:6e:e8:3a:d5:eb:21: de:b7:fc:1b:2c:58:db:e9:77:42:ee:77:85:f8:46:12:2f:ae: ae:89:16:ed:87:6f:e9:17:31:24:10:18:27:3e:e8:fa:7c:f5: 6e:16:8a:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JDRjExMC8GA1UEBRMoMEM4NTU5RDIzM0RCRkJBRkJEMTAzMjIyOTk4NURGM0RG OTEzNDhGQzAeFw0yNTA5MTcwNzM3MDVaFw0yNTA5MjQwNzM3MDVaMBgxFjAUBgNV BAMTDTY4Y2E2NTIxLWRiNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtfAK3RQUqkMILQekFzJohv87MsCH0i79AuIB5bmlNnL+k3LjCeFwR50GljMqK YFEsBrFnQdylXDMzCOhoRtw1+un7jvaWwrNQb6RSOJFXdCGu6keLfI2zQJ6Dwm1v Ghf6c+I1yL1/k3Gf9Yb59jz2VDzcvXTOkudZcPCUVm+YocetPdLWu4vZ6qWbBPi7 +X+6lq36OE38jRgNlly0QDS4YNcBkME/jfVwpe72sRuxIAD48QiT3g/qrerub1HX 6jjdug/i7PsNN7/x1RmbsrzMd8H7HlhbyHDtZN9Qzo7k44YFFUD9nncV7uyMFClk 1m7bzRyf+uYegdZtIfD6JSGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwRsPp8Ur pTjH1TQ9JcEa51eyHzowHwYDVR0jBBgwFoAUDIVZ0jPb+6+9EDIimYXfPfkTSPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkNGLzVFNzhCNjE0RUE3 MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRElWWjBqUGItNi05RURJaW1ZWGZQZmtUU1B3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkNGLzVFNzhCNjE0RUE3MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYt OUVESWltWVhmUGZrVFNQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1IU/q2Cw7POPIj6IJbXd2EaCr5Of1A+xNpBwsazgy5UABGv7TErLFm J61eYMgaeFjkigQwgq/0sYoxpfTOUVgdh6mL7wJhyyZ8k5xawlQyFN4wpHA0Ftqy 7V+2VEOUFMHe+VvGTbXtuya1ndiDie1UIpzn1RENFmy8yW35qcb2PFEKyw28bKSq xw+3vTJzocjZRldxZtaHil14c7YGYWOSxhx+2Y6WCoOyT1vgZ1XVDZk42papUkyZ 5GaKOl5aIhMZrZ3jhOI2LvKvlzZX6zdoW27oOtXrId63/BssWNvpd0Lud4X4RhIv rq6JFu2Hb+kXMSQQGCc+6Pp89W4Wioc= -----END CERTIFICATE-----Generated at Fri Sep 19 05:29:00 2025 by rpki-client