$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: bBJk0VIvzU8Kg8oNQU8pyUS9dMzEkREHO6uuRgUb5Sw= Subject key identifier: 74:68:9A:CF:40:A2:BD:28:2B:50:C9:72:BF:E3:29:15:BD:4F:A9:F8 Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 37 Signing time: Sat 31 May 2025 07:09:06 +0000 Manifest this update: Sat 31 May 2025 07:09:05 +0000 Manifest next update: Sat 07 Jun 2025 07:09:05 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: iqcJ2H/vj43DCs4+/14hX7hAgNBSuoELVHrLxNrT9jA=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: May 31 07:09:05 2025 GMT Not After : Jun 7 07:09:05 2025 GMT Subject: CN=683aab12-47a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:d6:8a:94:15:f8:39:7f:a4:7e:2f:4a:08: f2:ca:45:e6:84:e2:4a:28:68:5a:a5:57:44:4c:a1: 77:44:5f:5e:29:60:e7:ac:de:77:83:2c:b2:3a:6f: 57:e2:51:d0:e3:92:3b:5f:15:fd:37:e3:dc:76:d7: 3e:90:7c:65:b0:5a:ea:8b:d9:e9:51:71:b8:cb:29: c8:ea:f3:a9:98:7f:42:3c:20:ab:f4:86:f9:ce:8d: cd:26:0f:0f:58:58:dd:dd:3e:ce:47:e0:49:1f:5f: 6b:ad:b2:8a:1d:fe:50:9d:60:d2:f3:4c:26:d3:44: 9c:57:e1:d6:b6:ba:85:2e:0b:23:e5:ae:78:39:0e: ae:4b:2d:f9:9a:b5:27:33:5d:1e:5b:f6:83:0c:63: 23:ba:49:60:e7:71:dd:40:69:89:a5:e0:41:9e:40: 78:13:38:09:ae:d4:38:33:26:8c:a7:31:d1:ec:f8: e1:b0:ec:e3:8c:87:c3:30:be:5f:d0:88:69:0d:c6: fa:10:9d:76:8a:a7:70:c6:3f:6a:04:d7:f9:bf:74: 9b:53:9c:c9:6f:bd:bf:f2:a4:40:c7:47:63:84:6d: bf:9d:6f:63:d1:31:8a:e8:9f:ca:83:8e:d5:a4:53: ab:8f:17:96:a6:f2:80:99:0a:b7:8e:1b:87:62:f7: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:9A:CF:40:A2:BD:28:2B:50:C9:72:BF:E3:29:15:BD:4F:A9:F8 X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6e:fc:d0:e7:96:d8:c1:71:8c:3a:45:83:db:ae:e3:90:0b: 69:05:32:75:10:64:02:d4:fc:85:98:ce:91:41:8e:43:b5:19: 3e:26:5f:19:b8:e5:76:08:35:47:9f:9f:ee:3e:91:c3:52:63: e8:69:e0:b4:f6:ae:09:72:6d:bd:5c:b4:d2:d4:e4:a9:99:e1: 8a:a3:9c:7e:c5:bb:eb:e9:46:c8:50:58:40:54:58:25:6e:ec: d1:18:0a:24:49:a0:74:6c:32:03:b2:11:6d:ba:a8:3e:65:1c: 2b:12:05:bd:69:8f:70:f5:5b:f3:7e:55:5c:25:f2:84:1f:86: ee:b8:ed:a1:16:83:54:a8:8a:8e:4a:65:c2:f0:3b:ec:60:fe: 7c:1b:c3:85:5f:79:84:bb:33:2e:b3:57:0e:a1:c7:52:21:27: 4e:0e:2f:ad:9a:83:4a:a7:a1:e6:79:14:89:93:88:64:e5:43: 86:5b:fa:6f:9f:d9:31:d1:75:02:7a:a6:f1:59:57:0c:4f:76: a2:ae:3a:2b:b9:7a:ef:43:d7:c7:c7:1e:d7:56:07:47:6c:70: fd:89:9c:fb:92:89:80:c1:ac:2b:5a:86:22:c6:1b:fe:5f:73: 9f:9a:e9:80:ea:d6:80:d0:4e:fa:d3:fc:3d:51:4b:4d:d1:2b: 5d:bb:ad:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JDRjExMC8GA1UEBRMoMEM4NTU5RDIzM0RCRkJBRkJEMTAzMjIyOTk4NURGM0RG OTEzNDhGQzAeFw0yNTA1MzEwNzA5MDVaFw0yNTA2MDcwNzA5MDVaMBgxFjAUBgNV BAMTDTY4M2FhYjEyLTQ3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG8taKlBX4OX+kfi9KCPLKReaE4kooaFqlV0RMoXdEX14pYOes3neDLLI6b1fi UdDjkjtfFf0349x21z6QfGWwWuqL2elRcbjLKcjq86mYf0I8IKv0hvnOjc0mDw9Y WN3dPs5H4EkfX2utsood/lCdYNLzTCbTRJxX4da2uoUuCyPlrng5Dq5LLfmatScz XR5b9oMMYyO6SWDncd1AaYml4EGeQHgTOAmu1DgzJoynMdHs+OGw7OOMh8Mwvl/Q iGkNxvoQnXaKp3DGP2oE1/m/dJtTnMlvvb/ypEDHR2OEbb+db2PRMYron8qDjtWk U6uPF5am8oCZCreOG4di9zpXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdGiaz0Ci vSgrUMlyv+MpFb1PqfgwHwYDVR0jBBgwFoAUDIVZ0jPb+6+9EDIimYXfPfkTSPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkNGLzVFNzhCNjE0RUE3 MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRElWWjBqUGItNi05RURJaW1ZWGZQZmtUU1B3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkNGLzVFNzhCNjE0RUE3MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYt OUVESWltWVhmUGZrVFNQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdu/NDnltjBcYw6RYPbruOQC2kFMnUQZALU/IWYzpFBjkO1GT4mXxm4 5XYINUefn+4+kcNSY+hp4LT2rglybb1ctNLU5KmZ4YqjnH7Fu+vpRshQWEBUWCVu 7NEYCiRJoHRsMgOyEW26qD5lHCsSBb1pj3D1W/N+VVwl8oQfhu647aEWg1Soio5K ZcLwO+xg/nwbw4VfeYS7My6zVw6hx1IhJ04OL62ag0qnoeZ5FImTiGTlQ4Zb+m+f 2THRdQJ6pvFZVwxPdqKuOiu5eu9D18fHHtdWB0dscP2JnPuSiYDBrCtahiLGG/5f c5+a6YDq1oDQTvrT/D1RS03RK127rWc= -----END CERTIFICATE-----Generated at Sat May 31 17:04:51 2025 by rpki-client