$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: GX7jjhkjUcBaa+fngHZNef2v4M29PKXaObOj6TOUuko= Subject key identifier: DA:63:4A:3D:77:3A:2A:FB:CA:7F:6C:68:0E:5B:10:80:A2:41:E7:2F Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0BEA Signing time: Thu 24 Apr 2025 18:41:16 +0000 Manifest this update: Thu 24 Apr 2025 18:41:15 +0000 Manifest next update: Thu 01 May 2025 18:41:15 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: cuJ08ktUiV0pQv1dw/hQ05uk3rJwnYKuajIwzbqZCEM=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Apr 24 18:41:15 2025 GMT Not After : May 1 18:41:15 2025 GMT Subject: CN=680a85cb-11be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:24:85:0e:24:0a:30:8e:29:86:e6:e9:9e: f7:7c:24:53:dc:10:9c:54:86:2b:6a:b3:b2:75:1e: 94:ed:c5:06:aa:0d:c0:58:e3:aa:ec:ac:8f:fb:24: 13:17:7c:96:88:cc:8a:89:1a:c3:51:d2:6b:e3:08: b9:6e:b9:9c:a3:24:49:3f:37:de:f5:79:99:1a:12: db:7f:67:2b:ff:7a:dc:bd:b1:14:c9:99:31:fe:e2: 4a:dc:a2:da:41:8b:1c:de:9c:7c:1c:12:34:b0:6b: 02:d3:6a:33:50:b4:d6:05:bc:d6:7f:38:f1:b1:5a: c5:77:b5:76:ae:eb:51:90:69:27:c0:ac:52:99:8b: 2d:48:8f:be:f7:0d:9f:c4:bb:46:51:52:3b:3c:81: d0:a2:c8:08:2b:b4:9e:7e:6f:f0:74:f9:3e:8b:88: 8b:5f:53:28:2f:88:32:20:b1:4e:52:02:43:50:83: cd:14:ed:b0:75:2b:49:45:4d:37:41:05:ba:27:be: 60:a9:77:bf:1c:7d:5e:28:3c:6b:76:ea:43:cc:ba: 41:47:b5:82:27:bd:0d:db:e8:87:75:2b:b2:48:b7: 1d:44:68:c8:70:0e:96:84:f8:76:b0:c7:e3:6f:88: 9a:39:88:93:98:14:8a:ca:b9:04:6a:ea:5a:2d:53: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:63:4A:3D:77:3A:2A:FB:CA:7F:6C:68:0E:5B:10:80:A2:41:E7:2F X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:0f:6b:ad:f0:2e:a6:76:a6:66:40:08:49:4b:3f:b6:26: 02:cb:45:ef:bd:ee:98:5a:45:2a:92:7b:18:48:bf:83:b5:46: 73:25:cd:73:d5:92:1e:4c:0e:3e:57:00:72:5e:ab:67:bb:9f: d9:67:b3:ab:39:31:fa:c5:ce:5c:8b:9b:4d:e3:31:ab:a7:9a: da:dc:0c:1c:90:e2:fb:06:2e:7d:20:c6:6b:d7:9b:fc:50:c8: 22:a9:f7:23:b2:fc:20:ec:eb:12:50:d3:5b:c6:80:69:e8:c0: d2:36:bd:41:b3:9a:74:56:1b:7a:17:04:fb:92:eb:ad:21:e9: ee:48:04:c7:a5:82:26:51:39:1e:70:aa:e0:02:e0:3b:67:eb: 4f:46:7e:c7:e8:cc:36:89:e5:de:61:91:80:7d:f6:d7:75:48: f1:12:ba:78:9b:9d:d1:00:87:12:3f:75:44:ea:bc:cf:e3:1a: e1:53:71:c1:50:60:92:50:97:28:ab:8a:ae:e0:de:55:e5:5a: 15:cc:25:9d:0f:49:83:fa:2a:50:da:e2:6a:df:9f:09:f2:9a: e6:4c:10:90:99:b4:bc:7d:ef:f6:25:b2:d0:64:e1:6a:62:dd: a2:27:69:d5:ed:fe:89:fc:6c:45:c7:21:b5:e8:d8:e1:9f:97: eb:30:33:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUwNDI0MTg0MTE1WhcNMjUwNTAxMTg0MTE1WjAYMRYwFAYD VQQDEw02ODBhODVjYi0xMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp4khQ4kCjCOKYbm6Z73fCRT3BCcVIYrarOydR6U7cUGqg3AWOOq7KyP+yQT F3yWiMyKiRrDUdJr4wi5brmcoyRJPzfe9XmZGhLbf2cr/3rcvbEUyZkx/uJK3KLa QYsc3px8HBI0sGsC02ozULTWBbzWfzjxsVrFd7V2rutRkGknwKxSmYstSI++9w2f xLtGUVI7PIHQosgIK7Sefm/wdPk+i4iLX1MoL4gyILFOUgJDUIPNFO2wdStJRU03 QQW6J75gqXe/HH1eKDxrdupDzLpBR7WCJ70N2+iHdSuySLcdRGjIcA6WhPh2sMfj b4iaOYiTmBSKyrkEaupaLVOhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpjSj13 Oir7yn9saA5bEICiQecvMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT8g9rrfAupnamZkAISUs/tiYCy0Xvve6YWkUqknsYSL+DtUZzJc1z 1ZIeTA4+VwByXqtnu5/ZZ7OrOTH6xc5ci5tN4zGrp5ra3AwckOL7Bi59IMZr15v8 UMgiqfcjsvwg7OsSUNNbxoBp6MDSNr1Bs5p0Vht6FwT7kuutIenuSATHpYImUTke cKrgAuA7Z+tPRn7H6Mw2ieXeYZGAffbXdUjxErp4m53RAIcSP3VE6rzP4xrhU3HB UGCSUJcoq4qu4N5V5VoVzCWdD0mD+ipQ2uJq358J8prmTBCQmbS8fe/2JbLQZOFq Yt2iJ2nV7f6J/GxFxyG16Njhn5frMDNY -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:40 2025 by rpki-client