$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft File: DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft (raw, json) Hash identifier: ENI3M+LW/EbwRyj7SZa565YPLaI3403OL51uIzEzjrM= Subject key identifier: A3:79:DE:CC:86:3C:F1:0F:84:EE:14:5E:5B:DC:6E:38:8E:09:A9:F7 Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft Manifest number: 26 Signing time: Fri 25 Apr 2025 06:46:33 +0000 Manifest this update: Fri 25 Apr 2025 06:46:32 +0000 Manifest next update: Fri 02 May 2025 06:46:32 +0000 Files and hashes: 1: DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl (hash: P+utlQEkf50UOzmlChvNWu6j2t2Dgps36/okKHPT/Rk=) 2: A7B64E90EA7311EF83DF9312C4F9AE02.roa (hash: x02iW5sBV6XQ3si6w5qxABkxIfONNKf7NHA5P8huw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC Validity Not Before: Apr 25 06:46:32 2025 GMT Not After : May 2 06:46:32 2025 GMT Subject: CN=680b2fc9-6ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:a9:3a:5c:4a:ee:46:94:04:c4:70:af:a7: b1:ea:1b:cc:fb:6b:0b:2b:9a:46:fc:f4:ce:13:86: 06:f7:06:9f:da:76:a4:41:3d:5c:b3:5d:97:d8:ec: 76:c4:02:bf:cf:bb:b4:3d:6c:0e:95:75:f9:ad:73: 42:bf:97:cf:e9:a4:8e:d4:e2:42:26:71:7f:3e:0c: 1c:c4:8d:15:0e:bb:47:8f:a9:17:80:29:a6:c9:81: 9c:eb:a0:c4:f0:64:07:2f:a0:94:d9:eb:29:8c:6b: b2:6c:fe:f1:c0:e6:a9:15:cb:30:24:ec:0b:90:57: 8f:dd:7e:e4:08:3f:99:35:0d:4a:34:0d:bd:2d:ff: 03:0a:ff:03:79:39:9c:b3:e4:62:c0:3d:5a:54:5c: 4a:d0:9d:21:7b:5f:eb:c5:10:66:37:02:b8:bd:32: f3:1f:43:1d:1c:f3:17:6a:d1:46:5a:31:c3:c2:5c: ef:7a:56:d7:db:b1:94:d9:47:20:e3:09:46:57:ee: 92:d3:d5:17:e3:d7:9e:0f:40:60:88:0e:c9:03:05: 7a:59:da:89:c3:e6:74:42:38:68:4e:51:65:80:8d: ba:7a:ae:c4:4a:d1:26:5a:26:1f:86:6b:75:cf:28: 17:aa:8b:bc:da:19:63:68:47:f4:a5:9d:0e:8d:62: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:79:DE:CC:86:3C:F1:0F:84:EE:14:5E:5B:DC:6E:38:8E:09:A9:F7 X509v3 Authority Key Identifier: keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:fb:6b:93:ba:8d:be:21:e5:f9:cb:99:30:1e:84:49:6c:a5: 50:e3:80:aa:2a:55:a7:bf:b3:57:9d:fd:a2:84:83:c8:5d:e4: 4a:b5:9b:73:39:30:24:c3:3f:c3:df:22:8a:3d:38:79:b4:b9: d1:a6:c7:84:7b:9d:f5:be:7f:5a:57:7b:20:73:80:54:ea:54: 1f:b8:b3:98:4c:49:31:09:08:29:6c:c8:ba:1d:fc:9d:cc:b8: 29:d2:ea:a2:9d:f0:0d:ed:68:64:fa:cf:3d:cf:eb:37:5e:c4: 57:3f:9c:c1:ca:96:02:28:93:48:48:4d:d9:1f:b8:3f:d8:9f: 6d:53:d5:2a:5e:3e:0a:0f:e7:18:33:a5:df:37:96:8a:6b:96: fc:cc:cc:66:94:49:45:2e:e4:fa:f1:5d:97:91:11:e6:a7:73: a2:a8:cf:d8:4a:11:63:75:2a:aa:36:7e:09:15:68:7a:0d:20: 96:fc:09:44:5b:0e:8b:c6:2e:df:71:ef:2f:25:14:70:9a:ff: df:58:00:2e:c9:74:18:0e:bb:38:bf:fa:03:6f:0d:5a:b7:bd: d8:a7:42:39:f3:11:57:47:e4:d8:14:3d:ff:f9:cb:07:05:d2: 3d:32:49:04:ac:97:c4:70:02:ac:d1:4b:1b:5e:72:10:4e:df: 24:26:5c:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JDRjExMC8GA1UEBRMoMEM4NTU5RDIzM0RCRkJBRkJEMTAzMjIyOTk4NURGM0RG OTEzNDhGQzAeFw0yNTA0MjUwNjQ2MzJaFw0yNTA1MDIwNjQ2MzJaMBgxFjAUBgNV BAMTDTY4MGIyZmM5LTZhYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZSqk6XEruRpQExHCvp7HqG8z7awsrmkb89M4Thgb3Bp/adqRBPVyzXZfY7HbE Ar/Pu7Q9bA6Vdfmtc0K/l8/ppI7U4kImcX8+DBzEjRUOu0ePqReAKabJgZzroMTw ZAcvoJTZ6ymMa7Js/vHA5qkVyzAk7AuQV4/dfuQIP5k1DUo0Db0t/wMK/wN5OZyz 5GLAPVpUXErQnSF7X+vFEGY3Ari9MvMfQx0c8xdq0UZaMcPCXO96VtfbsZTZRyDj CUZX7pLT1Rfj154PQGCIDskDBXpZ2onD5nRCOGhOUWWAjbp6rsRK0SZaJh+Ga3XP KBeqi7zaGWNoR/SlnQ6NYnHTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo3nezIY8 8Q+E7hReW9xuOI4JqfcwHwYDVR0jBBgwFoAUDIVZ0jPb+6+9EDIimYXfPfkTSPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkNGLzVFNzhCNjE0RUE3 MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRElWWjBqUGItNi05RURJaW1ZWGZQZmtUU1B3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkNGLzVFNzhCNjE0RUE3MzExRUZBQzhCQzkxMUM0RjlBRTAyL0RJVlowalBiLTYt OUVESWltWVhmUGZrVFNQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMX7a5O6jb4h5fnLmTAehElspVDjgKoqVae/s1ed/aKEg8hd5Eq1m3M5 MCTDP8PfIoo9OHm0udGmx4R7nfW+f1pXeyBzgFTqVB+4s5hMSTEJCClsyLod/J3M uCnS6qKd8A3taGT6zz3P6zdexFc/nMHKlgIok0hITdkfuD/Yn21T1SpePgoP5xgz pd83loprlvzMzGaUSUUu5PrxXZeREeanc6Koz9hKEWN1Kqo2fgkVaHoNIJb8CURb DovGLt9x7y8lFHCa/99YAC7JdBgOuzi/+gNvDVq3vdinQjnzEVdH5NgUPf/5ywcF 0j0ySQSsl8RwAqzRSxtechBO3yQmXLo= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:49 2025 by rpki-client