$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft File: DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft (raw, json) Hash identifier: xdee05x9AV/0JHakhnaRGeQoccUIADfan+rZS8Pr94g= Subject key identifier: 23:59:48:16:E8:8F:8A:0B:88:F3:8A:32:3A:70:E6:3A:E5:BA:EB:48 Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 Certificate issuer: /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft Manifest number: 0374 Signing time: Mon 05 May 2025 00:31:49 +0000 Manifest this update: Mon 05 May 2025 00:31:49 +0000 Manifest next update: Mon 12 May 2025 00:31:49 +0000 Files and hashes: 1: DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl (hash: y398glKGKjOydylX1s0hxJPvOMV/Ft/F3Ew1tAZudFE=) 2: E747F80C6AA411EDB76B7A36C4F9AE02.roa (hash: dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153838, serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15 Validity Not Before: May 5 00:31:49 2025 GMT Not After : May 12 00:31:49 2025 GMT Subject: CN=681806f5-fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:3e:2e:76:58:87:82:70:bb:64:2c:73:6e: 91:83:dc:ed:47:64:30:46:a6:c4:c2:dd:fb:61:44: 79:9a:40:e6:1d:c8:e3:d6:1d:f5:c1:a9:35:f2:da: 16:04:29:c5:8d:21:cc:33:f1:1d:68:3d:9a:27:5c: 26:03:71:6c:f1:a0:10:62:41:b1:7c:4e:8b:7b:66: db:cd:5c:81:ce:01:db:16:3b:da:c8:39:69:d2:00: 30:98:2f:c7:8f:3c:67:36:3c:75:55:8c:7c:5c:63: 16:a7:13:6c:d9:bb:0c:4f:41:26:78:55:ba:89:94: be:f1:62:cf:a8:fa:28:b0:a1:6e:1f:c9:b9:8a:30: b7:3c:04:3d:28:38:a5:9b:15:24:fb:2c:49:2b:7d: 53:37:2b:1b:2a:27:ec:ac:24:c3:fc:6a:1e:0c:58: bd:d2:36:ac:e1:02:ca:59:14:8c:39:71:a0:59:62: 73:cc:25:d9:ff:ad:90:d6:07:d3:6a:0e:fb:9f:ca: 37:e2:24:f8:99:a8:33:1b:a6:b6:28:83:86:da:e1: 44:90:d8:a0:74:fd:b7:c1:7d:2d:f5:7f:c2:b9:40: 3d:14:41:c2:d2:36:02:92:44:ea:df:d6:9f:e6:5c: 0d:d7:00:be:44:8f:0c:d4:ab:3d:17:7c:b9:0e:37: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:48:16:E8:8F:8A:0B:88:F3:8A:32:3A:70:E6:3A:E5:BA:EB:48 X509v3 Authority Key Identifier: keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3b:30:34:08:c8:0e:00:35:37:9a:93:ce:89:2d:28:94:ef: b6:92:5e:b5:b1:11:ab:ba:a6:23:bb:1d:94:99:59:43:5c:25: 52:28:c6:2e:15:19:7d:d4:01:75:9e:a6:ae:24:e3:be:17:df: fa:37:20:80:05:33:f9:6f:89:0f:0d:e6:89:01:da:4c:7a:03: e0:b2:27:9a:43:df:2b:a1:40:47:f6:e0:ea:d1:c0:30:fa:66: e1:9b:70:ac:9a:2c:f3:7b:28:44:d5:48:dd:14:40:eb:55:9b: 85:14:5c:3b:b0:ee:0a:8e:6d:e4:14:1a:c2:2e:2b:b2:f4:79: 1f:84:da:9b:9f:9c:01:67:ac:cc:02:57:a9:41:37:a5:d4:40: 3f:a8:d6:5e:9b:1d:91:30:e3:08:3a:27:55:30:01:7b:34:fb: 87:fb:16:95:62:8d:eb:18:53:79:49:c9:4a:d4:d2:3e:38:da: 8a:c4:c5:c4:a9:c3:56:aa:5c:2e:13:88:8a:d3:70:eb:81:78: 08:f0:18:67:f6:37:f8:2f:49:be:5c:a0:4d:e3:73:ed:76:0a: 98:ea:20:76:82:da:37:f9:15:29:12:18:ed:13:8a:5b:99:ee: 77:d3:3f:16:47:4f:41:df:ea:8b:ea:49:2c:11:47:92:7d:31: 88:f2:8a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4MzgxMTAvBgNVBAUTKDBDOUE0Njk5ODg5NjE3NzhFMkQxMUU4QUU4QTQzRTQ4 Mjk2REFEMTUwHhcNMjUwNTA1MDAzMTQ5WhcNMjUwNTEyMDAzMTQ5WjAYMRYwFAYD VQQDEw02ODE4MDZmNS1mYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUY+LnZYh4Jwu2Qsc26Rg9ztR2QwRqbEwt37YUR5mkDmHcjj1h31wak18toW BCnFjSHMM/EdaD2aJ1wmA3Fs8aAQYkGxfE6Le2bbzVyBzgHbFjvayDlp0gAwmC/H jzxnNjx1VYx8XGMWpxNs2bsMT0EmeFW6iZS+8WLPqPoosKFuH8m5ijC3PAQ9KDil mxUk+yxJK31TNysbKifsrCTD/GoeDFi90jas4QLKWRSMOXGgWWJzzCXZ/62Q1gfT ag77n8o34iT4magzG6a2KIOG2uFEkNigdP23wX0t9X/CuUA9FEHC0jYCkkTq39af 5lwN1wC+RI8M1Ks9F3y5DjdauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNZSBbo j4oLiPOKMjpw5jrluutIMB8GA1UdIwQYMBaAFAyaRpmIlhd44tEeiuikPkgpba0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzgzOC85RUNBNDU1NkE2 N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0YzamkwUjZLNktRLVNDbHRy UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RKcEdtWWlXRjNqaTBSNks2S1EtU0NsdHJSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzgzOC85RUNBNDU1NkE2N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0Yz amkwUjZLNktRLVNDbHRyUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4OzA0CMgOADU3mpPOiS0olO+2kl61sRGruqYjux2UmVlDXCVSKMYu FRl91AF1nqauJOO+F9/6NyCABTP5b4kPDeaJAdpMegPgsieaQ98roUBH9uDq0cAw +mbhm3CsmizzeyhE1UjdFEDrVZuFFFw7sO4Kjm3kFBrCLiuy9HkfhNqbn5wBZ6zM AlepQTel1EA/qNZemx2RMOMIOidVMAF7NPuH+xaVYo3rGFN5SclK1NI+ONqKxMXE qcNWqlwuE4iK03DrgXgI8Bhn9jf4L0m+XKBN43PtdgqY6iB2gto3+RUpEhjtE4pb me530z8WR09B3+qL6kksEUeSfTGI8oqj -----END CERTIFICATE-----Generated at Tue May 6 10:56:55 2025 by rpki-client