$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: OWEX1UBDnEO+kH/eSUbtJYLqzx7M02wqlHv/SckBVBY= Subject key identifier: 41:D9:C2:57:DF:50:B8:09:9A:BD:37:F4:90:98:32:08:FD:BD:DA:91 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 1A Signing time: Fri 25 Apr 2025 06:55:54 +0000 Manifest this update: Fri 25 Apr 2025 06:55:53 +0000 Manifest next update: Fri 02 May 2025 06:55:53 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: iZqhuK4dfOwRzWRm2zNrMm7c1LsoaoOXJJF2KUD+lUc=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Apr 25 06:55:53 2025 GMT Not After : May 2 06:55:53 2025 GMT Subject: CN=680b31f9-42e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:d2:94:40:1e:07:fa:bb:95:5b:6e:98:07: 83:7b:e6:c1:cd:3e:6c:a9:8f:8b:c0:bb:c0:9f:29: 1e:ed:0a:bf:84:01:83:88:f5:88:7b:df:88:1d:28: b0:ca:d7:df:70:22:64:d1:f4:0a:bd:4e:5f:b1:a4: dc:01:18:73:8d:77:79:45:83:ad:a4:8c:66:2c:ba: 05:62:fe:21:dd:e3:f8:54:72:cd:47:29:61:b0:57: 3f:4c:a6:d4:7d:67:f4:d1:57:69:b2:e0:d3:68:40: f8:c9:e3:9c:97:f5:a9:20:5d:4e:a3:19:49:83:0e: 13:e1:35:e5:2f:b3:33:97:5d:76:44:6b:c6:ad:d2: 2f:eb:c8:05:42:c8:f8:45:7b:67:0b:5c:84:59:9e: bf:93:b7:39:f3:dc:40:9d:34:05:8a:dd:fd:d3:c1: 1c:82:ac:c8:91:44:ff:df:b9:d3:0b:ef:e5:0a:62: 8e:4b:cb:04:48:7d:36:4a:58:05:cb:53:1e:e8:45: 2b:c6:67:42:95:18:61:b7:46:83:9d:3c:b7:06:7f: b0:1a:77:54:67:1d:bf:a2:8a:82:e1:70:fd:3d:6f: 2d:54:30:ef:15:ca:29:44:cc:4a:4e:ac:bd:59:c7: 52:ae:6a:37:56:65:37:7d:8c:a8:6f:22:a5:7a:d3: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:C2:57:DF:50:B8:09:9A:BD:37:F4:90:98:32:08:FD:BD:DA:91 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4c:79:a3:14:a6:57:51:2d:f4:d0:3e:4d:a6:3f:41:8b:9f: fb:2e:38:f1:7f:fe:43:ec:a1:c6:28:0b:e5:34:30:28:a4:60: 11:af:fd:2b:15:ba:ff:28:d1:de:15:54:1a:a5:04:70:53:22: 54:89:e9:16:4b:e6:6e:90:84:3a:cd:c6:71:68:41:19:44:30: ab:51:e7:db:df:6b:96:bf:97:cf:da:91:c7:34:24:91:a5:46: 4a:69:dc:95:53:19:d0:85:2e:db:d7:e1:01:49:99:09:b6:ec: 77:53:96:7e:20:62:e1:62:f5:57:f9:80:45:90:c0:0c:b1:16: cb:1e:46:e8:b1:ba:6f:98:bf:3b:dc:60:3d:e8:00:b0:19:b8: 49:5a:56:a5:9a:ab:f3:aa:eb:d2:b6:23:0b:f7:9d:61:ac:3b: 61:be:6f:b7:52:89:ae:3c:8b:8d:89:f1:72:29:8c:bd:f1:f0: dc:a5:8b:08:24:2b:ea:06:f8:2a:c2:1b:4b:bb:d4:11:0b:c0: fd:09:07:2e:b7:01:34:d0:cb:60:cc:e8:37:a3:27:f6:5f:6c: de:bd:34:4c:ec:95:f0:0e:cc:b0:1a:c6:47:dd:5c:8f:8c:16: b1:36:5e:8b:95:55:01:1c:ac:5b:49:62:43:05:3f:04:fd:3f: 0e:7d:25:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA0MjUwNjU1NTNaFw0yNTA1MDIwNjU1NTNaMBgxFjAUBgNV BAMTDTY4MGIzMWY5LTQyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT1NKUQB4H+ruVW26YB4N75sHNPmypj4vAu8CfKR7tCr+EAYOI9Yh734gdKLDK 199wImTR9Aq9Tl+xpNwBGHONd3lFg62kjGYsugVi/iHd4/hUcs1HKWGwVz9MptR9 Z/TRV2my4NNoQPjJ45yX9akgXU6jGUmDDhPhNeUvszOXXXZEa8at0i/ryAVCyPhF e2cLXIRZnr+Ttznz3ECdNAWK3f3TwRyCrMiRRP/fudML7+UKYo5LywRIfTZKWAXL Ux7oRSvGZ0KVGGG3RoOdPLcGf7Aad1RnHb+iioLhcP09by1UMO8VyilEzEpOrL1Z x1KuajdWZTd9jKhvIqV60yIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQdnCV99Q uAmavTf0kJgyCP292pEwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9MeaMUpldRLfTQPk2mP0GLn/suOPF//kPsocYoC+U0MCikYBGv/SsV uv8o0d4VVBqlBHBTIlSJ6RZL5m6QhDrNxnFoQRlEMKtR59vfa5a/l8/akcc0JJGl Rkpp3JVTGdCFLtvX4QFJmQm27HdTln4gYuFi9Vf5gEWQwAyxFsseRuixum+Yvzvc YD3oALAZuElaVqWaq/Oq69K2Iwv3nWGsO2G+b7dSia48i42J8XIpjL3x8Nyliwgk K+oG+CrCG0u71BELwP0JBy63ATTQy2DM6DejJ/ZfbN69NEzslfAOzLAaxkfdXI+M FrE2XouVVQEcrFtJYkMFPwT9Pw59JWw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:07:17 2025 by rpki-client