$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: 00rfAAokFMUwPQaHMTzwehLZDZiJcjD/neqwjv30890= Subject key identifier: 94:0D:5D:83:C0:75:FB:EF:AF:B5:7B:39:E7:0B:A6:E9:04:53:7B:03 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: 76 Signing time: Fri 25 Apr 2025 05:48:30 +0000 Manifest this update: Fri 25 Apr 2025 05:48:29 +0000 Manifest next update: Fri 02 May 2025 05:48:29 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: NWAuxrQt+7maiEueJpj4i6utoWNEwJuOYqKb5lDjuPw=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: apEkxffopCeqovMKL+kWef8zz6F2P5gxUW9hlBfV7TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Apr 25 05:48:29 2025 GMT Not After : May 2 05:48:29 2025 GMT Subject: CN=680b222e-e174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:a2:b8:f6:5d:d0:c3:64:3b:0e:31:b8:1e: 7b:43:69:16:ab:f8:a5:41:5e:8f:6c:52:5e:6c:ff: f5:0c:8e:3f:84:8f:0b:45:06:5b:f9:4d:00:2a:c2: a9:7d:5f:2b:a1:29:f0:56:fa:33:db:9a:fe:bf:ff: 15:69:50:75:da:5f:56:7b:dc:41:29:cf:c0:f7:4f: a6:cf:2c:30:e4:8f:4d:08:de:9b:ad:f8:f5:c7:3a: 08:40:7d:20:33:84:6a:89:d9:64:3b:89:80:0f:7b: fb:7c:bf:90:1e:7b:be:72:fd:17:0f:c3:a7:2f:ab: cf:0c:83:07:80:99:b3:90:8a:f0:63:59:a7:6d:95: 6d:db:b2:cb:11:9f:4b:1f:0d:82:1e:c7:dc:3e:84: b6:04:c7:c6:e0:a1:c5:2a:98:f6:f1:a6:a2:ec:6c: 2f:55:ae:f4:c3:91:95:28:d5:0e:b9:56:e9:9a:ef: 51:0d:5a:7f:63:37:3b:0d:ee:17:7e:27:0f:ae:8f: fa:47:3f:e4:51:57:d7:cb:fc:2a:8d:1d:fa:8f:6f: a0:ee:c9:83:58:70:7c:76:cd:c4:eb:93:b0:3c:38: 5c:e0:cd:99:28:c9:ec:a5:a1:c3:ba:02:34:43:4f: 35:dd:7e:ae:84:60:5a:e7:de:cb:ae:dc:f6:53:46: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:5D:83:C0:75:FB:EF:AF:B5:7B:39:E7:0B:A6:E9:04:53:7B:03 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2b:33:de:e3:5b:42:ae:b1:80:38:9d:2a:ee:85:8a:69:48: ed:b4:af:19:8d:8d:66:b3:42:56:b7:76:11:cc:91:25:0a:69: a4:e0:da:20:eb:ed:50:e4:2f:2c:1e:d8:66:88:23:d6:27:c6: e2:8a:bc:a9:48:b2:a3:73:1f:52:7a:6d:06:de:23:d8:22:0d: 44:0b:ee:da:08:5e:4a:0a:ad:16:78:2b:72:cc:8b:87:a9:84: b0:2a:01:e1:39:7e:9e:9c:42:1d:a3:89:4b:eb:91:23:a6:21: aa:b4:6d:93:be:4e:a0:fd:2b:ef:b0:78:21:56:88:ef:9d:56: 0f:45:b4:0f:03:91:95:a4:52:1c:e6:9e:d6:83:64:b1:49:02: 87:9f:62:af:dc:28:9d:6f:2e:88:90:9d:7b:41:0f:1c:1a:45: 17:0a:c5:37:eb:30:d8:db:06:0b:ca:2f:66:8e:37:79:b4:a0: ab:25:33:8b:6b:d6:27:c7:7e:04:66:d0:a8:43:cc:1b:38:f7: cd:9a:21:61:34:df:f6:c2:4d:7c:aa:2d:72:ab:b0:8a:45:ac: 52:f5:fb:6d:fa:11:a1:ae:b6:68:d7:5b:bd:f4:a3:01:71:d2: 66:80:b0:0f:40:7a:ed:f8:19:1b:cc:78:7f:2d:94:31:bc:4a: 54:62:5a:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUxNTExMC8GA1UEBRMoRkI1QUNGQkNGOUZDRUYwMzRCOEE5M0JEMzE5RTYyMDQ0 MkQ2NjY3RjAeFw0yNTA0MjUwNTQ4MjlaFw0yNTA1MDIwNTQ4MjlaMBgxFjAUBgNV BAMTDTY4MGIyMjJlLWUxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz5KK49l3Qw2Q7DjG4HntDaRar+KVBXo9sUl5s//UMjj+EjwtFBlv5TQAqwql9 XyuhKfBW+jPbmv6//xVpUHXaX1Z73EEpz8D3T6bPLDDkj00I3put+PXHOghAfSAz hGqJ2WQ7iYAPe/t8v5Aee75y/RcPw6cvq88MgweAmbOQivBjWadtlW3bsssRn0sf DYIex9w+hLYEx8bgocUqmPbxpqLsbC9VrvTDkZUo1Q65Vuma71ENWn9jNzsN7hd+ Jw+uj/pHP+RRV9fL/CqNHfqPb6DuyYNYcHx2zcTrk7A8OFzgzZkoyeylocO6AjRD TzXdfq6EYFrn3suu3PZTRoZLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlA1dg8B1 +++vtXs55wum6QRTewMwHwYDVR0jBBgwFoAU+1rPvPn87wNLipO9MZ5iBELWZn8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTE1LzNEM0NBMzA4NzRB NzExRUY4RUEyQzUzREM0RjlBRTAyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1pu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTFyUHZQbjg3d05MaXBPOU1aNWlCRUxXWm44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NTE1LzNEM0NBMzA4NzRBNzExRUY4RUEyQzUzREM0RjlBRTAyLy0xclB2UG44N3dO TGlwTzlNWjVpQkVMV1puOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4rM97jW0KusYA4nSruhYppSO20rxmNjWazQla3dhHMkSUKaaTg2iDr 7VDkLywe2GaII9YnxuKKvKlIsqNzH1J6bQbeI9giDUQL7toIXkoKrRZ4K3LMi4ep hLAqAeE5fp6cQh2jiUvrkSOmIaq0bZO+TqD9K++weCFWiO+dVg9FtA8DkZWkUhzm ntaDZLFJAoefYq/cKJ1vLoiQnXtBDxwaRRcKxTfrMNjbBgvKL2aON3m0oKslM4tr 1ifHfgRm0KhDzBs4982aIWE03/bCTXyqLXKrsIpFrFL1+236EaGutmjXW730owFx 0maAsA9Aeu34GRvMeH8tlDG8SlRiWq8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:32 2025 by rpki-client