$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: r6yrrgg2ECQ86eQSygoKcQtxYA/+4k3T2i/VOZ3zUj0= Subject key identifier: 66:2E:3B:86:FB:58:D0:F5:58:03:F3:66:BB:01:29:4E:D6:1A:FB:D8 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0154 Signing time: Mon 05 May 2025 03:08:08 +0000 Manifest this update: Mon 05 May 2025 03:08:07 +0000 Manifest next update: Mon 12 May 2025 03:08:07 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 0JFYz9UbcKzshSCrBhsjepebfISFEjFVp1FKFCf9Mv4=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: May 5 03:08:07 2025 GMT Not After : May 12 03:08:07 2025 GMT Subject: CN=68182b97-02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:c4:26:78:e1:14:bd:13:61:75:c3:ee:2f: 5b:5a:d0:d4:c9:e9:40:16:58:da:5e:63:13:69:4e: 5e:fb:0e:bb:cb:54:70:bf:ee:66:1e:5d:98:6b:8c: 0b:69:92:02:90:a1:8e:ea:14:60:c7:9e:0b:cd:dd: 4d:8a:ba:ac:40:a7:10:7d:f7:b7:84:20:df:ac:48: bb:d0:d7:6c:44:9c:85:19:fe:a7:af:01:aa:d1:31: 21:d1:6e:12:b6:8d:60:72:ab:a1:b5:0a:96:35:38: 26:65:17:29:90:3e:7d:43:0b:c2:a0:ec:20:fa:23: 65:fa:63:2f:12:49:ec:dc:66:4a:95:63:9f:3c:77: d4:1e:fa:64:97:53:86:43:1c:48:8d:5e:d5:e3:24: 63:f2:a8:7c:88:3d:ae:5c:a0:0d:a1:ae:6c:70:00: 50:c5:46:16:a7:f7:e1:32:ba:64:ea:a8:fe:b5:a7: 9e:ae:a0:7b:69:8b:a2:96:c8:d7:2c:da:f0:9d:23: 9e:6c:4a:33:77:cd:c5:84:aa:5f:90:5d:da:a2:26: d8:3c:fb:f6:8e:a1:61:48:a4:ba:e7:9f:88:eb:b5: 2e:91:d1:d4:dc:b9:9e:95:5c:d0:98:e3:60:41:d7: e3:b3:d5:16:7c:6d:2b:81:cf:b3:7a:74:12:a0:6a: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:3B:86:FB:58:D0:F5:58:03:F3:66:BB:01:29:4E:D6:1A:FB:D8 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:40:4a:fb:f5:cc:40:a4:b5:ed:d5:84:f8:b8:fa:6e:82:8d: 80:1e:a2:c8:3e:18:4c:8c:6a:a6:66:0c:69:09:ee:4c:68:c1: da:9b:c6:2e:bd:5e:80:90:9c:d3:98:7c:03:13:9b:27:e9:40: 3f:c5:ab:d9:38:b6:75:89:a6:15:cc:82:ae:f8:5a:b7:41:6f: f7:aa:a2:9e:11:45:b4:50:45:b0:78:ef:d4:7a:78:90:28:d2: 4d:29:35:63:47:83:ef:86:be:fd:99:e9:e1:7e:95:29:11:e2: d9:53:f7:7e:7e:ac:8c:c7:6b:8c:b5:64:f9:75:3e:6f:6e:0c: dc:9d:83:e5:e5:b9:18:8b:da:d4:22:ed:49:22:c5:6c:56:2f: 93:9d:0b:61:09:fc:c7:20:81:af:82:2f:9c:47:a2:57:fa:64: 4b:42:85:be:9e:78:47:16:05:f4:b3:59:6c:00:df:65:2e:95: 60:ed:80:13:56:1f:05:9b:30:d8:26:11:09:d7:61:a2:2c:67: d6:04:b9:c4:fe:3c:1a:1b:f7:3c:68:47:f9:1f:c1:79:35:3c: 77:aa:bf:9a:fe:ed:26:99:74:dd:73:d4:af:9b:63:78:17:b8: 4a:e9:fb:06:0b:1d:b2:c8:51:3f:03:f2:33:10:de:b4:9e:9e: 54:ea:ac:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwNTA1MDMwODA3WhcNMjUwNTEyMDMwODA3WjAYMRYwFAYD VQQDEw02ODE4MmI5Ny0wMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP/EJnjhFL0TYXXD7i9bWtDUyelAFljaXmMTaU5e+w67y1Rwv+5mHl2Ya4wL aZICkKGO6hRgx54Lzd1NirqsQKcQffe3hCDfrEi70NdsRJyFGf6nrwGq0TEh0W4S to1gcquhtQqWNTgmZRcpkD59QwvCoOwg+iNl+mMvEkns3GZKlWOfPHfUHvpkl1OG QxxIjV7V4yRj8qh8iD2uXKANoa5scABQxUYWp/fhMrpk6qj+taeerqB7aYuilsjX LNrwnSOebEozd83FhKpfkF3aoibYPPv2jqFhSKS655+I67UukdHU3LmelVzQmONg Qdfjs9UWfG0rgc+zenQSoGrtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYuO4b7 WND1WAPzZrsBKU7WGvvYMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/QEr79cxApLXt1YT4uPpugo2AHqLIPhhMjGqmZgxpCe5MaMHam8Yu vV6AkJzTmHwDE5sn6UA/xavZOLZ1iaYVzIKu+Fq3QW/3qqKeEUW0UEWweO/UeniQ KNJNKTVjR4Pvhr79menhfpUpEeLZU/d+fqyMx2uMtWT5dT5vbgzcnYPl5bkYi9rU Iu1JIsVsVi+TnQthCfzHIIGvgi+cR6JX+mRLQoW+nnhHFgX0s1lsAN9lLpVg7YAT Vh8FmzDYJhEJ12GiLGfWBLnE/jwaG/c8aEf5H8F5NTx3qr+a/u0mmXTdc9Svm2N4 F7hK6fsGCx2yyFE/A/IzEN60np5U6qyq -----END CERTIFICATE-----Generated at Mon May 5 13:49:51 2025 by rpki-client