$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: QMimdhDXZGbGRVd/GjKPUBCZEOIkdlpJUYwobjSV2WI= Subject key identifier: 0E:C2:1D:11:12:DF:5E:98:CE:A6:42:94:43:3C:48:15:E9:E0:36:2E Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0260 Signing time: Fri 25 Apr 2025 01:32:45 +0000 Manifest this update: Fri 25 Apr 2025 01:32:45 +0000 Manifest next update: Fri 02 May 2025 01:32:45 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: KQkvQGp+YfscvqDZBE24QN4Gw2pugi7F0YjedG6Kiqo=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Apr 25 01:32:45 2025 GMT Not After : May 2 01:32:45 2025 GMT Subject: CN=680ae63d-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:61:36:d7:fb:35:4f:98:ec:33:a1:7d:ee: 83:2e:26:09:1e:d5:8b:f4:fa:f7:6a:26:93:aa:0c: 71:c0:79:91:92:19:ba:c2:f2:0c:4a:c7:36:1d:7d: 02:57:33:90:e4:b5:3b:62:48:aa:28:05:76:c2:7e: 2e:82:27:f6:43:e2:77:04:54:36:38:93:bf:4a:32: 77:96:4e:88:80:3a:01:66:0e:1a:a2:7c:5a:a8:20: d6:8c:9e:60:92:21:ae:30:8a:a6:9d:72:44:52:c5: 15:10:2b:ec:10:dd:06:35:a2:ca:95:7a:2d:48:52: 0d:4e:49:34:d4:67:52:1b:9d:35:77:76:05:e5:a3: 20:98:2e:6f:9b:61:fd:49:6d:e4:68:03:da:f6:01: 09:12:ae:4c:15:9f:ee:22:18:f9:ed:a2:1c:b8:18: ec:41:34:c7:d7:2a:19:f9:f7:a4:10:b8:1b:03:f9: ed:41:64:0a:30:02:44:15:f0:2c:e6:10:61:71:c9: a5:77:83:7d:45:b4:fc:c0:5d:c5:1f:bd:38:41:9f: ec:a0:e7:fc:89:65:46:cd:9d:00:00:91:12:1c:27: f9:f9:1f:af:d6:ca:0d:97:32:04:b8:f6:56:64:06: a7:ae:d2:0a:4d:9a:53:a2:77:65:63:b0:bc:07:f3: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C2:1D:11:12:DF:5E:98:CE:A6:42:94:43:3C:48:15:E9:E0:36:2E X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:55:2e:58:4b:90:2a:c7:75:37:dd:87:29:7d:60:6e:66:47: ab:b1:a3:9e:c3:24:4e:ca:57:e6:ae:21:f8:4d:47:83:29:72: 47:0c:f7:bd:05:6e:af:f2:f6:d6:a3:0c:f9:7a:81:1a:f3:af: 4a:d1:de:29:ae:ff:9d:f6:1d:ab:6d:6d:00:09:26:bd:1c:c1: b2:ab:8e:91:5b:03:b3:49:c9:27:87:6a:63:fe:82:d1:78:92: 64:c9:94:13:3c:dc:28:ff:eb:46:b1:13:f7:04:60:e4:36:59: d6:94:82:b6:5b:0f:9d:65:d3:00:b6:83:67:ac:3c:c3:81:72: 3f:ce:f8:e7:47:7f:68:9f:d1:63:e9:4b:f2:86:17:86:f7:f0: 35:b9:c9:3c:08:ea:67:4b:67:fd:9e:dc:83:ce:1c:e9:47:c4: 71:c3:c0:99:6b:c8:fa:aa:66:1d:52:48:47:20:b7:89:c9:65: c6:13:2b:ad:2d:dc:ec:6b:c7:a2:d5:38:b5:5b:fd:ce:0a:51: 5a:ad:61:08:8c:1b:db:8f:17:54:2f:75:d4:83:6a:fe:1d:2c: dc:a0:08:b3:ec:63:11:35:08:46:2e:23:be:ea:fb:9a:e6:39: da:01:95:5a:73:28:b9:68:5e:f5:2f:65:89:91:6d:50:27:16: 7f:f5:b2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNDI1MDEzMjQ1WhcNMjUwNTAyMDEzMjQ1WjAYMRYwFAYD VQQDEw02ODBhZTYzZC0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfphNtf7NU+Y7DOhfe6DLiYJHtWL9Pr3aiaTqgxxwHmRkhm6wvIMSsc2HX0C VzOQ5LU7YkiqKAV2wn4ugif2Q+J3BFQ2OJO/SjJ3lk6IgDoBZg4aonxaqCDWjJ5g kiGuMIqmnXJEUsUVECvsEN0GNaLKlXotSFINTkk01GdSG501d3YF5aMgmC5vm2H9 SW3kaAPa9gEJEq5MFZ/uIhj57aIcuBjsQTTH1yoZ+fekELgbA/ntQWQKMAJEFfAs 5hBhccmld4N9RbT8wF3FH704QZ/soOf8iWVGzZ0AAJESHCf5+R+v1soNlzIEuPZW ZAanrtIKTZpTondlY7C8B/Ou8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7CHRES 316YzqZClEM8SBXp4DYuMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMVS5YS5Aqx3U33YcpfWBuZkersaOewyROylfmriH4TUeDKXJHDPe9 BW6v8vbWowz5eoEa869K0d4prv+d9h2rbW0ACSa9HMGyq46RWwOzScknh2pj/oLR eJJkyZQTPNwo/+tGsRP3BGDkNlnWlIK2Ww+dZdMAtoNnrDzDgXI/zvjnR39on9Fj 6UvyhheG9/A1uck8COpnS2f9ntyDzhzpR8Rxw8CZa8j6qmYdUkhHILeJyWXGEyut Ldzsa8ei1Ti1W/3OClFarWEIjBvbjxdUL3XUg2r+HSzcoAiz7GMRNQhGLiO+6vua 5jnaAZVacyi5aF71L2WJkW1QJxZ/9bI8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:00 2025 by rpki-client