$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: 3RGeGl+dxlRZGaoPAljtvusaDiNzYzeo3ztYuxh2zbg= Subject key identifier: F1:22:1D:9D:02:F9:77:02:2D:4E:E4:BD:10:76:D6:83:DB:C5:E3:60 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 011C Signing time: Fri 25 Apr 2025 03:51:57 +0000 Manifest this update: Fri 25 Apr 2025 03:51:56 +0000 Manifest next update: Fri 02 May 2025 03:51:56 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: tXCdx5YNjZpdINz04IEIGMt+kOsZCfRNFoILUdzMJLc=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Apr 25 03:51:56 2025 GMT Not After : May 2 03:51:56 2025 GMT Subject: CN=680b06dd-ccf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:a4:69:3d:38:03:28:41:03:c5:2b:c1:e4: 45:0d:66:e6:45:25:91:bc:10:fe:6b:a7:d1:e2:fd: 55:f4:f8:4b:4e:59:55:ce:05:99:e2:60:76:73:da: 7a:37:b8:59:dd:6b:ef:10:74:ca:2b:f6:80:2a:ca: cc:b5:d9:e2:b7:86:79:68:97:04:cc:52:9f:84:7c: cc:1a:69:6e:ca:5d:4f:a5:d9:39:f0:35:a7:59:41: 56:be:9a:e2:5a:6d:2c:1f:11:a9:24:7b:32:2e:70: 92:62:32:db:21:59:98:59:d2:ce:d1:cb:c6:88:8f: 2d:38:bb:23:b0:f9:ba:26:6e:22:1f:3c:72:c3:eb: 25:9e:d1:70:ae:28:68:8e:94:a8:fd:3f:e2:44:c7: 78:cd:f6:05:5a:9a:59:c6:8f:0d:b3:e3:c5:56:6d: ed:00:36:56:ce:1d:a8:2f:e8:3d:33:92:9b:40:c4: 69:9a:41:d4:8d:35:b8:2a:a0:7d:90:e9:0f:cd:e2: 01:8f:a5:8c:2e:66:7e:cf:0d:da:02:62:13:8f:65: 57:16:8d:d8:a3:f8:99:cb:5f:46:6e:c0:5e:0b:34: e1:da:c1:64:56:3e:e2:51:e7:52:61:91:ce:9a:9c: 72:11:19:85:e5:a5:65:77:11:c7:65:74:81:20:45: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:1D:9D:02:F9:77:02:2D:4E:E4:BD:10:76:D6:83:DB:C5:E3:60 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:62:82:1a:45:86:27:a3:7d:8a:ea:ed:38:c0:1e:b4:20:a7: 3d:6f:d4:02:c2:42:60:e6:a4:89:76:8e:ba:56:28:12:4a:79: 70:10:f8:2a:a6:12:d7:87:b7:4b:79:77:da:80:46:77:3a:e6: 4a:ec:5a:76:7e:0e:70:e1:e7:63:56:d5:f8:8f:87:00:5d:a4: 61:65:ac:71:d5:e4:9d:43:4b:92:d6:bf:66:0f:01:fd:13:ba: d9:8c:19:a2:98:97:4d:fc:c8:38:88:2f:fd:7f:88:7b:13:33: 07:fd:8b:67:5f:7f:73:bc:08:46:f5:e2:37:55:6c:3f:6c:ca: a5:86:25:13:e9:98:7c:8b:74:6a:8b:71:c0:6a:54:72:6b:81: e6:02:22:d0:d9:22:ea:fd:9c:47:ed:36:7d:86:08:00:ec:1a: a3:ff:ef:49:7b:c6:48:50:2d:cc:58:e2:b8:6c:56:21:de:f0: e6:1a:cb:60:80:8c:5e:e1:02:15:bd:1a:73:a2:b7:21:c0:04: 2f:9a:da:40:d7:fa:b5:9f:01:b3:8f:85:66:dc:bb:6d:57:8a: 5d:b6:63:08:da:31:f3:0b:16:a8:5b:c2:b3:37:15:b5:07:22: ac:aa:d8:a1:c2:ed:89:66:54:c5:64:57:fd:33:63:64:d9:bc: 3a:2f:25:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNDI1MDM1MTU2WhcNMjUwNTAyMDM1MTU2WjAYMRYwFAYD VQQDEw02ODBiMDZkZC1jY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZKkaT04AyhBA8UrweRFDWbmRSWRvBD+a6fR4v1V9PhLTllVzgWZ4mB2c9p6 N7hZ3WvvEHTKK/aAKsrMtdnit4Z5aJcEzFKfhHzMGmluyl1Ppdk58DWnWUFWvpri Wm0sHxGpJHsyLnCSYjLbIVmYWdLO0cvGiI8tOLsjsPm6Jm4iHzxyw+slntFwriho jpSo/T/iRMd4zfYFWppZxo8Ns+PFVm3tADZWzh2oL+g9M5KbQMRpmkHUjTW4KqB9 kOkPzeIBj6WMLmZ+zw3aAmITj2VXFo3Yo/iZy19GbsBeCzTh2sFkVj7iUedSYZHO mpxyERmF5aVldxHHZXSBIEXYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEiHZ0C +XcCLU7kvRB21oPbxeNgMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhYoIaRYYno32K6u04wB60IKc9b9QCwkJg5qSJdo66VigSSnlwEPgq phLXh7dLeXfagEZ3OuZK7Fp2fg5w4edjVtX4j4cAXaRhZaxx1eSdQ0uS1r9mDwH9 E7rZjBmimJdN/Mg4iC/9f4h7EzMH/YtnX39zvAhG9eI3VWw/bMqlhiUT6Zh8i3Rq i3HAalRya4HmAiLQ2SLq/ZxH7TZ9hggA7Bqj/+9Je8ZIUC3MWOK4bFYh3vDmGstg gIxe4QIVvRpzorchwAQvmtpA1/q1nwGzj4Vm3LttV4pdtmMI2jHzCxaoW8KzNxW1 ByKsqtihwu2JZlTFZFf9M2Nk2bw6LyVG -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:10 2025 by rpki-client