$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: 2oytg6DHvRN5XpQW0D5o+vi7GHvWzbEk3cCAcQ0zYS8= Subject key identifier: D9:CF:81:90:2D:18:DB:BD:50:7E:E5:D2:39:1E:2D:96:D0:85:B6:C4 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C40 Signing time: Thu 24 Apr 2025 18:19:37 +0000 Manifest this update: Thu 24 Apr 2025 18:19:37 +0000 Manifest next update: Thu 01 May 2025 18:19:37 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: Yds6qJYTGT/Qhv8rU9oM6qKXUJWX/GSJ155+tmLYJj0=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Apr 24 18:19:37 2025 GMT Not After : May 1 18:19:37 2025 GMT Subject: CN=680a80b9-a68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:16:31:92:90:ae:84:62:aa:0a:d3:fb:23: 55:ba:07:62:90:66:65:92:29:e0:2a:75:fd:ee:4b: b1:0f:93:1a:4e:ca:37:c6:db:b4:9c:30:48:19:47: f3:71:97:a1:b4:28:69:b6:8c:88:7d:64:a5:8d:d5: 91:ff:76:9c:c6:db:5c:58:b4:e3:2b:b2:bd:31:f5: 0b:6d:fe:5a:0f:10:03:0d:6a:01:79:bc:64:ac:ba: be:1c:27:12:2b:9f:17:e1:8f:d0:23:b0:cd:ce:92: 0e:70:ad:a5:57:a3:16:78:0d:df:3d:38:f0:41:7d: f1:5c:0d:af:73:4a:ee:13:2e:f2:b8:f5:c4:70:c9: 34:f5:9e:8a:30:0e:1f:69:c2:9b:ce:99:e9:a8:08: ac:98:a6:2a:2c:d4:9a:e4:01:d8:41:35:bc:c0:9b: ae:18:8c:6d:b8:46:8a:02:dd:43:a7:fa:20:a1:e8: 96:63:ff:cd:50:87:b2:0f:dd:76:04:3a:48:8d:7f: 61:08:c0:20:a8:57:48:25:55:ef:8b:c7:3e:9f:d8: 9d:4c:95:cb:c5:a5:d7:07:bc:bf:e2:f1:24:b2:95: c1:b4:bf:9c:b8:07:1e:68:48:e4:bc:a2:15:a3:71: e6:6b:29:52:ad:8b:d2:d2:45:0e:9d:7c:00:0f:5a: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:81:90:2D:18:DB:BD:50:7E:E5:D2:39:1E:2D:96:D0:85:B6:C4 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:60:45:89:b2:21:4e:3a:0a:8d:ae:96:a7:44:a0:e5:8c:20: 3a:f4:09:d2:af:b2:89:e9:f1:3a:2a:8f:64:89:cc:aa:13:0e: 74:b4:22:2a:1e:88:e6:0f:2f:e9:32:fb:9a:01:1c:d3:2c:c0: de:58:54:76:54:52:09:0c:c0:b7:26:05:3f:da:3b:88:2c:9d: d8:25:e7:6d:64:11:86:47:16:cd:59:da:96:4a:98:10:f3:d9: 53:a9:bb:0b:1d:fe:1e:7c:07:47:0b:b9:7a:3f:c4:83:4f:5d: 5f:38:9a:fe:bb:5b:74:25:b3:e8:1a:61:89:62:ac:d9:9c:23: b3:1d:d5:da:ce:6f:d4:14:23:f5:fa:14:2a:07:c9:9c:68:e0: b6:8c:b2:62:02:8b:00:2f:5c:a2:b1:56:4d:28:bf:49:2f:00: bc:7a:18:44:0f:48:29:e4:31:c1:41:5c:fc:f0:d1:05:e2:ec: 9b:ba:c2:b0:95:f3:35:7e:76:4a:38:bb:8c:2f:ab:1b:e5:1b: 11:75:8d:b4:38:c0:5a:0e:85:1a:03:81:c2:d2:a9:f6:28:19: 3d:3e:c5:93:d6:1e:2f:97:19:8f:79:e0:d4:f4:c1:49:ab:1f: 3c:6d:15:b6:0f:3d:63:5f:21:65:dd:7c:db:dd:05:23:ab:49: 13:8d:27:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwNDI0MTgxOTM3WhcNMjUwNTAxMTgxOTM3WjAYMRYwFAYD VQQDEw02ODBhODBiOS1hNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRAWMZKQroRiqgrT+yNVugdikGZlkingKnX97kuxD5MaTso3xtu0nDBIGUfz cZehtChptoyIfWSljdWR/3acxttcWLTjK7K9MfULbf5aDxADDWoBebxkrLq+HCcS K58X4Y/QI7DNzpIOcK2lV6MWeA3fPTjwQX3xXA2vc0ruEy7yuPXEcMk09Z6KMA4f acKbzpnpqAismKYqLNSa5AHYQTW8wJuuGIxtuEaKAt1Dp/ogoeiWY//NUIeyD912 BDpIjX9hCMAgqFdIJVXvi8c+n9idTJXLxaXXB7y/4vEkspXBtL+cuAceaEjkvKIV o3HmaylSrYvS0kUOnXwAD1plywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnPgZAt GNu9UH7l0jkeLZbQhbbEMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdYEWJsiFOOgqNrpanRKDljCA69AnSr7KJ6fE6Ko9kicyqEw50tCIq HojmDy/pMvuaARzTLMDeWFR2VFIJDMC3JgU/2juILJ3YJedtZBGGRxbNWdqWSpgQ 89lTqbsLHf4efAdHC7l6P8SDT11fOJr+u1t0JbPoGmGJYqzZnCOzHdXazm/UFCP1 +hQqB8mcaOC2jLJiAosAL1yisVZNKL9JLwC8ehhED0gp5DHBQVz88NEF4uybusKw lfM1fnZKOLuML6sb5RsRdY20OMBaDoUaA4HC0qn2KBk9PsWT1h4vlxmPeeDU9MFJ qx88bRW2Dz1jXyFl3Xzb3QUjq0kTjSeu -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:47 2025 by rpki-client