$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: MyfY2+JOlTSStiPFHHZvIbrDMtn3M2C8CBoi102AzAY= Subject key identifier: 0F:16:DD:F3:3A:9E:35:1A:4C:01:D3:7C:3F:64:5A:64:96:32:0B:ED Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C33 Signing time: Thu 24 Apr 2025 18:21:37 +0000 Manifest this update: Thu 24 Apr 2025 18:21:36 +0000 Manifest next update: Thu 01 May 2025 18:21:36 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: m1OXYFq4oAq52T4q771OASpbfYUmL8yWuA7sdy7IfF4=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3130 (0xc3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Apr 24 18:21:36 2025 GMT Not After : May 1 18:21:36 2025 GMT Subject: CN=680a8130-0dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:3c:4e:b6:62:c0:4d:7a:48:d7:32:5b:73: 95:3f:aa:f3:f2:6b:e5:c2:f3:b8:98:4b:66:16:9e: 92:9d:65:30:2e:1b:f2:f2:cb:b0:70:de:6f:06:7f: fc:09:59:73:c8:0a:ba:22:ba:e8:7d:8e:cf:a5:4e: 0d:83:6b:86:af:e2:5d:ba:63:69:53:cd:82:20:c2: e1:a0:3f:37:60:94:ef:7d:c2:de:43:62:2b:11:24: 0e:8b:8d:84:3a:8d:67:88:fe:29:b5:e6:1f:93:c5: ca:50:9d:51:5a:8c:07:81:4e:af:60:d7:de:b1:15: 44:09:61:83:d1:e7:48:74:71:4d:93:39:15:e7:de: dc:b8:ae:94:48:18:2c:67:9b:92:80:1b:af:d6:cd: 4d:90:d1:c2:f5:d4:7f:50:16:1a:4c:d8:3d:90:c7: 5a:2e:ce:95:f2:9d:4a:cc:a6:3f:c0:ee:6c:8f:98: c6:e9:da:96:45:87:2d:e4:20:3b:34:f1:d6:43:08: 5e:eb:9e:b6:e6:0f:59:bf:da:c4:53:a5:3f:63:ae: fa:1f:77:2c:4b:54:88:c9:88:59:6c:13:5e:9e:eb: 94:1c:b8:1c:4c:fa:03:32:53:f3:ed:64:a5:d7:78: 15:f8:6c:c8:9c:87:fd:49:ec:81:59:d8:08:c4:20: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:16:DD:F3:3A:9E:35:1A:4C:01:D3:7C:3F:64:5A:64:96:32:0B:ED X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:06:2c:4f:fc:d0:c4:5d:47:52:a0:b6:6c:d4:12:7b:7e:78: 98:95:4c:30:b8:9d:7d:4f:c3:b2:00:f9:6f:e5:c3:19:b6:0c: 13:16:f2:26:a6:83:81:c7:78:c4:58:4a:a0:bd:51:a0:32:28: 02:f6:fe:e2:89:38:8a:15:c0:cb:28:48:3c:a3:be:5e:4b:f4: 87:f0:61:25:2b:c3:26:50:6c:ec:0f:ed:61:ec:64:49:59:80: bb:0c:bd:ea:57:7a:f1:06:ea:31:f4:c0:07:f0:9a:0a:a0:2b: 09:50:66:9e:35:18:3a:80:a8:c6:5c:c9:16:93:e0:a3:f0:9c: b6:18:69:00:ad:e9:1f:8e:eb:ac:64:ae:22:59:ed:d7:63:b9: 8d:20:db:ab:16:dd:da:4c:9f:ef:d9:da:3f:0c:2e:17:ea:5b: 8d:92:ef:2b:b2:80:07:4a:ae:95:37:f9:c4:7c:e5:1b:59:05: 00:e8:98:60:00:88:90:3d:c2:02:3d:d9:e9:71:88:88:5f:11: ad:15:9a:ff:44:ca:28:56:77:7a:cc:ed:4f:ff:ce:74:a1:8a: e4:ba:1e:77:8f:40:36:e2:c2:50:1a:23:d3:9b:23:76:5b:7a: 24:2f:a2:36:b5:83:7d:2b:4c:fe:49:23:1c:90:85:e4:1b:c3: 1c:b7:ae:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNDI0MTgyMTM2WhcNMjUwNTAxMTgyMTM2WjAYMRYwFAYD VQQDEw02ODBhODEzMC0wZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5M8TrZiwE16SNcyW3OVP6rz8mvlwvO4mEtmFp6SnWUwLhvy8suwcN5vBn/8 CVlzyAq6IrrofY7PpU4Ng2uGr+JdumNpU82CIMLhoD83YJTvfcLeQ2IrESQOi42E Oo1niP4pteYfk8XKUJ1RWowHgU6vYNfesRVECWGD0edIdHFNkzkV597cuK6USBgs Z5uSgBuv1s1NkNHC9dR/UBYaTNg9kMdaLs6V8p1KzKY/wO5sj5jG6dqWRYct5CA7 NPHWQwhe65625g9Zv9rEU6U/Y676H3csS1SIyYhZbBNenuuUHLgcTPoDMlPz7WSl 13gV+GzInIf9SeyBWdgIxCBu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8W3fM6 njUaTAHTfD9kWmSWMgvtMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvBixP/NDEXUdSoLZs1BJ7fniYlUwwuJ19T8OyAPlv5cMZtgwTFvIm poOBx3jEWEqgvVGgMigC9v7iiTiKFcDLKEg8o75eS/SH8GElK8MmUGzsD+1h7GRJ WYC7DL3qV3rxBuox9MAH8JoKoCsJUGaeNRg6gKjGXMkWk+Cj8Jy2GGkArekfjuus ZK4iWe3XY7mNINurFt3aTJ/v2do/DC4X6luNku8rsoAHSq6VN/nEfOUbWQUA6Jhg AIiQPcICPdnpcYiIXxGtFZr/RMooVnd6zO1P/850oYrkuh53j0A24sJQGiPTmyN2 W3okL6I2tYN9K0z+SSMckIXkG8Mct66f -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:23 2025 by rpki-client