$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: E8V9iGJjDZZMNEoUdT9m78xYLSSPo3q4QCa9jWI+DTU= Subject key identifier: C1:26:14:9E:72:CF:C9:38:CA:38:1B:AD:89:F6:D4:B2:CE:77:43:6F Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 10A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 1098 Signing time: Thu 24 Apr 2025 17:20:46 +0000 Manifest this update: Thu 24 Apr 2025 17:20:46 +0000 Manifest next update: Thu 01 May 2025 17:20:46 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 5MA4uMK7uHDAnn8Rh+Ko4M02dNnLaZRu/QIzxpJbuHw=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: ibzIHQiS71/cKL/AN17g76C8mULHtazMynL8XoJHu8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4263 (0x10a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Apr 24 17:20:46 2025 GMT Not After : May 1 17:20:46 2025 GMT Subject: CN=680a72ee-688d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:af:c9:8a:0a:19:2f:12:20:5a:3e:09:12: a3:14:2e:b8:83:e1:b9:99:b6:a6:1e:d9:05:dc:f4: 1b:ac:a2:22:6a:b3:7f:ad:dc:ad:15:92:98:bd:1b: 86:b6:a4:f5:a3:0e:bb:62:a1:c7:67:f0:03:d3:1f: f0:e1:49:12:e4:80:8a:83:ed:34:05:25:e4:56:8b: c2:d0:86:cc:31:99:a2:e1:23:54:94:f8:58:5a:bf: a0:f4:a0:f6:88:97:47:87:24:8d:fe:e8:ea:18:31: c5:08:40:dc:42:fc:92:d6:df:66:db:1d:9a:c4:d0: a4:51:e2:eb:83:a0:c7:1c:ed:69:cf:c4:c8:5f:bb: 02:8b:b4:24:26:43:33:94:10:95:17:95:95:15:74: 4b:f4:df:e6:f3:e7:5f:e3:29:dd:ee:3d:52:7b:2b: a6:a7:46:80:24:9f:c0:b4:b0:46:ba:df:cf:04:8d: c9:ae:e7:02:34:ba:8b:55:69:89:cf:af:fb:bd:80: e5:f2:2e:56:d6:99:50:1a:df:17:6b:bd:7a:62:34: e3:59:7c:68:0b:17:8a:f7:38:f9:ed:07:6e:50:39: 1e:2a:b5:a9:14:0c:1d:7c:56:16:cb:24:8b:25:89: b7:c5:a9:5f:07:90:5a:54:e3:37:6a:51:45:55:fc: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:26:14:9E:72:CF:C9:38:CA:38:1B:AD:89:F6:D4:B2:CE:77:43:6F X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5a:9d:d4:7a:25:ab:3b:d0:bd:71:3f:f3:0e:80:90:f9:83: d9:6d:73:84:83:25:0c:1b:61:bf:da:f7:0d:fb:c9:1c:df:15: 78:a1:fd:c6:d1:a0:6b:22:bf:89:67:43:f8:66:42:ae:04:1e: 11:94:c5:b5:0c:84:f4:55:e2:03:81:07:28:28:24:c6:36:2b: ac:7f:c1:66:23:e8:9d:54:e8:6e:0c:e2:3a:73:42:72:d0:4f: 68:75:20:3d:e8:5a:c6:d4:0a:e2:6c:f7:2b:f1:de:7e:04:91: 17:ac:04:f6:2b:bf:d3:12:26:95:6d:16:4f:53:86:27:3d:87: c8:e8:57:18:66:4e:ee:88:9e:15:5e:ab:dc:9f:e9:b8:4e:7f: f4:10:f2:7b:ff:69:4b:56:fd:8a:93:c1:6c:bc:6c:9b:50:f9: e2:91:91:14:68:6e:75:60:5b:ea:86:d7:4c:8f:61:5d:cd:b8: 40:f9:ca:5d:17:ee:91:ad:af:b9:9b:4b:23:f7:ed:69:87:f9: bf:03:ad:58:50:06:10:80:5b:4a:1d:de:a6:13:cc:8d:2c:f5: 74:4b:93:dd:d4:ab:b9:23:fd:c7:df:95:9d:2c:48:20:17:c1: 50:6d:e4:a8:39:e5:87:79:23:ab:84:e8:d9:68:40:1a:35:b5: d9:2b:af:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUwNDI0MTcyMDQ2WhcNMjUwNTAxMTcyMDQ2WjAYMRYwFAYD VQQDEw02ODBhNzJlZS02ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZavyYoKGS8SIFo+CRKjFC64g+G5mbamHtkF3PQbrKIiarN/rdytFZKYvRuG tqT1ow67YqHHZ/AD0x/w4UkS5ICKg+00BSXkVovC0IbMMZmi4SNUlPhYWr+g9KD2 iJdHhySN/ujqGDHFCEDcQvyS1t9m2x2axNCkUeLrg6DHHO1pz8TIX7sCi7QkJkMz lBCVF5WVFXRL9N/m8+df4ynd7j1Seyump0aAJJ/AtLBGut/PBI3JrucCNLqLVWmJ z6/7vYDl8i5W1plQGt8Xa716YjTjWXxoCxeK9zj57QduUDkeKrWpFAwdfFYWyySL JYm3xalfB5BaVOM3alFFVfy0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEmFJ5y z8k4yjgbrYn21LLOd0NvMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWp3UeiWrO9C9cT/zDoCQ+YPZbXOEgyUMG2G/2vcN+8kc3xV4of3G 0aBrIr+JZ0P4ZkKuBB4RlMW1DIT0VeIDgQcoKCTGNiusf8FmI+idVOhuDOI6c0Jy 0E9odSA96FrG1AribPcr8d5+BJEXrAT2K7/TEiaVbRZPU4YnPYfI6FcYZk7uiJ4V Xqvcn+m4Tn/0EPJ7/2lLVv2Kk8FsvGybUPnikZEUaG51YFvqhtdMj2FdzbhA+cpd F+6Rra+5m0sj9+1ph/m/A61YUAYQgFtKHd6mE8yNLPV0S5Pd1Ku5I/3H35WdLEgg F8FQbeSoOeWHeSOrhOjZaEAaNbXZK6// -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:44 2025 by rpki-client