$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json) Hash identifier: h6dlOCxEO2gdNkO8wumsEXoqh7dSJkmiTjmmSboCOtg= Subject key identifier: CC:9B:CE:88:69:43:28:EC:57:2D:70:30:2F:37:28:F4:ED:42:7C:0B Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft Manifest number: 0623 Signing time: Thu 24 Apr 2025 22:29:28 +0000 Manifest this update: Thu 24 Apr 2025 22:29:28 +0000 Manifest next update: Thu 01 May 2025 22:29:28 +0000 Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: YB+HmxWsS50+lVmixDTZ/qvyzOZY/o0qnn1wkctlY+M=) 2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=) 3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Validity Not Before: Apr 24 22:29:28 2025 GMT Not After : May 1 22:29:28 2025 GMT Subject: CN=680abb48-7a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:65:f7:56:30:91:e5:7a:3f:cc:ba:4a:7f: b2:23:94:88:c9:7b:de:0d:63:65:07:99:db:6e:e4: 71:8c:34:3f:26:df:2e:41:a1:e5:8a:3e:26:44:b9: d2:81:fd:07:5e:2c:8a:11:a3:57:3e:1b:16:b2:e5: 01:a0:72:8c:2c:b9:cb:45:a5:22:bb:90:ab:a6:56: 42:c0:6f:d1:04:cd:40:01:1a:af:26:ac:14:1e:51: 30:66:3f:32:2a:0e:4c:dc:6f:f6:2d:bf:92:00:e4: f2:ae:20:48:1c:60:d7:02:8e:14:05:56:2a:cb:00: cd:17:d3:13:ef:0a:05:7f:bc:ef:b7:20:fb:b3:c6: 26:e4:e6:99:12:84:bf:35:84:2d:69:84:8a:f0:b2: d7:2e:8a:60:e6:9a:9d:e3:ec:91:29:21:04:a2:2a: 73:66:05:94:fc:b9:c1:1e:ef:22:8c:98:77:cc:3f: 21:55:29:8c:50:3f:d3:2a:c2:cf:71:5c:75:99:0e: 9d:a2:c3:aa:f3:b5:cb:45:dc:12:f7:83:e5:64:3f: 00:78:92:01:f8:dd:ff:1c:02:c4:7b:0a:ca:ee:dd: 89:c1:55:bc:28:55:0a:d2:0b:b6:20:0a:91:9c:64: 96:7b:3c:0b:ff:37:be:10:e2:e6:f9:d5:18:6d:a5: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:CE:88:69:43:28:EC:57:2D:70:30:2F:37:28:F4:ED:42:7C:0B X509v3 Authority Key Identifier: keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ea:a1:1f:82:66:de:0d:0f:b6:23:5c:97:b7:57:1d:63:b1: 7d:86:34:4f:55:8d:df:c0:45:aa:d7:d5:c4:33:de:4b:07:fb: 54:28:c5:ee:c7:6c:8d:26:fa:31:0a:5a:b2:88:c3:0e:d3:83: 27:f3:c3:b6:48:6e:0d:fb:1c:83:1d:a6:87:b0:93:11:88:df: 5c:60:15:6a:85:e7:91:bd:0a:f6:ad:20:b0:ec:a9:de:69:c1: 4f:da:b2:91:27:66:e0:9c:e6:59:a2:05:59:d8:5b:75:fe:c5: 47:1e:33:70:ac:ff:43:ec:4c:61:1f:86:3c:5d:3d:4c:63:a0: 5f:a0:ea:80:8a:56:7d:74:d6:4b:0e:52:61:24:71:14:c2:57: df:b5:7c:4a:46:12:bb:5e:53:18:c8:fe:31:ca:2f:34:f1:25: d2:55:a0:11:1a:25:0d:44:fd:2c:8d:58:c4:6c:92:6d:d9:6e: f8:f1:c7:18:12:88:b0:5a:61:0d:de:7f:a8:5e:6e:db:dd:e3: f3:3f:ee:29:6a:a0:0e:fe:43:5c:d4:d5:2c:77:2b:57:72:83: 74:3d:f8:4a:ec:7a:6d:5a:31:23:83:57:44:a1:64:46:20:19: 8a:53:eb:bb:4b:9b:db:77:8f:a2:72:ec:7c:4c:30:4d:d5:95: 62:f4:a8:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz M0E3OTk2MDkwHhcNMjUwNDI0MjIyOTI4WhcNMjUwNTAxMjIyOTI4WjAYMRYwFAYD VQQDEw02ODBhYmI0OC03YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBRl91YwkeV6P8y6Sn+yI5SIyXveDWNlB5nbbuRxjDQ/Jt8uQaHlij4mRLnS gf0HXiyKEaNXPhsWsuUBoHKMLLnLRaUiu5CrplZCwG/RBM1AARqvJqwUHlEwZj8y Kg5M3G/2Lb+SAOTyriBIHGDXAo4UBVYqywDNF9MT7woFf7zvtyD7s8Ym5OaZEoS/ NYQtaYSK8LLXLopg5pqd4+yRKSEEoipzZgWU/LnBHu8ijJh3zD8hVSmMUD/TKsLP cVx1mQ6dosOq87XLRdwS94PlZD8AeJIB+N3/HALEewrK7t2JwVW8KFUK0gu2IAqR nGSWezwL/ze+EOLm+dUYbaX/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMybzohp QyjsVy1wMC83KPTtQnwLMB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0Y4My9BMzk5NjEwNjkxMjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpL V1RuWExxX2RPa2N6cDVsZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6qEfgmbeDQ+2I1yXt1cdY7F9hjRPVY3fwEWq19XEM95LB/tUKMXu x2yNJvoxClqyiMMO04Mn88O2SG4N+xyDHaaHsJMRiN9cYBVqheeRvQr2rSCw7Kne acFP2rKRJ2bgnOZZogVZ2Ft1/sVHHjNwrP9D7ExhH4Y8XT1MY6BfoOqAilZ9dNZL DlJhJHEUwlfftXxKRhK7XlMYyP4xyi808SXSVaARGiUNRP0sjVjEbJJt2W748ccY EoiwWmEN3n+oXm7b3ePzP+4paqAO/kNc1NUsdytXcoN0PfhK7HptWjEjg1dEoWRG IBmKU+u7S5vbd4+icux8TDBN1ZVi9KhQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:10 2025 by rpki-client