$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: DcbZgwRV6vthIAor1DSj2FSwL579cdq42Om2wl31I7E= Subject key identifier: 28:90:15:9E:EB:FE:3C:3D:D2:D1:FB:F3:E9:18:46:33:B3:29:FA:5F Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 1173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 116A Signing time: Thu 24 Apr 2025 17:14:54 +0000 Manifest this update: Thu 24 Apr 2025 17:14:54 +0000 Manifest next update: Thu 01 May 2025 17:14:54 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: FjWG4XJT8+2uNk30dq07sbUA+bLZ+/4HJVdzCGyFCic=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4467 (0x1173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Apr 24 17:14:54 2025 GMT Not After : May 1 17:14:54 2025 GMT Subject: CN=680a718e-5eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:9e:3e:00:cf:54:42:ea:80:d9:60:fc:09: 3a:85:7e:5b:47:8c:25:09:5f:e0:e2:3b:7a:ba:a1: 43:4f:0d:e8:ab:15:d8:ef:ab:b4:f1:32:42:eb:a5: d3:3e:48:21:04:20:44:e7:f6:08:61:93:7c:a1:2b: 5b:35:53:e3:24:81:12:80:b5:a1:0f:06:b3:c6:34: 90:1b:ca:2c:12:b7:e2:39:4c:5f:b7:2d:bc:a9:71: 44:1c:37:a4:3a:05:6b:a3:d7:c7:7a:6a:c4:b4:bc: 85:05:c1:23:b4:c1:fd:e9:a6:d9:09:ef:31:82:f9: 90:e6:58:7d:83:24:41:68:e5:9e:43:7c:7d:23:4b: 31:93:58:ea:58:48:44:9f:9f:0d:33:09:cb:43:14: 0e:2f:17:7a:ad:55:e9:7f:ad:5f:66:d1:a1:87:fa: 1a:e3:4c:71:dc:cc:24:47:7c:a4:67:fe:c4:07:c5: 0e:63:4a:ec:4b:3f:10:d9:05:89:50:92:e4:eb:ff: fd:79:07:c0:b1:5c:9b:82:c8:41:4a:29:40:a0:65: e8:37:8c:cf:96:a1:04:8f:ca:58:07:36:78:68:e5: 1d:30:05:0e:24:d4:59:4e:2d:37:4b:5b:d4:5b:47: ef:31:74:70:ff:a2:41:68:73:39:d7:57:3e:09:df: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:90:15:9E:EB:FE:3C:3D:D2:D1:FB:F3:E9:18:46:33:B3:29:FA:5F X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bf:74:97:7c:6e:cc:fd:b4:15:06:a9:ae:a8:f3:b4:b4:02: 93:34:63:3c:5f:aa:b6:a2:83:0d:50:bb:48:74:e6:11:4b:5b: da:ce:7a:e8:f5:96:8e:41:ba:fb:59:3b:46:f3:56:4b:cf:0c: 84:01:20:95:06:b1:94:52:f2:3c:f4:93:d4:f5:2c:d8:4e:f6: 6e:7a:49:48:4f:f8:3c:4d:43:c7:d2:b4:6a:6d:2b:20:76:7e: e9:57:4b:3c:9f:8b:11:2c:e0:17:83:3c:85:a5:de:44:92:a6: 06:83:8e:7c:96:74:09:28:ac:a7:69:c9:68:eb:23:85:53:29: 16:92:89:16:48:0d:cb:af:41:ba:7c:75:bd:21:87:be:d6:16: 70:95:77:a6:58:b8:bb:e7:e5:dc:1c:f2:bf:4e:48:5e:f2:2e: 08:81:35:65:8b:15:7d:6c:b6:9d:3f:b4:93:73:1a:e2:84:ae: c0:40:c9:12:b4:2a:c0:3f:e6:ec:75:53:ae:81:aa:ab:14:2c: f5:40:d1:7b:bb:a9:63:bc:98:3a:14:23:b5:79:80:b5:64:40: bf:cc:8a:f9:ab:0b:8e:45:35:43:54:fa:cc:81:ba:56:97:16: b0:6b:53:21:f6:fe:fc:f8:a8:7a:8d:d6:77:ef:1e:42:8f:29: 1b:a9:59:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUwNDI0MTcxNDU0WhcNMjUwNTAxMTcxNDU0WjAYMRYwFAYD VQQDEw02ODBhNzE4ZS01ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R2ePgDPVELqgNlg/Ak6hX5bR4wlCV/g4jt6uqFDTw3oqxXY76u08TJC66XT PkghBCBE5/YIYZN8oStbNVPjJIESgLWhDwazxjSQG8osErfiOUxfty28qXFEHDek OgVro9fHemrEtLyFBcEjtMH96abZCe8xgvmQ5lh9gyRBaOWeQ3x9I0sxk1jqWEhE n58NMwnLQxQOLxd6rVXpf61fZtGhh/oa40xx3MwkR3ykZ/7EB8UOY0rsSz8Q2QWJ UJLk6//9eQfAsVybgshBSilAoGXoN4zPlqEEj8pYBzZ4aOUdMAUOJNRZTi03S1vU W0fvMXRw/6JBaHM511c+Cd/sXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiQFZ7r /jw90tH78+kYRjOzKfpfMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvv3SXfG7M/bQVBqmuqPO0tAKTNGM8X6q2ooMNULtIdOYRS1vaznro 9ZaOQbr7WTtG81ZLzwyEASCVBrGUUvI89JPU9SzYTvZueklIT/g8TUPH0rRqbSsg dn7pV0s8n4sRLOAXgzyFpd5EkqYGg458lnQJKKynaclo6yOFUykWkokWSA3Lr0G6 fHW9IYe+1hZwlXemWLi75+XcHPK/Tkhe8i4IgTVlixV9bLadP7STcxrihK7AQMkS tCrAP+bsdVOugaqrFCz1QNF7u6ljvJg6FCO1eYC1ZEC/zIr5qwuORTVDVPrMgbpW lxawa1Mh9v78+Kh6jdZ37x5CjykbqVmm -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:17 2025 by rpki-client