$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: Xny8Xb1egVivMZF5qD3zYnxzXTzUCfcDfSx/uu+W8/w= Subject key identifier: 3A:99:C8:A2:1A:50:1D:EA:57:DA:FC:2F:4D:E5:41:2C:E6:18:BA:1B Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 0884 Signing time: Thu 12 Jun 2025 21:16:12 +0000 Manifest this update: Thu 12 Jun 2025 21:16:12 +0000 Manifest next update: Thu 19 Jun 2025 21:16:12 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: uBdRQgTsUgzLU8a05noiTELG3IzMDo+U8XSpv5XHwuE=) 2: 2A9266CE072011EF91900755C4F9AE02.roa (hash: yyylPx4liRdygaGzXhmeYgjo6sG/XK0XYIEyO4DIA1A=) 3: AA4C4484A9EC11EE800F7626C4F9AE02.roa (hash: 3XvxyjmJ18+MDyHbsINeBS/PyLVoir6bW8ksJcj0fKs=) 4: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (hash: rnXoLY/vGH6qwmV7thRnYiN9Hc46x1QdMXU9ME3UtD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Jun 12 21:16:12 2025 GMT Not After : Jun 19 21:16:12 2025 GMT Subject: CN=684b439c-9945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:a2:3c:05:87:cb:bb:d7:f0:65:19:d3:1a: 01:3a:07:13:bb:7c:60:a7:a4:73:0f:bd:10:d4:44: 74:43:97:f7:89:bb:1e:c9:86:19:03:41:7b:96:ba: 35:44:40:00:65:31:1d:3d:65:cd:df:8a:13:1d:ea: 52:5b:1f:e5:d6:39:a7:cd:c3:30:13:58:e2:33:32: 0a:03:ab:66:12:31:5b:1a:f5:c2:b1:31:76:00:b9: 8a:1a:6b:25:2c:b2:aa:df:24:d1:2b:3d:6c:77:3d: 73:35:c0:87:b6:3b:79:67:91:6d:84:dc:90:36:94: 90:05:de:96:56:0d:d3:a1:33:41:6d:94:48:ad:e8: 82:80:dd:1e:a1:e7:dd:73:ef:ab:d9:51:af:29:73: 23:31:93:81:9a:2f:6f:9d:33:eb:33:b5:6b:40:34: bf:90:52:f3:2b:49:5f:ac:a9:58:5c:1c:d3:24:b2: 1a:86:d0:3d:ea:d9:90:6b:9a:7e:47:72:97:31:d8: c2:c4:5d:7b:d4:96:6d:d7:a7:13:6e:b7:f6:50:45: 14:50:41:5d:fb:5d:15:0e:13:23:49:da:6c:67:61: b7:40:09:f4:f9:fe:1b:ef:c6:05:2e:fd:cb:4b:27: 69:00:d9:37:7b:66:eb:e4:d7:27:17:0d:c0:0d:9d: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:C8:A2:1A:50:1D:EA:57:DA:FC:2F:4D:E5:41:2C:E6:18:BA:1B X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:67:7b:9b:58:32:91:86:a2:d2:a7:9a:08:1e:1b:bc:9a:b2: 2f:3f:e1:c4:26:af:4f:e5:e5:bd:a3:36:da:a1:95:67:80:80: b8:77:85:a1:f4:cd:99:b8:64:d8:13:85:ac:97:0a:56:2e:12: 3a:a1:fc:11:ca:cd:7c:82:79:c4:6c:de:7d:8d:5c:71:6d:b8: d6:d1:f3:1b:00:31:24:98:91:44:0a:75:ee:8c:6d:fd:d5:36: 8b:0a:8f:68:7c:bd:15:5a:67:58:35:f0:f3:26:c9:6f:09:25: 9f:dd:cf:ad:4d:a3:50:25:63:40:f4:8d:03:96:cb:50:4c:20: 1c:01:d7:08:12:6c:8b:7a:d3:ce:31:79:a5:ca:f2:17:29:60: d7:81:ca:a1:f8:27:45:cb:b5:98:cb:fe:04:d1:8f:ef:0a:43: 74:57:1c:18:a6:17:e4:5b:8a:89:5b:27:4b:e5:9d:57:19:eb: e4:e3:92:27:ec:c7:67:bf:ca:c8:17:2b:14:da:12:e1:b6:d1: 51:f1:5f:37:ed:fc:b3:e2:90:32:5d:02:17:39:0d:bb:86:33: d4:4e:04:3e:90:b1:57:22:c3:0d:78:ea:40:ae:46:39:ac:ed: 6c:c6:5e:c2:e2:97:24:29:4f:64:5e:12:d1:69:29:ef:aa:57: df:eb:1a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNjEyMjExNjEyWhcNMjUwNjE5MjExNjEyWjAYMRYwFAYD VQQDEw02ODRiNDM5Yy05OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EaiPAWHy7vX8GUZ0xoBOgcTu3xgp6RzD70Q1ER0Q5f3ibseyYYZA0F7lro1 REAAZTEdPWXN34oTHepSWx/l1jmnzcMwE1jiMzIKA6tmEjFbGvXCsTF2ALmKGmsl LLKq3yTRKz1sdz1zNcCHtjt5Z5FthNyQNpSQBd6WVg3ToTNBbZRIreiCgN0eoefd c++r2VGvKXMjMZOBmi9vnTPrM7VrQDS/kFLzK0lfrKlYXBzTJLIahtA96tmQa5p+ R3KXMdjCxF171JZt16cTbrf2UEUUUEFd+10VDhMjSdpsZ2G3QAn0+f4b78YFLv3L SydpANk3e2br5NcnFw3ADZ0vfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqZyKIa UB3qV9r8L03lQSzmGLobMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmZ3ubWDKRhqLSp5oIHhu8mrIvP+HEJq9P5eW9ozbaoZVngIC4d4Wh 9M2ZuGTYE4WslwpWLhI6ofwRys18gnnEbN59jVxxbbjW0fMbADEkmJFECnXujG39 1TaLCo9ofL0VWmdYNfDzJslvCSWf3c+tTaNQJWNA9I0DlstQTCAcAdcIEmyLetPO MXmlyvIXKWDXgcqh+CdFy7WYy/4E0Y/vCkN0VxwYphfkW4qJWydL5Z1XGevk45In 7Mdnv8rIFysU2hLhttFR8V837fyz4pAyXQIXOQ27hjPUTgQ+kLFXIsMNeOpArkY5 rO1sxl7C4pckKU9kXhLRaSnvqlff6xqP -----END CERTIFICATE-----Generated at Sat Jun 14 17:33:31 2025 by rpki-client