$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: vXyTOpSWaCkw7iXlGNtmXk2Vw7keqavpWetcXSp+WOc= Subject key identifier: DD:A4:81:13:5A:49:98:D0:7E:93:D4:D5:39:12:7F:3A:1F:57:74:01 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 084E Signing time: Thu 24 Apr 2025 21:27:41 +0000 Manifest this update: Thu 24 Apr 2025 21:27:40 +0000 Manifest next update: Thu 01 May 2025 21:27:40 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: P1ZhFRr/V+y7zH7clweVczYvuuauB6/itrfHt1N0wCQ=) 2: 2A9266CE072011EF91900755C4F9AE02.roa (hash: rV1tZHjl8SPIkbB4wyOYHPIr8Sa91I/7WNLF0z8+Lno=) 3: AA4C4484A9EC11EE800F7626C4F9AE02.roa (hash: 3wKkJrcryLxAkgXlA5Z4R54ZUV7JvlrIu4MGL1ZDG4Y=) 4: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (hash: J5UaMWxA22MLIYfNHhaNZK6wflzdwnkR+fQOuZFhg/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Apr 24 21:27:40 2025 GMT Not After : May 1 21:27:40 2025 GMT Subject: CN=680aaccc-c308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:e2:b2:b6:48:32:c1:d5:93:ef:73:4c:b9: 71:a3:c8:8a:cf:5d:95:4a:e1:d3:48:8e:ac:f6:53: 6c:ff:47:e4:c3:da:af:a3:61:f1:8f:ae:e1:fa:4a: b2:a1:60:14:d5:cb:df:fc:9c:a9:3e:2d:45:ed:6a: 14:ae:9d:6b:c9:44:5d:84:dd:25:9c:6a:64:0b:ef: ab:c6:5c:37:4f:0b:53:dd:a4:6c:3c:ea:2b:aa:f4: b5:b5:a6:ff:ba:81:19:4b:40:c8:f2:fd:71:24:a2: 34:58:a8:b0:d8:66:65:51:1b:47:fc:16:40:84:4e: d4:40:d7:2d:eb:d6:4f:25:62:dd:dd:6a:66:ac:4c: 2f:fd:7c:eb:de:44:ff:f5:84:e3:13:07:1a:40:5c: 70:1f:6d:c0:d8:70:e6:66:de:58:46:1f:72:ed:9f: 9f:05:22:3d:4a:05:09:40:65:b0:f3:2a:58:29:cf: e7:79:39:89:6a:bf:96:e0:b0:d6:ca:8d:4b:2f:c2: 59:87:30:64:9c:b1:7e:0d:fb:f7:5e:58:72:2e:25: 00:8c:67:3b:48:11:2b:9b:c9:a1:9a:70:f3:f2:98: 2c:56:94:ae:37:ec:f0:61:89:32:99:66:2a:35:c9: 38:41:e3:4c:f3:96:60:32:f3:72:52:71:70:51:15: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:81:13:5A:49:98:D0:7E:93:D4:D5:39:12:7F:3A:1F:57:74:01 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:1c:52:ae:a0:16:86:33:9c:3f:5c:bd:3f:33:22:57:bd: 23:33:53:c4:77:84:93:e3:10:1f:a9:71:25:75:08:e2:c9:f8: 08:7d:3e:29:cc:1d:d9:fd:1e:47:20:e3:d7:98:f4:20:c2:b9: 18:bf:61:fb:47:37:49:1b:d5:c0:97:98:73:44:e3:2c:5d:88: c8:f7:3b:bd:5f:4e:01:9c:a6:b1:49:98:7b:c9:d9:82:fa:11: 1c:2a:1e:89:35:ce:ce:e9:6f:d0:bb:66:b4:9a:29:bf:80:f6: fa:76:75:01:41:56:d5:7b:db:48:95:8e:1b:b4:64:75:3a:3e: 5e:db:3e:c9:47:3d:1e:87:de:5a:9d:70:4c:ea:b8:9b:a0:cc: fd:d5:c1:fa:34:37:26:ae:4e:2a:b4:b1:f8:61:fc:c4:e6:f1: 48:27:ce:c9:b8:02:2c:bd:e4:9d:2a:64:2a:01:cd:8f:7b:f1: 5c:95:64:e5:19:19:5a:2d:ea:e3:ac:63:f2:e1:0d:21:39:1c: 9d:97:12:5f:3c:07:f2:60:f9:70:3e:9f:59:eb:a6:22:e0:87: d3:91:01:e0:70:a7:3b:e0:86:fe:27:21:49:21:c8:66:97:2d: 99:74:23:0d:7c:20:64:fa:2a:e0:9c:51:36:f7:c8:0c:7e:99: 59:b5:15:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNDI0MjEyNzQwWhcNMjUwNTAxMjEyNzQwWjAYMRYwFAYD VQQDEw02ODBhYWNjYy1jMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvajisrZIMsHVk+9zTLlxo8iKz12VSuHTSI6s9lNs/0fkw9qvo2Hxj67h+kqy oWAU1cvf/JypPi1F7WoUrp1ryURdhN0lnGpkC++rxlw3TwtT3aRsPOorqvS1tab/ uoEZS0DI8v1xJKI0WKiw2GZlURtH/BZAhE7UQNct69ZPJWLd3WpmrEwv/Xzr3kT/ 9YTjEwcaQFxwH23A2HDmZt5YRh9y7Z+fBSI9SgUJQGWw8ypYKc/neTmJar+W4LDW yo1LL8JZhzBknLF+Dfv3XlhyLiUAjGc7SBErm8mhmnDz8pgsVpSuN+zwYYkymWYq Nck4QeNM85ZgMvNyUnFwURUlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2kgRNa SZjQfpPU1TkSfzofV3QBMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCBxSrqAWhjOcP1y9PzMiV70jM1PEd4ST4xAfqXEldQjiyfgIfT4p zB3Z/R5HIOPXmPQgwrkYv2H7RzdJG9XAl5hzROMsXYjI9zu9X04BnKaxSZh7ydmC +hEcKh6JNc7O6W/Qu2a0mim/gPb6dnUBQVbVe9tIlY4btGR1Oj5e2z7JRz0eh95a nXBM6riboMz91cH6NDcmrk4qtLH4YfzE5vFIJ87JuAIsveSdKmQqAc2Pe/FclWTl GRlaLerjrGPy4Q0hORydlxJfPAfyYPlwPp9Z66Yi4IfTkQHgcKc74Ib+JyFJIchm ly2ZdCMNfCBk+irgnFE298gMfplZtRWr -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:57 2025 by rpki-client