$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft File: RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json) Hash identifier: fRuE9PA/bKABhd9Dxh6WNGgO2tcUL52TS466DOzJ4DM= Subject key identifier: 24:D2:9D:0A:96:5A:DE:46:43:B3:86:25:6D:D8:DC:31:8B:17:55:67 Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B Certificate issuer: /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft Manifest number: 0620 Signing time: Thu 24 Apr 2025 20:36:10 +0000 Manifest this update: Thu 24 Apr 2025 20:36:09 +0000 Manifest next update: Thu 01 May 2025 20:36:09 +0000 Files and hashes: 1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: bOlFx6go+VtYpUGwG0vk9drOuSCbKsO96p8QfNVMAlg=) 2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 8e05gzQi7pUAaZxz5oxTvUQfM0A7KbTjJTrGpKehcUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B Validity Not Before: Apr 24 20:36:09 2025 GMT Not After : May 1 20:36:09 2025 GMT Subject: CN=680aa0ba-fe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:bc:d5:8f:5c:74:d6:3f:bd:ec:10:57:84: 1b:ea:49:4b:31:8a:b2:ac:d0:fa:91:54:92:95:55: 93:23:7b:71:56:93:e4:d2:da:00:97:34:2a:0d:44: b8:56:51:98:72:06:31:f8:e9:2c:44:90:16:8e:c7: c6:76:1e:e2:19:ae:86:01:a3:41:8a:b0:08:33:15: 1e:60:90:18:7f:a6:d8:8c:27:e5:d5:68:e8:88:34: a7:65:fb:73:da:23:e1:01:6f:7d:2f:c4:8a:0d:a0: ab:b8:01:eb:f3:50:73:f9:2a:1b:21:94:50:55:d8: 79:87:19:08:82:11:bd:a6:be:f4:8a:ab:2c:51:06: 71:37:2b:f1:44:0d:bd:29:0e:b3:ec:dc:da:ee:29: 6c:20:d3:3d:6b:f0:d7:0d:e3:cf:92:57:29:d1:92: c8:8e:77:03:3d:ec:5b:23:67:87:de:58:aa:e9:da: a3:0b:61:76:6d:15:69:69:12:dc:a8:92:7f:cd:5c: e0:1f:59:30:33:f3:8e:fb:9d:1a:05:98:69:33:8e: 04:b2:d2:7b:c5:56:62:47:43:22:e7:25:df:52:f6: 52:2d:df:0f:f7:2c:91:ff:1b:9d:09:c8:5c:0e:44: 09:c8:3d:41:d9:19:aa:fc:3a:7a:08:cf:16:6f:21: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:9D:0A:96:5A:DE:46:43:B3:86:25:6D:D8:DC:31:8B:17:55:67 X509v3 Authority Key Identifier: keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ae:53:6a:fc:6f:16:70:e1:b8:7e:36:2c:46:a3:4e:1f:fc: d4:3f:f7:07:7c:59:09:e7:6b:cf:0e:64:53:39:d8:59:b7:80: b2:d2:31:60:bb:84:70:26:57:33:b3:15:4d:b2:d4:d6:59:8a: 46:90:6b:69:ec:89:7a:2e:c8:3a:e2:43:b3:45:c9:a3:93:b8: d4:be:ae:14:9c:4c:51:c1:b7:fa:46:95:66:b1:d5:4d:f9:a0: c1:91:d7:a4:4c:2e:1a:99:8f:41:d1:50:d8:87:2c:27:1b:51: 98:f6:13:7d:56:7e:31:10:c7:6d:d9:e6:ce:d7:74:85:51:0a: 8f:0a:39:44:d3:6e:f4:17:eb:6c:4d:7b:df:cf:77:e1:a2:55: 24:e8:d2:98:e3:50:9e:67:10:51:cc:2f:9b:46:e1:fd:3e:91: c0:5d:9d:b0:4a:5f:fc:67:da:86:29:3f:c3:eb:e8:a4:d5:4d: a0:6b:e1:f1:b0:70:fe:0f:f2:7d:98:78:18:8d:90:88:6f:1a: 25:3a:9e:af:7e:88:16:39:f8:19:80:c3:ea:b8:e2:7d:b4:d8: 70:37:81:a4:21:e0:06:28:f1:de:08:27:98:51:cc:47:99:ca: 8a:84:32:83:83:62:e9:c3:5b:bb:c7:4a:ef:89:9b:fa:c9:ca: 41:5a:8f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCNTUxMTAvBgNVBAUTKDQ0MjNGQkY0MUFEOUYwRkM3NEQzQzE1NTU4QjhEMDlB MTY0QjI2MUIwHhcNMjUwNDI0MjAzNjA5WhcNMjUwNTAxMjAzNjA5WjAYMRYwFAYD VQQDEw02ODBhYTBiYS1mZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpm81Y9cdNY/vewQV4Qb6klLMYqyrND6kVSSlVWTI3txVpPk0toAlzQqDUS4 VlGYcgYx+OksRJAWjsfGdh7iGa6GAaNBirAIMxUeYJAYf6bYjCfl1WjoiDSnZftz 2iPhAW99L8SKDaCruAHr81Bz+SobIZRQVdh5hxkIghG9pr70iqssUQZxNyvxRA29 KQ6z7Nza7ilsINM9a/DXDePPklcp0ZLIjncDPexbI2eH3liq6dqjC2F2bRVpaRLc qJJ/zVzgH1kwM/OO+50aBZhpM44EstJ7xVZiR0Mi5yXfUvZSLd8P9yyR/xudCchc DkQJyD1B2Rmq/Dp6CM8WbyGKFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTSnQqW Wt5GQ7OGJW3Y3DGLF1VnMB8GA1UdIwQYMBaAFEQj+/Qa2fD8dNPBVVi40JoWSyYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS8yMDQ4MDUzMjk4 NTgxMUVCOEE0MUZBMjBDNEY5QUUwMi9SQ1A3OUJyWjhQeDAwOEZWV0xqUW1oWkxK aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JDUDc5QnJaOFB4MDA4RlZXTGpRbWhaTEpocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI1NS8yMDQ4MDUzMjk4NTgxMUVCOEE0MUZBMjBDNEY5QUUwMi9SQ1A3OUJyWjhQ eDAwOEZWV0xqUW1oWkxKaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsrlNq/G8WcOG4fjYsRqNOH/zUP/cHfFkJ52vPDmRTOdhZt4Cy0jFg u4RwJlczsxVNstTWWYpGkGtp7Il6Lsg64kOzRcmjk7jUvq4UnExRwbf6RpVmsdVN +aDBkdekTC4amY9B0VDYhywnG1GY9hN9Vn4xEMdt2ebO13SFUQqPCjlE0270F+ts TXvfz3fholUk6NKY41CeZxBRzC+bRuH9PpHAXZ2wSl/8Z9qGKT/D6+ik1U2ga+Hx sHD+D/J9mHgYjZCIbxolOp6vfogWOfgZgMPquOJ9tNhwN4GkIeAGKPHeCCeYUcxH mcqKhDKDg2Lpw1u7x0rviZv6ycpBWo+i -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:57 2025 by rpki-client