$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: Pjdb45jfyvbRjpsbnxauTY6gmy3fyiWblo01D9bhBXg= Subject key identifier: 81:FC:C3:13:9A:3A:62:CB:08:09:E9:61:BF:E9:63:6D:47:20:D1:33 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F08 Signing time: Thu 24 Apr 2025 16:02:15 +0000 Manifest this update: Thu 24 Apr 2025 16:02:14 +0000 Manifest next update: Thu 01 May 2025 16:02:14 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: 4+T+F6zV/oFZ2V5zONI+oXc/b5YHuQ6MAGYS7iZMsFs=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: JPz0ZzHWwFSSfWmaNplpCU4QznJ0G9YXZ66T9hNIZ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7955 (0x1f13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Apr 24 16:02:14 2025 GMT Not After : May 1 16:02:14 2025 GMT Subject: CN=680a6087-7736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:3f:d8:57:b8:56:27:36:13:ae:63:04:67: 63:44:cf:74:2e:6c:e8:61:ac:31:fa:ba:1f:92:e4: 0b:53:47:4f:26:ee:6f:00:c0:52:77:6d:dd:ac:ca: 08:b4:c1:9c:8d:bc:99:7a:47:1c:cd:75:ec:26:e0: 2c:41:f3:ce:3d:81:7a:2a:06:15:b9:c4:c5:1c:32: 98:9c:c2:ad:08:2d:37:18:1e:85:cc:20:38:54:e0: 9a:7e:ea:8b:71:4d:c7:df:01:42:a4:5a:68:81:5d: 00:e3:00:73:b9:05:6e:b8:a6:1f:51:0f:be:8a:98: 5e:22:f3:c0:43:15:f9:45:08:fe:b8:be:9e:94:69: ff:20:69:40:35:63:a3:7c:4f:71:80:1c:46:a0:64: 84:c5:04:2a:00:23:6f:a2:df:22:0a:70:0f:f4:11: a5:79:9f:33:8d:bd:40:d4:3a:42:37:ad:ff:ea:a5: fc:56:89:d2:26:78:f9:af:6c:a4:e8:68:14:13:fd: 08:7a:6c:13:5c:c8:3f:6a:10:fd:c4:be:36:d0:76: 4d:07:9e:45:a9:c3:92:0e:4a:62:04:cf:7e:df:8c: c1:98:17:8c:e4:ad:51:5f:39:fe:fd:a2:2d:de:6c: 43:47:12:f6:66:8c:0d:7e:98:1f:b3:9a:c9:4c:e8: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FC:C3:13:9A:3A:62:CB:08:09:E9:61:BF:E9:63:6D:47:20:D1:33 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f2:fa:2e:f5:67:d5:62:2f:22:20:ee:de:4a:74:ba:7f:f6: e3:d7:f4:53:80:1b:20:e5:72:f0:d2:3f:71:d1:0d:67:0c:02: 01:51:b4:aa:4b:ce:db:4f:c2:14:ba:0a:e5:0e:0c:a2:e1:85: 8c:28:af:29:52:57:ba:6d:b4:c0:dc:a5:70:a4:58:fb:c4:1d: 60:b4:4c:ea:1b:0c:ee:87:97:fe:4c:49:a8:d4:65:b5:bc:7f: 35:97:8d:b5:26:a0:32:c1:73:d7:29:a4:0f:22:f6:9d:f6:99: a5:9c:54:e8:52:64:7a:56:5e:a6:7a:31:8d:7d:4d:f2:40:44: a9:50:89:45:2d:51:7d:c2:c0:f5:a1:29:ac:a9:32:84:2e:0a: 8b:2d:d9:1c:cb:a7:ee:f3:95:cb:11:92:4a:09:15:cf:11:91: 17:ee:fb:98:ce:2b:46:81:09:ca:98:d7:92:10:97:3c:ac:0c: ea:dc:1d:63:09:b5:b7:35:cc:1b:78:8c:63:cf:45:5d:77:54: 9e:b3:97:14:a8:f9:23:50:e6:44:e6:55:98:1c:a5:03:42:3f: 66:4e:a4:ec:a3:85:f7:83:bc:6f:8b:4e:56:0f:2e:3d:58:1a: 4c:f0:91:43:1c:7c:a6:83:76:54:51:54:0e:b2:c1:60:33:32: fe:16:28:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwNDI0MTYwMjE0WhcNMjUwNTAxMTYwMjE0WjAYMRYwFAYD VQQDEw02ODBhNjA4Ny03NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnQ/2Fe4Vic2E65jBGdjRM90LmzoYawx+rofkuQLU0dPJu5vAMBSd23drMoI tMGcjbyZekcczXXsJuAsQfPOPYF6KgYVucTFHDKYnMKtCC03GB6FzCA4VOCafuqL cU3H3wFCpFpogV0A4wBzuQVuuKYfUQ++ipheIvPAQxX5RQj+uL6elGn/IGlANWOj fE9xgBxGoGSExQQqACNvot8iCnAP9BGleZ8zjb1A1DpCN63/6qX8VonSJnj5r2yk 6GgUE/0IemwTXMg/ahD9xL420HZNB55FqcOSDkpiBM9+34zBmBeM5K1RXzn+/aIt 3mxDRxL2ZowNfpgfs5rJTOipCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH8wxOa OmLLCAnpYb/pY21HINEzMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd8vou9WfVYi8iIO7eSnS6f/bj1/RTgBsg5XLw0j9x0Q1nDAIBUbSq S87bT8IUugrlDgyi4YWMKK8pUle6bbTA3KVwpFj7xB1gtEzqGwzuh5f+TEmo1GW1 vH81l421JqAywXPXKaQPIvad9pmlnFToUmR6Vl6mejGNfU3yQESpUIlFLVF9wsD1 oSmsqTKELgqLLdkcy6fu85XLEZJKCRXPEZEX7vuYzitGgQnKmNeSEJc8rAzq3B1j CbW3NcwbeIxjz0Vdd1Ses5cUqPkjUOZE5lWYHKUDQj9mTqTso4X3g7xvi05WDy49 WBpM8JFDHHymg3ZUUVQOssFgMzL+FihL -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:26 2025 by rpki-client