$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json) Hash identifier: K0BqF2yO2u3L9kkjvx176Jl9cbxUQGqOzp47cQ2O/AU= Subject key identifier: 2E:B4:CE:20:85:1E:39:7C:9B:F0:95:B3:A8:2F:C2:9D:D6:5F:E8:8E Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft Manifest number: 018C Signing time: Sat 03 May 2025 03:01:05 +0000 Manifest this update: Sat 03 May 2025 03:01:04 +0000 Manifest next update: Sat 10 May 2025 03:01:04 +0000 Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: 0B+o2cSYgqaPcHNFNKseQUVKcvy/qwkew+fGLa62fKo=) 2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: 445y7dnFbGIJcED/nA18M8HZ1X9DaCKTToZbs8yrxpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Validity Not Before: May 3 03:01:04 2025 GMT Not After : May 10 03:01:04 2025 GMT Subject: CN=681586f1-ae29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:a1:ae:d7:1c:9c:85:c5:fd:5d:ee:e5:ac: 65:d7:52:3a:2a:ce:f4:1a:00:a9:37:02:77:b1:24: 50:55:c8:5f:75:fb:dc:56:e1:31:24:06:32:b6:bf: 76:e8:93:9b:9b:a2:26:0d:b9:9c:17:3b:49:ec:73: 36:fd:a8:d0:84:4a:de:2e:b3:52:b0:fa:6e:12:aa: 62:e0:8d:9d:0c:20:cf:d6:13:1c:37:48:4c:5b:4a: 1f:1f:1b:b1:5e:54:4f:18:10:11:01:fe:a1:a3:53: 4b:2f:2e:30:7f:10:70:7f:f9:f0:07:ea:f3:6d:79: 0e:db:fa:76:88:03:0f:71:a4:8c:c3:25:58:02:dd: c7:7b:bd:ba:f6:b8:71:bb:fe:1f:fe:12:b7:bb:14: 9f:96:7b:e3:c5:13:77:37:e4:70:9f:59:c7:5b:b7: 18:7b:f6:dd:d5:06:be:e2:7e:bd:34:34:48:6e:7e: 82:dc:79:4a:5d:8a:29:76:ff:a7:c3:62:1e:2c:50: 1b:e7:a6:62:a2:a8:6c:a7:03:6b:1e:ab:2e:24:30: 4a:0c:be:1e:13:1c:3b:a0:3e:42:af:a6:89:8d:bf: 43:0a:b9:ba:ea:f2:57:77:f0:94:df:22:66:57:0b: f6:f3:b9:19:97:57:86:2f:78:4e:1e:89:2b:e1:21: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:CE:20:85:1E:39:7C:9B:F0:95:B3:A8:2F:C2:9D:D6:5F:E8:8E X509v3 Authority Key Identifier: keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2b:7f:78:16:1b:33:5c:f2:07:01:20:8c:65:c0:21:34:49: 99:5f:68:ff:5e:9e:8d:0f:81:a0:94:ea:92:44:67:f4:4b:bf: c5:64:bf:c9:0e:bf:c6:d4:52:f2:a0:29:9f:9c:f8:bb:8b:32: 83:ef:ad:8e:87:cb:3b:b6:5e:f9:08:45:db:02:d5:a0:0c:e0: 7c:ec:45:d4:9d:f0:1e:ce:b3:2e:2d:49:21:08:9b:0d:f2:82: 51:c7:10:e4:e1:2b:24:4d:12:3e:8e:8d:e3:71:d2:0b:8c:8f: 74:58:dc:40:81:bd:d9:fe:4a:10:d0:c6:4d:8e:4c:30:45:d5: 95:de:7d:fe:fe:7b:c7:4f:9f:b2:e9:2a:33:d6:12:df:52:a8: 85:3e:a7:4d:7c:69:aa:3f:a4:66:06:0c:ad:8f:28:bc:3d:a5: bd:11:d3:42:c2:ab:0e:33:c9:ee:2d:b5:dc:35:48:28:cf:b3: 76:5b:f4:91:ff:58:6c:11:8f:1f:1f:36:98:9f:f5:83:78:46: 2c:f5:cf:9b:be:9f:d0:37:e2:ae:29:6d:7b:8b:70:ca:4f:58: c3:f9:26:99:45:83:c2:ff:cd:a2:16:98:24:2a:43:47:75:91: 87:2d:b7:04:2a:dc:5a:17:b8:ea:04:12:39:8a:7b:a9:b2:c5: 22:32:df:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQjgxMTAvBgNVBAUTKEQ1RkEzMzYzMzRGOTlBRTM2M0VBNTg2N0QyOEU4QTUw MjMxRTQyMjAwHhcNMjUwNTAzMDMwMTA0WhcNMjUwNTEwMDMwMTA0WjAYMRYwFAYD VQQDEw02ODE1ODZmMS1hZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZahrtccnIXF/V3u5axl11I6Ks70GgCpNwJ3sSRQVchfdfvcVuExJAYytr92 6JObm6ImDbmcFztJ7HM2/ajQhEreLrNSsPpuEqpi4I2dDCDP1hMcN0hMW0ofHxux XlRPGBARAf6ho1NLLy4wfxBwf/nwB+rzbXkO2/p2iAMPcaSMwyVYAt3He7269rhx u/4f/hK3uxSflnvjxRN3N+Rwn1nHW7cYe/bd1Qa+4n69NDRIbn6C3HlKXYopdv+n w2IeLFAb56ZioqhspwNrHqsuJDBKDL4eExw7oD5Cr6aJjb9DCrm66vJXd/CU3yJm Vwv287kZl1eGL3hOHokr4SFImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC60ziCF Hjl8m/CVs6gvwp3WX+iOMB8GA1UdIwQYMBaAFNX6M2M0+ZrjY+pYZ9KOilAjHkIg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJCOC8yRjE3NjA4QUND MkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11Tmo2bGhuMG82S1VDTWVR aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmb3pZelQ1bXVOajZsaG4wbzZLVUNNZVFpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjJCOC8yRjE3NjA4QUNDMkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11 Tmo2bGhuMG82S1VDTWVRaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvK394FhszXPIHASCMZcAhNEmZX2j/Xp6ND4GglOqSRGf0S7/FZL/J Dr/G1FLyoCmfnPi7izKD762Oh8s7tl75CEXbAtWgDOB87EXUnfAezrMuLUkhCJsN 8oJRxxDk4SskTRI+jo3jcdILjI90WNxAgb3Z/koQ0MZNjkwwRdWV3n3+/nvHT5+y 6Soz1hLfUqiFPqdNfGmqP6RmBgytjyi8PaW9EdNCwqsOM8nuLbXcNUgoz7N2W/SR /1hsEY8fHzaYn/WDeEYs9c+bvp/QN+KuKW17i3DKT1jD+SaZRYPC/82iFpgkKkNH dZGHLbcEKtxaF7jqBBI5inupssUiMt+1 -----END CERTIFICATE-----Generated at Mon May 5 02:09:56 2025 by rpki-client