$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft File: p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft (raw, json) Hash identifier: UB4d0XkUlzJctlhd449KZYHfcZgXkGNFXjPM8orKuZM= Subject key identifier: 57:3E:5D:0A:E8:FA:70:4F:E2:90:48:CA:AC:63:A4:47:D1:61:26:15 Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 Certificate issuer: /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft Manifest number: 1626 Signing time: Thu 24 Apr 2025 17:40:26 +0000 Manifest this update: Thu 24 Apr 2025 17:40:26 +0000 Manifest next update: Thu 01 May 2025 17:40:26 +0000 Files and hashes: 1: p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl (hash: M3wZbL3OeSsDwsGmDqajRO++z3gAuFaheisk79TXxj8=) 2: 12D5B220296411EDB08A7E54C4F9AE02.roa (hash: IfNUHhPvu7UsBRDPbxmJEbxn+CUXhUXh86S7/wAn8KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF, serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Validity Not Before: Apr 24 17:40:26 2025 GMT Not After : May 1 17:40:26 2025 GMT Subject: CN=680a778a-3c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:6f:4c:50:ec:86:7a:5a:b8:69:d6:ca:53: 17:a3:09:08:23:fb:20:1f:d9:85:37:55:18:e5:23: a3:ed:d4:33:f5:bc:15:c0:2e:db:e5:87:d4:ce:45: 5b:00:6d:28:b2:50:5d:25:48:2a:1e:4d:3b:35:e8: dd:7a:e5:2b:98:1c:64:88:0e:7d:c1:92:8b:1d:ad: 57:99:c0:cc:49:0d:b9:80:c3:53:82:3f:fc:20:bb: 6d:68:07:9a:0d:11:85:df:13:35:b4:00:69:1d:8d: 00:81:54:a3:19:3f:43:01:34:20:87:27:c9:d9:30: 54:da:8c:9e:70:77:2e:95:da:c9:8f:7e:c4:83:44: 4b:0f:c6:37:43:df:f2:2f:4e:ef:86:93:6f:73:ea: ba:bc:b6:cf:ed:9b:cd:68:a7:9a:a7:50:4f:66:51: 9e:b7:c3:f3:e7:19:8b:3e:96:4e:f3:01:96:be:b9: 99:9b:d5:14:76:1b:62:b4:01:81:23:69:91:c3:cf: a4:72:57:c2:05:b6:a1:ae:bc:90:60:6b:a8:f5:99: 6e:b8:c4:4d:9e:c8:2f:25:51:42:0c:5e:f4:02:e9: 19:3e:0e:8e:06:64:34:cc:5f:dd:f1:e1:c2:4e:89: 03:a6:87:3b:9f:6a:2c:55:e6:6e:5e:21:29:e9:cf: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:5D:0A:E8:FA:70:4F:E2:90:48:CA:AC:63:A4:47:D1:61:26:15 X509v3 Authority Key Identifier: keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a1:d8:5b:2a:06:a4:6b:af:b7:36:d9:f9:9b:71:69:cd:92: 42:a8:85:cb:fb:de:4b:7b:8c:ec:0d:8c:b1:96:1e:4a:fb:3c: e3:61:3c:43:1c:6e:d0:74:27:4e:4a:ec:31:d5:c9:4e:cb:2d: c3:42:5e:6d:74:30:6c:68:ff:52:d0:cc:d1:4d:a4:ff:6c:05: 71:2b:2e:92:d1:94:20:44:a8:16:3a:41:48:8d:6d:6d:fe:d1: d0:17:53:1f:4d:19:1b:5e:03:27:6f:28:f2:09:65:5f:42:4f: 6d:42:af:25:d7:c6:f2:cc:25:6e:9a:5c:6c:60:d4:20:27:46: a5:b9:7f:ee:2a:60:31:21:e6:83:03:07:16:6a:74:77:db:68: 8f:d9:6d:1d:f3:2f:79:c9:61:89:df:ef:dd:5c:b8:ee:09:ca: d0:c2:63:e1:7c:0c:71:49:86:eb:0f:85:d3:12:18:21:b7:63: 84:69:3b:6e:61:66:e1:b9:75:36:fe:96:89:88:66:13:f4:60: 95:b8:85:47:5d:0b:dd:ad:6c:3d:52:9c:13:4d:61:42:ab:b9: e7:97:01:db:a9:8c:c2:38:6a:49:e0:7c:fa:a1:22:52:6f:17: ad:e0:e2:02:f7:29:96:bb:1a:b3:f2:02:cf:7e:e5:d2:4e:6a: f0:87:e0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1REZDM0U5RjA2 MzNCNzEyOTkwHhcNMjUwNDI0MTc0MDI2WhcNMjUwNTAxMTc0MDI2WjAYMRYwFAYD VQQDEw02ODBhNzc4YS0zYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IlvTFDshnpauGnWylMXowkII/sgH9mFN1UY5SOj7dQz9bwVwC7b5YfUzkVb AG0oslBdJUgqHk07NejdeuUrmBxkiA59wZKLHa1XmcDMSQ25gMNTgj/8ILttaAea DRGF3xM1tABpHY0AgVSjGT9DATQghyfJ2TBU2oyecHculdrJj37Eg0RLD8Y3Q9/y L07vhpNvc+q6vLbP7ZvNaKeap1BPZlGet8Pz5xmLPpZO8wGWvrmZm9UUdhtitAGB I2mRw8+kclfCBbahrryQYGuo9ZluuMRNnsgvJVFCDF70AukZPg6OBmQ0zF/d8eHC TokDpoc7n2osVeZuXiEp6c/XLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc+XQro +nBP4pBIyqxjpEfRYSYVMB8GA1UdIwQYMBaAFKeJAvTw2CS0D0ltXfw+nwYztxKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpMUVBTVzFkX0Q2ZkJqTzNF cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0a0M5UERZSkxRUFNXMWRfRDZmQmpPM0Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpM UVBTVzFkX0Q2ZkJqTzNFcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrodhbKgaka6+3Ntn5m3FpzZJCqIXL+95Le4zsDYyxlh5K+zzjYTxD HG7QdCdOSuwx1clOyy3DQl5tdDBsaP9S0MzRTaT/bAVxKy6S0ZQgRKgWOkFIjW1t /tHQF1MfTRkbXgMnbyjyCWVfQk9tQq8l18byzCVumlxsYNQgJ0aluX/uKmAxIeaD AwcWanR322iP2W0d8y95yWGJ3+/dXLjuCcrQwmPhfAxxSYbrD4XTEhght2OEaTtu YWbhuXU2/paJiGYT9GCVuIVHXQvdrWw9UpwTTWFCq7nnlwHbqYzCOGpJ4Hz6oSJS bxet4OIC9ymWuxqz8gLPfuXSTmrwh+Ao -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:58 2025 by rpki-client