$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: 7i90r1/VuAy9UCiWlBJ/UPS4Q0QwOPB1jE1/4jcvcFo= Subject key identifier: 76:57:E4:9C:9D:54:FC:65:59:0F:B8:EE:82:52:A0:02:F4:8B:B6:9E Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: 73 Signing time: Fri 25 Apr 2025 05:47:54 +0000 Manifest this update: Fri 25 Apr 2025 05:47:54 +0000 Manifest next update: Fri 02 May 2025 05:47:54 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: 8b9hGLyOJjgImJqupRRYgy6kC1Lee4kMots8VfR3hZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Apr 25 05:47:54 2025 GMT Not After : May 2 05:47:54 2025 GMT Subject: CN=680b220a-93bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:dd:b5:e8:e3:95:9d:ad:75:45:14:3b:b4: 8b:f7:eb:e7:ba:68:00:42:b4:0a:f6:6b:55:25:95: 65:ae:32:97:11:70:e9:92:02:fd:19:4a:94:56:54: b6:3d:24:cb:53:04:1d:92:db:f3:0a:6a:3a:48:cc: 21:76:39:5d:14:c4:0a:75:95:ec:87:a8:bf:0d:66: 41:5f:1f:90:7d:b8:86:88:1c:af:02:63:a3:e8:b3: 12:f8:26:ed:8f:49:6f:31:b4:e3:2e:78:99:6c:ba: 7f:9d:8b:7a:d8:4a:11:f9:02:fd:29:4e:04:1a:30: ba:3b:04:4a:15:14:2c:46:86:f5:46:a0:04:7f:21: 28:db:d3:73:15:b7:3e:09:d7:c3:6a:32:6b:d5:7e: 88:7d:4e:ef:71:53:95:4d:0e:ea:c1:dd:fa:61:ea: 77:1a:8a:14:54:ca:41:e2:ad:f5:a0:ab:63:7e:84: 0c:bc:a2:2a:26:51:3f:7f:f5:60:c2:ea:ad:06:f5: 6a:62:82:20:7d:b0:68:44:92:d8:26:10:e8:ed:69: cc:87:11:59:a3:51:54:67:46:f6:fd:f5:d7:6d:e2: 62:36:74:49:66:bf:e0:09:3c:fa:39:70:7d:83:e6: b5:a9:be:af:57:fd:83:f8:79:ad:93:08:5f:da:74: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:E4:9C:9D:54:FC:65:59:0F:B8:EE:82:52:A0:02:F4:8B:B6:9E X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3b:65:18:bf:85:33:cf:42:c6:60:94:3c:6b:ad:ae:37:9d: 07:02:f6:0f:ac:99:60:57:a3:ac:68:0c:37:62:80:9d:f3:28: 8c:5d:7f:86:b0:de:3e:5e:c3:25:7c:8c:03:c4:dd:d3:02:b7: 0f:3e:6c:b6:ea:93:aa:48:02:89:f4:b3:b6:ce:2c:41:07:84: 0c:da:07:08:19:92:9e:ae:d8:f2:04:14:f5:5b:07:40:99:23: 5d:63:b0:d2:26:67:e4:26:dc:84:b9:7f:48:84:d6:5d:00:f0: ea:4c:64:ad:6e:20:72:74:e5:27:0b:13:c0:33:1e:fc:2d:ec: 7c:53:5c:b5:aa:b2:7f:95:df:2c:ec:35:54:0c:a0:f4:6c:25: c0:80:84:24:01:74:8e:c8:99:34:68:de:58:43:f0:75:cc:7c: b6:ac:23:62:c8:bc:a2:9f:01:ee:40:67:3e:c4:b9:fa:95:5f: b3:47:45:8b:b6:33:cc:f3:ec:92:9a:33:8f:7d:2f:2b:db:9c: 0c:49:1b:0d:ec:df:d3:7d:b5:8d:de:a5:d2:63:42:c6:47:1b: cb:2f:04:07:7c:7d:25:6e:3c:c6:0b:3b:6d:66:56:c7:65:e4: 4e:05:76:aa:bb:18:59:86:c2:f9:a7:2b:b1:a0:04:64:4e:1d: a5:2e:cb:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoRDc5QkZEODM5QjlEMEUwOUQwNDA1RUQwNEVFNTI5MjBF OTBCN0FDNDAeFw0yNTA0MjUwNTQ3NTRaFw0yNTA1MDIwNTQ3NTRaMBgxFjAUBgNV BAMTDTY4MGIyMjBhLTkzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdgd216OOVna11RRQ7tIv36+e6aABCtAr2a1UllWWuMpcRcOmSAv0ZSpRWVLY9 JMtTBB2S2/MKajpIzCF2OV0UxAp1leyHqL8NZkFfH5B9uIaIHK8CY6PosxL4Ju2P SW8xtOMueJlsun+di3rYShH5Av0pTgQaMLo7BEoVFCxGhvVGoAR/ISjb03MVtz4J 18NqMmvVfoh9Tu9xU5VNDurB3fph6ncaihRUykHirfWgq2N+hAy8oiomUT9/9WDC 6q0G9WpigiB9sGhEktgmEOjtacyHEVmjUVRnRvb99ddt4mI2dElmv+AJPPo5cH2D 5rWpvq9X/YP4ea2TCF/adJ6PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdlfknJ1U /GVZD7juglKgAvSLtp4wHwYDVR0jBBgwFoAU15v9g5udDgnQQF7QTuUpIOkLesQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0FGODg1RjY2NzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTV2OWc1dWREZ25RUUY3UVR1VXBJT2tMZXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0FGODg1RjY2NzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGdu UVFGN1FUdVVwSU9rTGVzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIU7ZRi/hTPPQsZglDxrra43nQcC9g+smWBXo6xoDDdigJ3zKIxdf4aw 3j5ewyV8jAPE3dMCtw8+bLbqk6pIAon0s7bOLEEHhAzaBwgZkp6u2PIEFPVbB0CZ I11jsNImZ+Qm3IS5f0iE1l0A8OpMZK1uIHJ05ScLE8AzHvwt7HxTXLWqsn+V3yzs NVQMoPRsJcCAhCQBdI7ImTRo3lhD8HXMfLasI2LIvKKfAe5AZz7EufqVX7NHRYu2 M8zz7JKaM499LyvbnAxJGw3s39N9tY3epdJjQsZHG8svBAd8fSVuPMYLO21mVsdl 5E4Fdqq7GFmGwvmnK7GgBGROHaUuy3g= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:47 2025 by rpki-client