$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: CHqMWL/LAQ9OJJ6fSliFby+N48HsdZ5fGgj/fu8J9nQ= Subject key identifier: 44:66:C9:D1:CA:5C:DA:99:E4:ED:DD:A0:37:0A:01:F9:41:EB:74:BD Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 0967 Signing time: Thu 24 Apr 2025 20:04:44 +0000 Manifest this update: Thu 24 Apr 2025 20:04:43 +0000 Manifest next update: Thu 01 May 2025 20:04:43 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: 1WM4SXWWeLBgr1d+rwvcPqdgr++77EpP0X5DJTsu/Bk=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 60Yp+lMUoIhBshIDeToO24NmKvWSdMqkdEQgOkXf8BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: Apr 24 20:04:43 2025 GMT Not After : May 1 20:04:43 2025 GMT Subject: CN=680a995c-c5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:40:90:ce:0b:c9:51:1b:dd:e0:6d:ab:13: 82:ca:0a:9b:54:5c:18:ab:a7:cc:9c:fd:b8:b1:34: b3:78:8d:58:8b:e7:c9:c8:26:ff:8c:66:d3:3b:e7: be:b9:9d:7f:e5:b0:2d:cf:c8:45:02:33:ab:0a:d3: 35:72:d6:a3:9c:df:cc:65:d1:22:cf:c0:3c:74:5a: c0:a4:1d:1b:55:34:cb:e4:b7:dd:d0:dc:22:4c:28: 8f:ee:dd:b8:ad:95:20:71:f9:c6:00:fe:8e:30:af: cf:46:ae:7f:1f:fa:32:31:41:c4:c0:9d:45:48:24: 69:f2:b3:c1:29:56:10:ae:4c:58:80:cd:d9:94:7e: 57:3b:bd:25:15:59:1d:d9:2c:6a:d3:e5:af:23:61: be:28:72:32:2f:c4:f2:c4:f8:bf:d6:b8:79:b3:76: b0:ab:97:9a:8a:a8:21:e5:df:c9:29:6b:67:09:a0: df:0a:cc:df:ab:82:e2:cf:89:c0:ab:dc:f6:1e:67: aa:d7:3c:07:91:67:fb:55:9e:3c:46:dd:91:c1:75: 28:ce:48:f9:13:19:c3:62:a1:4d:86:26:e4:42:21: 71:78:10:9d:62:d4:1d:e1:39:35:37:37:ae:15:d5: 49:fd:09:5b:2c:52:94:18:42:53:70:a4:e7:c4:0b: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:C9:D1:CA:5C:DA:99:E4:ED:DD:A0:37:0A:01:F9:41:EB:74:BD X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b9:eb:61:33:54:2d:c2:df:d8:4d:86:12:97:73:47:8a:ba: 74:e1:23:ce:36:c3:45:ad:0e:d6:8d:12:31:93:19:14:0c:7a: 7e:f5:6d:f9:ab:0c:12:0f:50:83:b2:45:4e:af:42:f2:cd:d4: 02:df:13:c5:1b:cd:d3:16:f9:1b:45:92:d0:f4:85:a8:0c:26: d8:93:38:1d:5e:9a:33:a9:cd:24:25:bb:fc:e5:7a:4d:be:1f: 3e:80:fb:c7:34:67:8c:1f:22:75:97:40:ff:fd:c3:f5:de:0d: be:79:a0:77:b9:c4:d0:4d:f7:08:42:8d:c3:16:da:5f:ff:62: 71:97:5b:ec:e4:01:51:ca:b8:72:0d:7b:bd:a2:49:d3:0a:2d: bd:6e:37:c9:37:c0:0c:be:1c:0d:0d:68:25:2a:3a:6d:1b:ce: c4:7f:88:cd:d7:e7:53:c0:c9:b4:e2:0b:e4:a1:e5:63:bb:64: 8e:7f:1c:6a:54:e5:75:3b:18:f9:c2:66:15:7e:4a:ce:2c:73: 6c:0a:96:04:a6:d7:2b:72:e8:c1:dd:22:07:d8:c0:a4:41:8b: 21:ae:17:6c:18:7b:34:8e:1f:a3:06:b2:8e:c8:bd:8e:c8:54: 8c:fd:1d:75:d5:03:c6:8c:6d:e6:c1:c7:c6:2b:ec:2c:00:79: dc:ee:23:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNDI0MjAwNDQzWhcNMjUwNTAxMjAwNDQzWjAYMRYwFAYD VQQDEw02ODBhOTk1Yy1jNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngpAkM4LyVEb3eBtqxOCygqbVFwYq6fMnP24sTSzeI1Yi+fJyCb/jGbTO+e+ uZ1/5bAtz8hFAjOrCtM1ctajnN/MZdEiz8A8dFrApB0bVTTL5Lfd0NwiTCiP7t24 rZUgcfnGAP6OMK/PRq5/H/oyMUHEwJ1FSCRp8rPBKVYQrkxYgM3ZlH5XO70lFVkd 2Sxq0+WvI2G+KHIyL8TyxPi/1rh5s3awq5eaiqgh5d/JKWtnCaDfCszfq4Liz4nA q9z2Hmeq1zwHkWf7VZ48Rt2RwXUozkj5ExnDYqFNhibkQiFxeBCdYtQd4Tk1Nzeu FdVJ/QlbLFKUGEJTcKTnxAv/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERmydHK XNqZ5O3doDcKAflB63S9MB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAuethM1Qtwt/YTYYSl3NHirp04SPONsNFrQ7WjRIxkxkUDHp+9W35 qwwSD1CDskVOr0LyzdQC3xPFG83TFvkbRZLQ9IWoDCbYkzgdXpozqc0kJbv85XpN vh8+gPvHNGeMHyJ1l0D//cP13g2+eaB3ucTQTfcIQo3DFtpf/2Jxl1vs5AFRyrhy DXu9oknTCi29bjfJN8AMvhwNDWglKjptG87Ef4jN1+dTwMm04gvkoeVju2SOfxxq VOV1Oxj5wmYVfkrOLHNsCpYEptcrcujB3SIH2MCkQYshrhdsGHs0jh+jBrKOyL2O yFSM/R111QPGjG3mwcfGK+wsAHnc7iMp -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:48 2025 by rpki-client