$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: pF6L3yneNWG/7J7bjXeKmB6bg8PrwouDz2xhbmaT4Vc= Subject key identifier: 43:C1:D2:EF:C4:91:74:12:91:CF:7E:EE:AA:A2:65:58:35:9D:41:62 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0488 Signing time: Thu 24 Apr 2025 23:50:12 +0000 Manifest this update: Thu 24 Apr 2025 23:50:11 +0000 Manifest next update: Thu 01 May 2025 23:50:11 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: em6SAIhodxayLJSQfBV9o2WrWmlPU+YPH4sMgtjTKeY=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Apr 24 23:50:11 2025 GMT Not After : May 1 23:50:11 2025 GMT Subject: CN=680ace33-131e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:4b:09:c9:30:5d:ae:e8:de:6f:2b:28:ae: 6e:cb:64:d8:98:39:6e:11:68:08:f2:c9:9d:f3:9a: be:08:13:5c:9a:b4:09:59:0a:4c:00:96:39:1e:32: b8:73:a9:7e:d5:5b:8d:80:64:f8:c1:51:54:52:a5: 5f:bf:85:96:cd:37:60:4d:33:63:9a:9a:a7:51:5c: d5:5b:f1:b2:29:0a:f0:db:a7:d7:9c:41:c0:02:f3: b0:5c:65:0e:f5:00:86:45:8b:16:40:6d:1b:69:dc: 2f:fd:2e:80:b3:e7:54:60:ca:cf:01:d3:71:32:41: 5f:cb:5f:9f:cb:d0:10:49:1c:ac:02:8b:a0:c2:c8: 8a:57:ae:47:60:82:14:00:0c:88:e7:f0:b3:81:c9: 11:b1:54:2b:87:56:6b:76:22:5f:80:01:92:75:78: 88:6d:0c:e7:78:06:ab:b8:b4:6e:18:35:1a:c2:9a: dd:4b:93:be:46:d0:3c:0e:99:c7:be:0a:5d:a5:28: fb:4e:65:b7:08:c5:c7:58:2a:a6:f0:06:d9:0a:79: cc:8e:46:36:38:9d:a1:62:7c:a1:7d:d2:dc:29:1c: 0c:55:0a:9e:ee:51:42:db:57:a5:ef:36:dc:d3:1f: 26:9d:51:51:7f:1a:81:65:8c:56:db:c8:3b:bf:a1: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:D2:EF:C4:91:74:12:91:CF:7E:EE:AA:A2:65:58:35:9D:41:62 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b7:b7:9d:a6:31:9f:3e:53:c3:99:f4:e0:38:bf:43:e9:b0: 2d:da:46:5a:02:fc:c0:87:d1:38:29:12:6a:b0:16:f4:86:5a: 8c:16:bf:14:7d:a4:18:13:5c:d9:21:62:7f:9d:cb:83:ca:03: 77:26:d2:d6:c6:eb:e8:dd:2a:11:da:a3:f4:e4:23:25:b6:d6: 41:c4:10:93:8d:61:ae:ff:9f:42:cb:17:7d:e6:27:da:18:22: 5b:b8:21:20:a0:f7:3e:7b:67:37:c7:6c:08:7a:87:49:72:6c: c9:fd:c7:62:e6:47:8e:e9:15:59:6d:70:8d:04:46:89:e2:ed: 69:ca:98:35:2c:62:9a:b5:70:1e:ca:39:d0:4b:52:6b:8a:aa: 36:c3:2a:6d:70:44:ac:bc:92:ec:37:76:0c:10:cf:d8:17:7d: 35:3c:45:f6:a0:19:90:25:77:82:78:de:01:7f:eb:7e:62:f7: c5:4d:57:a1:b5:85:b5:2f:dc:68:63:93:cf:73:9c:a6:85:7e: e6:3f:bd:32:1c:c9:92:93:75:fa:e7:cd:d1:8b:df:d4:72:56: 97:01:eb:a5:d3:ee:31:69:25:7b:a7:75:b4:b7:9b:c8:5a:bb: f9:68:dc:73:d0:77:24:08:47:50:58:ff:28:1e:6e:a2:5f:88: ee:0e:43:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUwNDI0MjM1MDExWhcNMjUwNTAxMjM1MDExWjAYMRYwFAYD VQQDEw02ODBhY2UzMy0xMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+JLCckwXa7o3m8rKK5uy2TYmDluEWgI8smd85q+CBNcmrQJWQpMAJY5HjK4 c6l+1VuNgGT4wVFUUqVfv4WWzTdgTTNjmpqnUVzVW/GyKQrw26fXnEHAAvOwXGUO 9QCGRYsWQG0badwv/S6As+dUYMrPAdNxMkFfy1+fy9AQSRysAougwsiKV65HYIIU AAyI5/CzgckRsVQrh1ZrdiJfgAGSdXiIbQzneAaruLRuGDUawprdS5O+RtA8DpnH vgpdpSj7TmW3CMXHWCqm8AbZCnnMjkY2OJ2hYnyhfdLcKRwMVQqe7lFC21el7zbc 0x8mnVFRfxqBZYxW28g7v6GnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPB0u/E kXQSkc9+7qqiZVg1nUFiMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzt7edpjGfPlPDmfTgOL9D6bAt2kZaAvzAh9E4KRJqsBb0hlqMFr8U faQYE1zZIWJ/ncuDygN3JtLWxuvo3SoR2qP05CMlttZBxBCTjWGu/59Cyxd95ifa GCJbuCEgoPc+e2c3x2wIeodJcmzJ/cdi5keO6RVZbXCNBEaJ4u1pypg1LGKatXAe yjnQS1Jriqo2wyptcESsvJLsN3YMEM/YF301PEX2oBmQJXeCeN4Bf+t+YvfFTVeh tYW1L9xoY5PPc5ymhX7mP70yHMmSk3X6583Ri9/UclaXAeul0+4xaSV7p3W0t5vI Wrv5aNxz0HckCEdQWP8oHm6iX4juDkPL -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:49 2025 by rpki-client