$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: OduphK1l6Evt+EdWco/Qz9SNJppV41bQ57ry+asDQoI= Subject key identifier: EF:6F:6C:7D:AA:76:58:F4:E7:0F:AD:3B:A6:55:3C:FC:95:0A:DD:6C Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 0359 Signing time: Fri 25 Apr 2025 00:44:40 +0000 Manifest this update: Fri 25 Apr 2025 00:44:40 +0000 Manifest next update: Fri 02 May 2025 00:44:40 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: a+8EI6FE9s1I9FiYJ3Hdyh/jeSi1cnlhWvUxAqpuzeg=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2V4s60CBepyFsN4hkIBA1O5APSOWrUwQgr6qjDAHtko=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: PpnJ+skHtxU80Y62k+Cdmycu9izolR2+X8heLZ727nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Apr 25 00:44:40 2025 GMT Not After : May 2 00:44:40 2025 GMT Subject: CN=680adaf8-fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:b1:83:8b:2d:1b:49:c4:cc:d6:42:13:39: 28:b8:4c:9f:0c:89:92:7e:3a:3f:05:57:17:1b:ad: 63:6d:9c:de:a6:f0:c4:2f:0b:fd:6d:0f:c9:bb:10: 41:d0:92:ab:ee:95:b7:91:d1:e0:c0:98:c9:61:15: de:50:e4:40:c3:57:a2:0f:3e:a3:cb:f7:ea:14:39: d4:fa:ae:79:5f:07:39:d7:2a:7f:90:20:6d:cb:e9: 66:d9:70:0c:fe:c1:21:89:fa:2a:97:d0:c7:3e:8e: 4b:44:cb:82:fd:3f:1d:a2:1d:4d:86:b9:8f:fc:b0: 95:0b:f4:4c:74:44:e6:fd:c3:c0:57:27:39:66:67: 1d:45:ce:26:13:68:c2:6e:3d:5e:b2:0b:80:74:bf: 48:51:a8:41:a4:c7:5b:2a:31:d4:79:20:ac:c4:3b: 75:4c:44:66:23:ac:91:bd:a7:78:11:e6:51:e4:cf: bd:ca:8c:10:2f:e6:52:a1:62:f8:fd:b9:7e:02:74: 9b:f2:be:59:03:80:46:00:b4:ad:0c:3f:16:c9:66: e5:1e:9b:08:b8:43:aa:94:8a:51:fc:17:21:d7:e6: 39:66:31:95:2b:96:f0:9b:d4:7e:dc:73:68:88:84: 71:92:0d:1f:e9:ec:da:9a:8e:86:8f:a0:ca:21:40: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6F:6C:7D:AA:76:58:F4:E7:0F:AD:3B:A6:55:3C:FC:95:0A:DD:6C X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:29:9c:f6:e3:16:c4:e4:49:93:dd:98:a2:1d:e8:86:5d:16: 88:53:35:a8:da:58:3f:53:40:4c:7a:25:61:7e:86:ce:d6:cf: 30:67:b6:af:47:b0:4d:d4:88:ba:42:57:ef:c3:32:80:c6:48: 00:7b:2f:3a:7e:77:93:c8:ff:6d:6d:76:9f:87:cc:13:c4:30: d8:56:28:cf:7c:e7:10:31:e2:b4:e1:ef:49:21:39:29:bc:ce: f4:16:8f:a1:20:00:88:b8:f3:f3:cd:58:8b:79:a3:1e:06:28: 28:11:f7:e7:a0:0b:29:39:c0:ff:62:d9:ad:92:21:28:cb:36: 38:4c:c3:53:c8:3e:ca:24:22:27:0b:a1:6a:2d:2c:d6:54:0c: bd:cb:72:19:92:7d:2d:a8:17:72:f6:2c:a7:02:a0:a7:c7:86: 09:9e:e9:27:28:33:9f:19:78:cb:9a:05:34:ad:fb:2a:e4:54: fe:70:d5:2e:97:26:e8:7e:44:3d:60:a9:43:59:4c:55:86:07: 45:79:1c:96:f1:29:e1:69:8f:b3:3a:59:5e:49:43:d0:d8:79: a1:0d:cc:df:db:38:7c:35:2a:fa:fd:ca:3e:16:1a:a4:9e:98: e0:d2:49:48:c4:a5:2a:7f:5b:b6:b7:52:23:bc:37:5f:9d:8a: 1f:ee:19:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwNDI1MDA0NDQwWhcNMjUwNTAyMDA0NDQwWjAYMRYwFAYD VQQDEw02ODBhZGFmOC1mYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAKxg4stG0nEzNZCEzkouEyfDImSfjo/BVcXG61jbZzepvDELwv9bQ/JuxBB 0JKr7pW3kdHgwJjJYRXeUORAw1eiDz6jy/fqFDnU+q55Xwc51yp/kCBty+lm2XAM /sEhifoql9DHPo5LRMuC/T8doh1NhrmP/LCVC/RMdETm/cPAVyc5ZmcdRc4mE2jC bj1esguAdL9IUahBpMdbKjHUeSCsxDt1TERmI6yRvad4EeZR5M+9yowQL+ZSoWL4 /bl+AnSb8r5ZA4BGALStDD8WyWblHpsIuEOqlIpR/Bch1+Y5ZjGVK5bwm9R+3HNo iIRxkg0f6ezamo6Gj6DKIUDMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9vbH2q dlj05w+tO6ZVPPyVCt1sMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIKZz24xbE5EmT3ZiiHeiGXRaIUzWo2lg/U0BMeiVhfobO1s8wZ7av R7BN1Ii6QlfvwzKAxkgAey86fneTyP9tbXafh8wTxDDYVijPfOcQMeK04e9JITkp vM70Fo+hIACIuPPzzViLeaMeBigoEffnoAspOcD/YtmtkiEoyzY4TMNTyD7KJCIn C6FqLSzWVAy9y3IZkn0tqBdy9iynAqCnx4YJnuknKDOfGXjLmgU0rfsq5FT+cNUu lybofkQ9YKlDWUxVhgdFeRyW8SnhaY+zOlleSUPQ2HmhDczf2zh8NSr6/co+Fhqk npjg0klIxKUqf1u2t1IjvDdfnYof7hle -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:00 2025 by rpki-client