$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: leIxxjSCxJlQMt/jvrdCJLtHdfRo6Bq+CfhaUi8j6Ng= Subject key identifier: 0F:2B:74:28:46:20:69:A3:3A:74:23:62:E7:EB:65:DF:07:AD:DE:FF Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 0798 Signing time: Fri 28 Mar 2025 21:33:29 +0000 Manifest this update: Fri 28 Mar 2025 21:33:29 +0000 Manifest next update: Fri 04 Apr 2025 21:33:29 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: LqBRpwdttU2joJgDawTguNxOvf744wk8a2saIzCV5XE=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D Validity Not Before: Mar 28 21:33:29 2025 GMT Not After : Apr 4 21:33:29 2025 GMT Subject: CN=67e715a9-ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:6e:cb:1a:06:4e:e4:3a:cb:aa:6d:69:0a: f4:b0:ea:a3:88:d5:b2:8b:41:96:90:1e:48:84:a7: e6:d1:96:65:e8:f7:87:97:b0:d4:40:9e:f3:f6:f8: 18:ce:86:1f:3a:79:89:56:0e:fd:62:a9:4e:6e:a4: ef:cb:07:74:84:64:31:2c:f7:c8:61:8d:56:bc:5d: 72:38:63:16:6a:02:32:2d:44:d3:d2:37:76:96:31: 24:c3:17:54:b7:75:c8:1c:22:a8:e3:ee:5a:e8:8d: c5:b3:2f:e4:b2:c4:9a:90:d7:2a:31:3e:08:3f:45: 11:4b:5b:3f:f4:f3:5f:dc:60:a0:c3:5b:1a:7e:67: 54:61:0e:84:ba:37:ac:f1:d5:fb:33:99:70:f3:48: 7c:36:34:65:41:bc:35:66:63:28:cd:bf:ae:83:85: c3:7d:9a:22:68:d9:17:e7:83:4b:46:7c:23:e6:f8: 4f:b8:7b:53:b0:6d:3b:12:b8:24:88:60:ce:3d:65: d9:24:3d:66:c3:71:61:81:b6:eb:66:45:02:ca:c7: 18:4c:a9:b3:5f:40:c3:10:ee:fe:2e:51:58:74:47: f8:cd:81:9c:0c:ca:eb:5f:ea:ac:5b:9a:03:50:e3: 7d:9c:e5:96:c9:21:7b:ad:88:1c:19:20:cd:a3:4e: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2B:74:28:46:20:69:A3:3A:74:23:62:E7:EB:65:DF:07:AD:DE:FF X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:6e:40:29:55:2a:51:cd:2d:75:2b:c8:53:b3:cd:2b:46: c0:b7:5f:44:b4:39:89:e5:bd:61:ec:39:7f:b5:41:50:44:6e: d1:ec:96:74:4f:37:30:ae:77:2c:6f:aa:32:91:6e:c8:12:f4: 74:42:5a:71:4e:0c:f0:7c:04:82:67:f7:b9:9b:84:c5:f0:a7: ac:29:47:d9:a7:79:da:24:f6:fd:9a:fa:41:88:39:f8:fc:5d: db:68:a8:c5:97:c9:32:9d:81:4d:36:9c:69:a5:e5:66:b0:34: ea:ed:a2:f0:ef:31:c8:e7:35:29:cb:f5:d7:07:1a:50:44:ba: b8:d3:d8:84:58:e7:dc:f3:8b:9d:39:a1:68:b9:73:33:5e:aa: b9:27:9f:95:e8:70:1c:8a:5e:93:60:f1:ec:13:57:c1:91:ce: 48:47:6d:fd:fa:e1:3f:3b:e1:ec:07:51:32:ce:86:4a:b9:70: ea:c3:43:f4:9c:fb:8d:6c:9a:ab:e4:1e:40:f2:f7:6a:4b:49: 43:95:24:45:bd:96:97:27:37:14:a6:ed:d0:32:12:9a:bb:48: 76:ea:16:60:44:7c:68:86:14:d1:2e:23:3b:f8:34:20:15:2b: 1b:8a:89:d4:82:df:70:e0:e2:62:4e:01:e6:2f:1d:99:7c:f6: d5:b9:89:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwMzI4MjEzMzI5WhcNMjUwNDA0MjEzMzI5WjAYMRYwFAYD VQQDEw02N2U3MTVhOS1lZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoVuyxoGTuQ6y6ptaQr0sOqjiNWyi0GWkB5IhKfm0ZZl6PeHl7DUQJ7z9vgY zoYfOnmJVg79YqlObqTvywd0hGQxLPfIYY1WvF1yOGMWagIyLUTT0jd2ljEkwxdU t3XIHCKo4+5a6I3Fsy/kssSakNcqMT4IP0URS1s/9PNf3GCgw1safmdUYQ6Eujes 8dX7M5lw80h8NjRlQbw1ZmMozb+ug4XDfZoiaNkX54NLRnwj5vhPuHtTsG07Ergk iGDOPWXZJD1mw3FhgbbrZkUCyscYTKmzX0DDEO7+LlFYdEf4zYGcDMrrX+qsW5oD UON9nOWWySF7rYgcGSDNo06XjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8rdChG IGmjOnQjYufrZd8Hrd7/MB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQqW5AKVUqUc0tdSvIU7PNK0bAt19EtDmJ5b1h7Dl/tUFQRG7R7JZ0 Tzcwrncsb6oykW7IEvR0QlpxTgzwfASCZ/e5m4TF8KesKUfZp3naJPb9mvpBiDn4 /F3baKjFl8kynYFNNpxppeVmsDTq7aLw7zHI5zUpy/XXBxpQRLq409iEWOfc84ud OaFouXMzXqq5J5+V6HAcil6TYPHsE1fBkc5IR239+uE/O+HsB1EyzoZKuXDqw0P0 nPuNbJqr5B5A8vdqS0lDlSRFvZaXJzcUpu3QMhKau0h26hZgRHxohhTRLiM7+DQg FSsbionUgt9w4OJiTgHmLx2ZfPbVuYnK -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:52 2025 by rpki-client