$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: sfQ1SXTzc4LizV5FFyqnCVeu4EVDKo84gMebSqTZOa0= Subject key identifier: A9:99:83:45:30:EB:65:75:94:5A:73:3C:BD:39:9E:44:48:0F:DA:51 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 0F Signing time: Thu 03 Apr 2025 07:21:11 +0000 Manifest this update: Thu 03 Apr 2025 07:21:10 +0000 Manifest next update: Thu 10 Apr 2025 07:21:10 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: uba6afKgqT9e6Y6eiQMDSFJy3ppixumR3BAxtfYxkQA=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3 Validity Not Before: Apr 3 07:21:10 2025 GMT Not After : Apr 10 07:21:10 2025 GMT Subject: CN=67ee36e7-4c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dd:9c:52:c0:91:3b:d1:22:5b:b1:98:9b:7c: 0e:90:34:f9:f1:a0:3e:93:5f:4d:e9:34:5f:81:cd: ce:2a:9a:d0:97:a0:ef:23:0a:45:7d:10:0b:b9:93: 26:95:c4:a4:b1:4b:6a:d0:43:44:5a:94:f5:a2:80: 1d:bc:46:6e:2b:73:20:c9:f8:c9:c1:d2:7c:14:2f: fb:ba:a5:5a:aa:38:8c:ad:e7:3e:2c:e1:31:96:bb: 96:12:08:ae:56:e9:5a:fc:38:87:6e:19:3d:ce:04: fc:e8:1c:fd:83:aa:6c:99:bb:eb:cb:5b:f4:87:87: 6e:88:dc:13:66:a0:6d:5e:96:7f:f9:b3:9f:26:ab: b6:9b:ad:9d:72:11:a1:4d:00:03:85:03:49:61:ef: e1:05:7c:99:41:c4:e4:c0:96:46:e0:2a:d1:d5:3a: 84:0a:cf:36:a3:95:88:ec:fc:de:21:35:42:b2:11: f9:5c:7d:84:2c:9f:26:c0:14:6a:68:f9:df:ad:17: 6d:7d:71:3b:b2:eb:e1:f9:0d:0c:09:70:a3:89:33: 52:03:0e:c6:bc:ea:60:d6:7d:39:ba:7b:73:e7:ea: a0:f0:a5:1b:72:36:d3:aa:1e:00:ec:17:27:88:06: 00:c8:d8:63:30:ed:86:a1:68:c2:e4:bf:58:29:6a: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:83:45:30:EB:65:75:94:5A:73:3C:BD:39:9E:44:48:0F:DA:51 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1a:f5:8a:92:0f:b3:f7:e5:92:54:ea:26:20:be:80:1f:ac: e8:67:20:a7:cf:e9:72:34:10:92:7f:2c:98:30:f1:03:3e:03: 38:b6:b2:d0:1d:36:02:e8:72:82:a9:d3:e5:21:79:3d:9c:06: 14:2e:9f:08:d8:da:ec:ca:6b:fa:9b:1a:a2:db:6a:f2:1b:ec: 19:17:be:c1:d9:ad:89:28:cd:05:52:7f:7d:aa:17:c2:49:5a: 3c:78:65:7f:53:13:b0:87:e8:6f:30:b7:33:e4:91:08:ac:2b: bc:23:90:a3:c1:66:23:87:64:34:7a:30:da:89:6d:92:b3:a0: 74:40:9c:17:70:06:e7:6f:23:5d:25:01:61:3e:3c:4d:1e:9f: a1:12:be:79:f1:a2:c7:8a:35:34:57:8c:6d:9d:b2:66:fb:db: e1:57:f7:09:77:26:2c:84:77:07:c5:1d:aa:db:0d:46:08:0a: c6:1d:37:cf:47:cc:f1:3c:51:60:d9:35:9b:99:67:26:48:74: 5b:32:bd:ec:2f:0b:f9:c4:ae:e0:92:50:64:dc:f8:61:6b:24: a5:2b:2a:08:95:7f:e8:56:85:83:d8:0d:81:10:1a:65:36:e2: 26:11:bd:22:32:2b:b5:78:8f:7e:17:82:a3:d2:83:52:c9:84: 2e:3d:5e:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA0MDMwNzIxMTBaFw0yNTA0MTAwNzIxMTBaMBgxFjAUBgNV BAMTDTY3ZWUzNmU3LTRjN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr3ZxSwJE70SJbsZibfA6QNPnxoD6TX03pNF+Bzc4qmtCXoO8jCkV9EAu5kyaV xKSxS2rQQ0RalPWigB28Rm4rcyDJ+MnB0nwUL/u6pVqqOIyt5z4s4TGWu5YSCK5W 6Vr8OIduGT3OBPzoHP2DqmyZu+vLW/SHh26I3BNmoG1eln/5s58mq7abrZ1yEaFN AAOFA0lh7+EFfJlBxOTAlkbgKtHVOoQKzzajlYjs/N4hNUKyEflcfYQsnybAFGpo +d+tF219cTuy6+H5DQwJcKOJM1IDDsa86mDWfTm6e3Pn6qDwpRtyNtOqHgDsFyeI BgDI2GMw7YahaMLkv1gpalAdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqZmDRTDr ZXWUWnM8vTmeREgP2lEwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABga9YqSD7P35ZJU6iYgvoAfrOhnIKfP6XI0EJJ/LJgw8QM+Azi2stAd NgLocoKp0+UheT2cBhQunwjY2uzKa/qbGqLbavIb7BkXvsHZrYkozQVSf32qF8JJ Wjx4ZX9TE7CH6G8wtzPkkQisK7wjkKPBZiOHZDR6MNqJbZKzoHRAnBdwBudvI10l AWE+PE0en6ESvnnxoseKNTRXjG2dsmb72+FX9wl3JiyEdwfFHarbDUYICsYdN89H zPE8UWDZNZuZZyZIdFsyvewvC/nEruCSUGTc+GFrJKUrKgiVf+hWhYPYDYEQGmU2 4iYRvSIyK7V4j34XgqPSg1LJhC49Xsw= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:55 2025 by rpki-client