$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: jjq6jjhHdYIRnPxq/1bOSUR0W/c3oT3swcE+VhfOmnQ= Subject key identifier: 15:7B:C3:74:55:EC:37:A4:02:AD:0B:14:24:5D:C7:58:59:FD:A4:DC Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0141 Signing time: Sat 29 Mar 2025 03:51:23 +0000 Manifest this update: Sat 29 Mar 2025 03:51:22 +0000 Manifest next update: Sat 05 Apr 2025 03:51:22 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: AKR8oiaFVN61Bcki8rHwOl41F/3ateqyEfsEpGrU0dk=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26 Validity Not Before: Mar 29 03:51:22 2025 GMT Not After : Apr 5 03:51:22 2025 GMT Subject: CN=67e76e3a-9262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:14:9d:db:0f:ec:ad:6c:11:f5:b5:8c:82: fc:49:b3:bb:d6:7d:ff:75:74:cf:d0:d4:bf:13:f9: b7:b0:3e:1e:f4:66:05:1c:67:06:8f:a8:30:0c:b8: 87:bc:68:15:aa:e5:cb:99:97:76:59:27:5a:9a:44: ec:d0:0c:eb:eb:41:b0:ce:5a:f5:7b:87:7c:43:c4: 6b:d7:e3:de:5e:73:63:51:33:b5:90:72:4d:b6:81: 00:c3:f3:2c:17:d3:a7:ef:22:28:99:cc:79:ef:a3: 3a:10:e2:51:e3:e4:94:4b:6e:77:3d:81:f8:be:70: db:2a:c7:43:95:ca:07:40:a4:a8:89:fe:2b:2f:41: e9:ca:a1:6a:36:30:7f:f5:f1:05:03:33:40:74:57: ce:0d:83:fe:06:a8:79:e6:0a:8d:e3:ae:d6:25:2b: a4:50:23:a7:f4:a3:2b:d8:64:2d:7e:04:9b:45:3a: 83:e1:a9:5c:ac:a4:88:8e:89:4f:1f:d6:a4:b9:1c: ca:89:a6:b3:4d:1c:06:29:3c:01:c2:c6:fc:19:f0: 9d:3a:c0:a9:65:48:be:d5:87:b1:06:6b:9d:b0:cc: f0:b8:72:c0:e7:09:77:b9:7b:2e:dd:d2:61:e6:b9: 7d:71:84:8b:9d:ec:26:1f:5e:34:a1:bf:a4:7f:64: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7B:C3:74:55:EC:37:A4:02:AD:0B:14:24:5D:C7:58:59:FD:A4:DC X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:dd:73:80:42:ab:c5:ca:ad:58:00:53:47:8e:04:b5:96:78: 69:3d:20:30:cf:fb:43:e8:c4:ff:41:9b:d3:3b:71:35:7f:53: 38:1a:7d:5d:85:b6:f9:cc:02:57:11:28:e9:07:0b:6d:8e:66: 19:77:30:05:7b:e1:5c:dc:33:72:3a:d2:f6:1a:a7:2f:f4:be: 38:f8:f8:34:fa:85:df:d4:00:5b:67:b4:bd:a1:3d:d9:c4:aa: 18:06:54:c6:db:41:fa:f3:12:66:eb:c0:9e:aa:04:b1:34:06: cf:74:ec:84:62:78:1d:2a:61:a7:db:00:80:5c:bc:f4:25:4e: 3d:d5:0e:5d:99:71:12:3d:b8:9f:4e:40:ad:97:4d:e6:7c:24: 61:fd:8f:5c:e3:e6:30:f8:22:10:da:00:60:53:44:3c:8d:04: fe:30:50:7f:f2:65:9c:0a:9e:a7:8f:21:1f:a0:11:08:5a:a8: 77:4f:bf:12:31:3e:50:ec:47:1f:81:05:40:13:56:ba:4f:8a: 6a:90:69:da:77:f6:4b:1f:a1:fe:4f:2c:de:56:a2:61:1f:01: 7c:2b:0b:28:ca:38:3b:9c:8f:9c:c5:75:8b:ae:2c:d1:de:cd: 5c:24:b7:f7:ae:55:31:4e:00:4a:df:45:5d:58:6b:39:12:79: ea:27:9f:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwMzI5MDM1MTIyWhcNMjUwNDA1MDM1MTIyWjAYMRYwFAYD VQQDEw02N2U3NmUzYS05MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UcUndsP7K1sEfW1jIL8SbO71n3/dXTP0NS/E/m3sD4e9GYFHGcGj6gwDLiH vGgVquXLmZd2WSdamkTs0Azr60Gwzlr1e4d8Q8Rr1+PeXnNjUTO1kHJNtoEAw/Ms F9On7yIomcx576M6EOJR4+SUS253PYH4vnDbKsdDlcoHQKSoif4rL0HpyqFqNjB/ 9fEFAzNAdFfODYP+Bqh55gqN467WJSukUCOn9KMr2GQtfgSbRTqD4alcrKSIjolP H9akuRzKiaazTRwGKTwBwsb8GfCdOsCpZUi+1YexBmudsMzwuHLA5wl3uXsu3dJh 5rl9cYSLnewmH140ob+kf2TW6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV7w3RV 7DekAq0LFCRdx1hZ/aTcMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU3XOAQqvFyq1YAFNHjgS1lnhpPSAwz/tD6MT/QZvTO3E1f1M4Gn1d hbb5zAJXESjpBwttjmYZdzAFe+Fc3DNyOtL2Gqcv9L44+Pg0+oXf1ABbZ7S9oT3Z xKoYBlTG20H68xJm68CeqgSxNAbPdOyEYngdKmGn2wCAXLz0JU491Q5dmXESPbif TkCtl03mfCRh/Y9c4+Yw+CIQ2gBgU0Q8jQT+MFB/8mWcCp6njyEfoBEIWqh3T78S MT5Q7EcfgQVAE1a6T4pqkGnad/ZLH6H+TyzeVqJhHwF8Kwsoyjg7nI+cxXWLrizR 3s1cJLf3rlUxTgBK30VdWGs5EnnqJ59N -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:26 2025 by rpki-client