$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: I729JTc3FoxFZKB2V1wT5WoYSAq1JcOFPcPyZCqQ79w= Subject key identifier: A0:17:21:77:4F:AE:40:4E:74:C7:94:50:25:36:41:07:B8:02:24:41 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 0115 Signing time: Fri 11 Apr 2025 04:07:13 +0000 Manifest this update: Fri 11 Apr 2025 04:07:12 +0000 Manifest next update: Fri 18 Apr 2025 04:07:12 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: v61zd4Njw9A95lnwoYOYWEiFLBbhInXn8Flt/37JB7I=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Apr 11 04:07:12 2025 GMT Not After : Apr 18 04:07:12 2025 GMT Subject: CN=67f89571-9ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:88:d5:25:20:9f:f2:1a:e1:dc:66:a8:25: 2b:f9:45:e3:b2:d5:bd:e0:05:c0:9a:7c:b7:ce:ad: 05:29:8f:db:16:81:99:c7:c3:cd:25:fe:82:95:f0: 5b:4b:48:e0:03:14:23:d1:c9:95:a0:d8:77:24:e1: e4:ed:36:e9:bf:1b:3f:2a:6b:c7:b1:e7:f7:db:31: 3f:b9:99:cb:41:6d:5e:54:94:ad:c9:30:92:7d:39: 27:b8:37:ec:1b:a2:45:84:b5:18:ec:8d:ce:62:7c: 6e:92:d3:b4:4d:94:df:e2:7c:73:8f:45:dd:7b:4f: 12:f9:48:64:46:0a:07:d1:0f:41:5a:44:bd:6c:c3: 09:7e:d0:c1:19:68:9e:73:6a:9c:90:da:8a:f9:83: 01:5f:2a:f2:e3:97:41:4d:94:b1:5c:63:d3:09:8e: fa:64:8c:96:a8:3b:4c:1c:5a:4b:08:80:8e:5e:12: 91:9e:72:52:35:57:8d:24:12:b2:c8:38:1c:9e:a8: 3b:68:10:6e:eb:f9:f3:a4:0d:36:fd:13:68:ba:73: d3:d0:cd:8b:44:fc:c1:c4:fd:c4:af:39:3e:98:30: 4e:d9:7c:ef:99:df:48:44:dc:0c:09:50:c4:65:01: 24:52:52:13:f7:51:94:89:2d:b3:80:d4:39:3c:c9: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:17:21:77:4F:AE:40:4E:74:C7:94:50:25:36:41:07:B8:02:24:41 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f1:5c:d2:77:93:d0:f9:5a:1d:f0:5a:4f:97:02:3f:18:1e: 40:98:0d:b3:92:bc:b0:c2:53:e3:21:95:06:ca:35:89:eb:b9: 26:3c:8f:7d:82:99:ec:c3:f5:18:14:43:e3:6e:55:70:c9:18: 01:41:d3:e4:74:a3:09:29:44:80:04:77:98:65:8c:34:a8:08: bf:c4:a2:1b:ec:27:d7:f2:af:fc:9d:1d:d2:e2:4f:9b:5c:ff: 31:9e:25:e7:62:74:42:59:13:c1:05:89:bb:40:68:bb:8d:b6: e8:ba:b8:a5:61:19:5f:b1:6b:6d:4b:1d:6a:ac:1c:48:3c:c7: 8f:1a:28:55:90:aa:55:84:ff:c5:a1:c7:6a:7e:4d:9e:5d:04: a8:57:a7:7b:e6:45:8f:a1:57:8b:6c:ce:9a:7f:4a:50:62:65: f7:b7:41:d8:c1:ae:b9:9b:7f:e7:d2:65:a5:4e:f4:2e:da:8b: 26:5d:8b:cd:21:d4:4d:72:d6:e9:5b:ee:9c:6b:24:93:d1:f3: d8:fd:69:5e:82:9e:9e:7c:44:1e:9c:1f:53:93:54:81:29:4e: 94:2a:7c:f5:52:72:c2:1d:64:c3:8a:01:5a:a3:6f:7d:d7:06: 5f:04:ba:75:f8:f2:53:19:31:f2:91:37:fc:fc:8a:08:13:ab: a3:e7:f7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNDExMDQwNzEyWhcNMjUwNDE4MDQwNzEyWjAYMRYwFAYD VQQDEw02N2Y4OTU3MS05ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRuI1SUgn/Ia4dxmqCUr+UXjstW94AXAmny3zq0FKY/bFoGZx8PNJf6ClfBb S0jgAxQj0cmVoNh3JOHk7Tbpvxs/KmvHsef32zE/uZnLQW1eVJStyTCSfTknuDfs G6JFhLUY7I3OYnxuktO0TZTf4nxzj0Xde08S+UhkRgoH0Q9BWkS9bMMJftDBGWie c2qckNqK+YMBXyry45dBTZSxXGPTCY76ZIyWqDtMHFpLCICOXhKRnnJSNVeNJBKy yDgcnqg7aBBu6/nzpA02/RNounPT0M2LRPzBxP3Erzk+mDBO2Xzvmd9IRNwMCVDE ZQEkUlIT91GUiS2zgNQ5PMmHbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAXIXdP rkBOdMeUUCU2QQe4AiRBMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF8VzSd5PQ+Vod8FpPlwI/GB5AmA2zkrywwlPjIZUGyjWJ67kmPI99 gpnsw/UYFEPjblVwyRgBQdPkdKMJKUSABHeYZYw0qAi/xKIb7CfX8q/8nR3S4k+b XP8xniXnYnRCWRPBBYm7QGi7jbbourilYRlfsWttSx1qrBxIPMePGihVkKpVhP/F ocdqfk2eXQSoV6d75kWPoVeLbM6af0pQYmX3t0HYwa65m3/n0mWlTvQu2osmXYvN IdRNctbpW+6cayST0fPY/Wlegp6efEQenB9Tk1SBKU6UKnz1UnLCHWTDigFao299 1wZfBLp1+PJTGTHykTf8/IoIE6uj5/eM -----END CERTIFICATE-----Generated at Sun Apr 13 04:45:25 2025 by rpki-client