$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json) Hash identifier: VQ2IFQWyK9U3f58HKx9GASNyFuC8EO5by8eMrph3Fo4= Subject key identifier: C0:E5:61:25:9D:01:64:04:C6:6C:BA:D6:B7:21:36:80:E8:F6:3B:71 Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft Manifest number: 062C Signing time: Fri 28 Mar 2025 22:56:22 +0000 Manifest this update: Fri 28 Mar 2025 22:56:21 +0000 Manifest next update: Fri 04 Apr 2025 22:56:21 +0000 Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: urJFAccGwej5MfIDoc6w+gJFaPTEt09QO480TxkRY6c=) 2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1444bb5xjFLOm1pP6Amz/K/2h6LYyRRZNFd2Apyax+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A5E7 Validity Not Before: Mar 28 22:56:21 2025 GMT Not After : Apr 4 22:56:21 2025 GMT Subject: CN=67e72916-4243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:24:9f:fa:fe:9c:66:e9:59:39:0b:af:b2: 5a:7d:37:68:56:11:77:d9:aa:23:c9:37:16:78:c2: a5:41:a6:86:68:fc:c3:74:ee:b1:14:0b:e5:b9:6d: 0c:54:93:db:be:12:4f:ee:90:a5:5c:7b:b5:b1:3f: a1:a5:1f:37:c0:f8:9f:fa:ad:d8:dc:d4:1f:b9:b9: 60:f4:81:53:24:59:22:7b:9a:4f:3a:ac:bf:46:0b: 50:fa:76:b9:19:75:f0:6b:83:72:bf:24:98:6f:f7: c1:1e:fc:af:5f:a9:c4:b2:b3:03:4a:45:bb:b0:38: c3:39:ac:8a:0f:75:66:0d:2d:ab:14:03:bc:d3:c5: 7c:d5:2f:35:5f:80:49:ae:bc:1e:7e:dc:35:34:90: 29:24:9b:fe:a9:09:bd:54:a9:d3:60:3c:95:6d:e0: 5d:c0:fa:13:00:76:96:4c:8b:64:84:6b:18:2c:94: 8e:93:9a:b3:7c:d6:55:c2:a8:b8:03:85:db:cd:9b: b1:61:19:c0:47:c5:39:06:7b:33:66:dc:28:25:10: 05:58:57:04:0e:d1:e0:21:7c:92:4d:64:e7:88:cb: 72:53:88:bc:e5:29:27:49:59:0a:08:60:07:6d:5c: c3:72:b8:fa:27:18:23:0d:a3:7c:89:e7:9a:89:e3: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E5:61:25:9D:01:64:04:C6:6C:BA:D6:B7:21:36:80:E8:F6:3B:71 X509v3 Authority Key Identifier: keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9a:58:0a:f5:06:5a:cf:71:7b:15:57:2d:1b:46:35:d0:98: 05:6a:3f:46:8c:9c:84:3a:5a:56:fa:4d:ff:6c:4c:34:7d:1f: b9:6b:d7:fb:ce:07:88:5a:9d:4a:90:ea:4d:53:81:21:28:7e: 68:1b:4c:0e:2a:a3:01:46:ab:b9:e4:4a:62:08:e1:25:75:c8: da:6e:b9:39:4e:7e:e1:5c:d0:0d:9a:95:4d:3d:7b:d8:6e:29: db:55:a8:66:8f:f5:dd:aa:73:ff:0b:bb:ef:d8:f8:b7:0e:d8: 12:35:5b:c7:cc:ed:21:de:13:ce:33:77:f0:56:48:68:c1:26: 42:2c:95:c1:07:10:86:5d:e9:7f:3b:94:ca:24:cb:03:e7:32: 7f:9d:53:12:ac:71:c7:28:9f:19:c1:df:de:c9:ef:04:5a:c2: b5:4b:4f:36:0c:50:1a:b5:85:29:2a:54:f4:0f:ee:ad:4a:c2: 3c:10:88:96:54:1c:22:25:f8:f2:f8:fd:13:ff:37:d3:af:4e: 15:87:1b:a6:06:f1:ff:5d:71:24:a8:97:cc:76:84:d2:ed:38: f1:04:50:2f:e7:03:ff:dd:ce:29:23:7e:34:58:01:77:20:86: 90:00:49:75:44:fe:e5:20:bb:9c:2c:31:6c:66:3b:ba:a5:b0: ae:8c:1a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1RTcxMTAvBgNVBAUTKEFDQzAxMTk0MzM4NzdGMEM3NDI4NTdCOEVBNTIwRjhE QTRFRDA5NUEwHhcNMjUwMzI4MjI1NjIxWhcNMjUwNDA0MjI1NjIxWjAYMRYwFAYD VQQDEw02N2U3MjkxNi00MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyskn/r+nGbpWTkLr7JafTdoVhF32aojyTcWeMKlQaaGaPzDdO6xFAvluW0M VJPbvhJP7pClXHu1sT+hpR83wPif+q3Y3NQfublg9IFTJFkie5pPOqy/RgtQ+na5 GXXwa4NyvySYb/fBHvyvX6nEsrMDSkW7sDjDOayKD3VmDS2rFAO808V81S81X4BJ rrweftw1NJApJJv+qQm9VKnTYDyVbeBdwPoTAHaWTItkhGsYLJSOk5qzfNZVwqi4 A4XbzZuxYRnAR8U5BnszZtwoJRAFWFcEDtHgIXySTWTniMtyU4i85SknSVkKCGAH bVzDcrj6JxgjDaN8ieeaieORCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDlYSWd AWQExmy61rchNoDo9jtxMB8GA1UdIwQYMBaAFKzAEZQzh38MdChXuOpSD42k7Qla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTVFNy9FOTU5REM3NjhD NjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3eDBLRmU0NmxJUGphVHRD Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNQVJsRE9IZnd4MEtGZTQ2bElQamFUdENWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTVFNy9FOTU5REM3NjhDNjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3 eDBLRmU0NmxJUGphVHRDVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQmlgK9QZaz3F7FVctG0Y10JgFaj9GjJyEOlpW+k3/bEw0fR+5a9f7 zgeIWp1KkOpNU4EhKH5oG0wOKqMBRqu55EpiCOEldcjabrk5Tn7hXNANmpVNPXvY binbVahmj/XdqnP/C7vv2Pi3DtgSNVvHzO0h3hPOM3fwVkhowSZCLJXBBxCGXel/ O5TKJMsD5zJ/nVMSrHHHKJ8Zwd/eye8EWsK1S082DFAatYUpKlT0D+6tSsI8EIiW VBwiJfjy+P0T/zfTr04VhxumBvH/XXEkqJfMdoTS7TjxBFAv5wP/3c4pI340WAF3 IIaQAEl1RP7lILucLDFsZju6pbCujBog -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:34 2025 by rpki-client