$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: e3YLhyos0M1awkjsw8a3stxv1HA1RG/baYZcs4mvl2Q= Subject key identifier: 4A:ED:3D:5C:04:9D:4E:B4:58:74:19:F4:21:A2:F2:59:DE:FC:7F:C3 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 06F7 Signing time: Wed 02 Apr 2025 23:07:05 +0000 Manifest this update: Wed 02 Apr 2025 23:07:04 +0000 Manifest next update: Wed 09 Apr 2025 23:07:04 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: QWcH/WoJMRhQjocHdvh+F2ODdDJzLTbcE6zSjipH85I=) 2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: ppWQ47ohPMKp0HyRoR8MmA4QYcSHi56R4OtMRFr3ZMY=) 3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: j9p/vcA9o9VzipBj0MMgcHuMnlUR90tv7MO4kCKow5M=) 4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: cEwRwL6NyKD7/7j1+2oJ4jFFMQC29bpjH4kEXInL3fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A Validity Not Before: Apr 2 23:07:04 2025 GMT Not After : Apr 9 23:07:04 2025 GMT Subject: CN=67edc318-9b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:db:ea:30:93:b1:16:6b:a0:f3:65:e2:cf: 0b:cb:bc:43:fd:76:b5:76:c7:ed:35:0c:48:17:b7: b7:b3:56:81:0d:63:9a:5f:32:40:04:d8:6c:7e:71: 4b:8d:10:25:5d:75:a0:e3:31:c4:8a:64:93:a1:c9: c3:fa:64:33:1e:5c:ec:72:df:c2:ae:7e:e4:21:06: e8:25:cb:f7:2e:b7:dd:3d:a0:16:12:ec:c6:b3:c3: fd:be:72:b9:52:91:49:2a:df:b9:62:e0:b7:fe:3c: 25:c6:a8:b7:bd:15:64:df:99:82:af:24:e5:9d:6f: 12:a2:1f:f9:7c:18:2c:8f:cf:c9:13:b3:69:51:da: 68:79:29:61:8a:62:3c:fd:40:0c:3d:82:72:51:e2: b4:50:ef:28:76:54:ea:b6:33:fa:20:29:23:59:e2: 15:a9:62:b7:4f:1f:ca:bf:a5:40:f8:ab:c7:40:7f: 73:79:22:97:13:ba:46:b1:07:77:6c:d4:9a:10:7f: b1:5e:88:3b:ba:eb:b8:a0:4b:d7:a1:50:c3:8b:b5: a3:df:87:07:a1:84:45:29:72:8a:41:5c:02:fe:20: ed:c1:d0:91:0e:e3:95:df:29:89:73:26:68:73:5b: 55:d6:68:d5:df:1b:c4:b2:33:fd:21:8e:df:33:11: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:3D:5C:04:9D:4E:B4:58:74:19:F4:21:A2:F2:59:DE:FC:7F:C3 X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:19:e6:2f:ab:97:3b:ac:86:1b:cb:ee:1c:b2:99:f3:1a:6b: 57:e5:e5:68:4e:53:25:68:ba:fb:37:23:ca:95:75:37:31:72: 1d:e7:50:02:f6:75:e3:f0:90:0f:fb:7d:60:fa:52:f4:9c:39: 9d:e4:a7:a5:97:b3:de:3f:08:4a:25:64:5e:41:1c:f1:c8:61: 06:33:53:4c:a8:e0:65:e0:d9:53:52:7e:ae:36:a8:12:44:e6: f4:40:5e:c8:1f:0b:31:a0:39:d7:f0:fa:66:78:9a:21:4f:30: aa:3d:02:b2:31:0e:f4:73:34:b5:5e:ad:ee:e3:9e:9a:03:68: 27:04:01:59:6a:8f:30:81:80:a7:61:ab:af:44:ab:61:4d:f5: eb:49:af:64:d5:4a:66:7b:04:7b:9b:96:fd:c4:b7:81:13:13: 54:e3:79:ca:87:e8:a7:44:b0:c1:0d:d6:77:19:52:32:26:11: 72:31:65:3d:fa:4b:8c:13:95:b0:c1:65:88:a5:b0:6e:02:07: 7e:fb:17:90:11:8c:e8:9a:23:e7:b2:67:cc:14:08:d2:93:bf: 30:4b:49:e0:aa:95:5d:af:f5:d9:78:b1:60:6c:b6:ac:54:e0: af:a5:f5:fc:93:9e:03:06:4d:f5:7e:35:c9:a2:c8:39:a3:09: 2b:e7:61:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjUwNDAyMjMwNzA0WhcNMjUwNDA5MjMwNzA0WjAYMRYwFAYD VQQDEw02N2VkYzMxOC05YjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2Pb6jCTsRZroPNl4s8Ly7xD/Xa1dsftNQxIF7e3s1aBDWOaXzJABNhsfnFL jRAlXXWg4zHEimSTocnD+mQzHlzsct/Crn7kIQboJcv3LrfdPaAWEuzGs8P9vnK5 UpFJKt+5YuC3/jwlxqi3vRVk35mCryTlnW8Soh/5fBgsj8/JE7NpUdpoeSlhimI8 /UAMPYJyUeK0UO8odlTqtjP6ICkjWeIVqWK3Tx/Kv6VA+KvHQH9zeSKXE7pGsQd3 bNSaEH+xXog7uuu4oEvXoVDDi7Wj34cHoYRFKXKKQVwC/iDtwdCRDuOV3ymJcyZo c1tV1mjV3xvEsjP9IY7fMxGtSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErtPVwE nU60WHQZ9CGi8lne/H/DMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsGeYvq5c7rIYby+4cspnzGmtX5eVoTlMlaLr7NyPKlXU3MXId51AC 9nXj8JAP+31g+lL0nDmd5Kell7PePwhKJWReQRzxyGEGM1NMqOBl4NlTUn6uNqgS ROb0QF7IHwsxoDnX8PpmeJohTzCqPQKyMQ70czS1Xq3u456aA2gnBAFZao8wgYCn YauvRKthTfXrSa9k1UpmewR7m5b9xLeBExNU43nKh+inRLDBDdZ3GVIyJhFyMWU9 +kuME5WwwWWIpbBuAgd++xeQEYzomiPnsmfMFAjSk78wS0ngqpVdr/XZeLFgbLas VOCvpfX8k54DBk31fjXJosg5owkr52Ha -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:27 2025 by rpki-client