$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: XkezAk5iUssFr42F37MCHwxK5dltht4RoVQqjOf3Fbs= Subject key identifier: 94:EE:AA:B9:BA:1F:FE:04:58:38:06:54:A1:FA:C7:7B:AB:2B:DF:18 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C36 Signing time: Fri 04 Apr 2025 18:31:40 +0000 Manifest this update: Fri 04 Apr 2025 18:31:39 +0000 Manifest next update: Fri 11 Apr 2025 18:31:39 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: 8Ki9Ndu5c4NhB0nBqLngSo2U1NrdkAn4pxxGNmx2oKI=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A Validity Not Before: Apr 4 18:31:39 2025 GMT Not After : Apr 11 18:31:39 2025 GMT Subject: CN=67f0258c-6998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:d1:e4:36:d5:9f:c7:81:ea:11:5e:8f:da: ec:08:64:0e:c8:8d:f0:d3:da:5f:0a:cd:f0:b8:14: 41:0b:31:0a:5a:a8:98:b7:d7:c6:30:07:61:5e:db: a6:43:09:69:a8:47:e2:30:77:a5:b4:0e:09:cd:9a: b5:7d:50:f4:87:ed:fc:fb:d7:cd:b4:95:99:64:61: 45:28:5f:af:6a:6e:86:29:ab:00:e0:91:76:a6:f2: 07:98:90:78:3b:48:97:6c:df:f5:60:c3:81:31:fe: e3:d3:5c:30:ed:11:02:a1:28:f2:39:8e:09:eb:4e: 30:88:23:e3:0f:b0:a5:9e:7b:e7:5a:9b:c9:f4:5a: 6b:07:3e:a3:b3:a9:91:d2:01:25:58:dc:80:34:a9: dd:43:b4:2f:06:ed:54:6f:91:48:79:5e:91:5e:d2: 1f:8e:a4:6c:6b:a3:e1:fb:24:68:66:2d:3c:b1:ea: 61:0d:68:b6:59:b1:4f:a3:05:2b:d7:54:7d:9a:e4: db:c7:78:b8:68:cd:88:c4:04:52:1f:e9:8d:19:ec: 7f:da:df:e6:2c:f6:04:7c:35:4f:67:33:43:62:7c: e6:91:e3:b5:55:5d:cd:91:08:66:95:74:0a:5a:f9: 16:c1:3f:80:d3:c8:47:45:a1:c3:52:74:14:c5:73: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EE:AA:B9:BA:1F:FE:04:58:38:06:54:A1:FA:C7:7B:AB:2B:DF:18 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5c:e1:09:ad:bf:c6:5d:3a:b7:8f:d3:52:82:ad:df:fb:83: c4:ed:9b:28:15:63:70:fe:87:13:1b:41:52:5c:a7:29:b6:87: 56:18:0b:5d:90:90:f3:04:de:62:74:0c:4e:ed:1c:bd:e4:b0: 64:a3:9e:ae:fa:69:4f:95:5e:e2:a1:75:e7:95:5b:f2:14:86: 87:1a:f7:1d:24:9d:38:42:8d:a6:8d:3d:15:7b:14:1c:88:59: 4d:9c:8e:0e:94:5a:5c:39:fc:42:e8:c5:ad:f3:0c:20:a6:0e: c5:03:86:f8:93:8a:90:86:8e:83:9a:b7:42:37:88:d0:f2:f6: a0:d8:97:48:af:70:21:1f:98:bd:c0:eb:db:29:fa:d5:f6:6f: 95:c9:e2:22:23:94:54:88:18:f5:3a:e6:97:13:7c:b8:8a:bc: 74:a6:21:38:7a:31:d6:ee:47:03:47:54:68:2f:1f:81:dc:17: 01:52:5c:76:c3:0d:3e:3f:dc:09:10:f4:a4:f1:cd:9d:e8:cc: 93:56:fe:98:5b:f4:a7:f6:c0:f2:32:00:57:32:01:03:34:88: b1:62:30:99:f6:ff:9a:d2:5d:d2:46:eb:fd:18:ac:e3:1f:6f: 4e:85:37:ad:c9:84:b3:c4:eb:4d:8b:27:54:ca:6c:eb:2d:e8: e4:45:df:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwNDA0MTgzMTM5WhcNMjUwNDExMTgzMTM5WjAYMRYwFAYD VQQDEw02N2YwMjU4Yy02OTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkDR5DbVn8eB6hFej9rsCGQOyI3w09pfCs3wuBRBCzEKWqiYt9fGMAdhXtum QwlpqEfiMHeltA4JzZq1fVD0h+38+9fNtJWZZGFFKF+vam6GKasA4JF2pvIHmJB4 O0iXbN/1YMOBMf7j01ww7RECoSjyOY4J604wiCPjD7ClnnvnWpvJ9FprBz6js6mR 0gElWNyANKndQ7QvBu1Ub5FIeV6RXtIfjqRsa6Ph+yRoZi08sephDWi2WbFPowUr 11R9muTbx3i4aM2IxARSH+mNGex/2t/mLPYEfDVPZzNDYnzmkeO1VV3NkQhmlXQK WvkWwT+A08hHRaHDUnQUxXMT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTuqrm6 H/4EWDgGVKH6x3urK98YMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZXOEJrb/GXTq3j9NSgq3f+4PE7ZsoFWNw/ocTG0FSXKcptodWGAtd kJDzBN5idAxO7Ry95LBko56u+mlPlV7ioXXnlVvyFIaHGvcdJJ04Qo2mjT0VexQc iFlNnI4OlFpcOfxC6MWt8wwgpg7FA4b4k4qQho6DmrdCN4jQ8vag2JdIr3AhH5i9 wOvbKfrV9m+VyeIiI5RUiBj1OuaXE3y4irx0piE4ejHW7kcDR1RoLx+B3BcBUlx2 ww0+P9wJEPSk8c2d6MyTVv6YW/Sn9sDyMgBXMgEDNIixYjCZ9v+a0l3SRuv9GKzj H29OhTetyYSzxOtNiydUymzrLejkRd9G -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:19 2025 by rpki-client