$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: Nq0BYoYCCRVBovB1x7OfDsl70Lv4zyjXi+8URIVuGUU= Subject key identifier: 08:F7:7B:95:92:BF:62:D8:0F:A8:54:63:45:B5:B7:17:0A:9D:3B:0C Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C28 Signing time: Wed 02 Apr 2025 18:28:23 +0000 Manifest this update: Wed 02 Apr 2025 18:28:23 +0000 Manifest next update: Wed 09 Apr 2025 18:28:23 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: HdkUqcjd3Tqt6UkTYHK2XluSKhnOqeqT40umowHKEIQ=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598 Validity Not Before: Apr 2 18:28:23 2025 GMT Not After : Apr 9 18:28:23 2025 GMT Subject: CN=67ed81c7-7902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:93:f3:b1:b8:bd:a0:e1:da:d5:bf:dc:b8: 75:d8:77:36:54:ca:61:9d:f8:a8:4b:cd:e4:9c:37: c6:a0:40:d3:0e:92:27:13:23:73:d2:cf:b4:3e:69: 2a:61:ce:b0:ea:0c:43:95:56:49:4d:4d:f4:50:e9: 5d:ce:de:3c:a5:31:93:89:49:48:24:6d:06:a0:3f: 32:94:b6:0b:79:2f:01:ba:a4:80:a8:c1:37:9b:18: 5f:73:a5:c4:b4:c7:dc:c7:0e:6d:35:78:67:46:c2: 03:95:61:97:e1:5c:2d:e2:53:6e:d7:09:1f:31:7c: bd:b8:0d:36:26:2c:73:7b:49:d2:4d:37:c5:44:e1: 36:88:11:cc:65:7f:64:d3:c4:ce:82:bc:72:14:7a: b3:e1:0a:04:37:02:15:16:63:9b:18:94:db:ce:35: a1:90:70:2e:60:f3:4f:ac:3f:54:bb:63:3c:bd:c9: 8d:d9:4e:e7:cf:22:82:f9:59:fd:29:a6:e2:f5:a0: 3c:a4:18:a7:64:5b:3c:e1:31:3d:52:7b:d2:3f:7c: 23:6c:b5:8e:23:cf:59:8f:25:da:1a:f3:49:26:5e: 98:13:7b:a5:4b:24:37:ea:49:a4:ba:96:be:8a:1a: d4:5d:4d:6c:bb:36:24:17:f9:fb:a8:26:92:c7:15: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:7B:95:92:BF:62:D8:0F:A8:54:63:45:B5:B7:17:0A:9D:3B:0C X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:a1:76:2a:6e:b9:1d:24:c8:34:08:ce:21:20:6c:5f:3e:35: d4:4a:e0:e4:70:44:20:3a:c2:60:fc:39:cd:e0:f1:c6:68:af: 07:70:a9:fa:fe:1d:02:38:85:25:f9:a0:06:82:8f:65:ec:a4: 53:5a:05:8c:01:7d:45:e0:4e:20:2b:be:f3:51:88:4d:f7:64: 68:56:d5:2a:5d:2a:b6:ae:b8:85:12:c7:0c:44:7a:b0:1c:1e: 66:4f:b7:1d:f0:3b:7e:6b:6b:16:cc:a3:fc:8b:3b:12:fb:e6: a3:5d:17:0f:9d:21:2e:af:9f:49:6c:5b:1c:af:84:ed:50:89: 20:cd:94:73:1b:2e:15:2f:28:ec:83:b0:4d:27:38:d9:0d:f0: 4f:6d:66:b6:c8:b1:74:0d:7a:cd:e5:c6:8b:58:73:70:40:75: 55:44:c9:b8:e3:bf:15:21:ee:c3:dc:db:05:ea:13:fb:84:86: 63:b4:79:12:b5:cd:71:cb:31:d3:07:7c:c8:56:14:29:9b:6f: 1a:90:67:6c:ad:31:36:9f:5e:b8:2a:c2:83:a7:89:4c:d4:d5: 9c:03:a0:ff:f8:23:cb:08:5f:d9:18:e6:71:1e:7f:5e:48:b5: bd:7b:66:dc:38:c6:b0:1c:68:02:de:7c:94:af:a0:6e:6b:80: fa:cd:e6:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNDAyMTgyODIzWhcNMjUwNDA5MTgyODIzWjAYMRYwFAYD VQQDEw02N2VkODFjNy03OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutmT87G4vaDh2tW/3Lh12Hc2VMphnfioS83knDfGoEDTDpInEyNz0s+0Pmkq Yc6w6gxDlVZJTU30UOldzt48pTGTiUlIJG0GoD8ylLYLeS8BuqSAqME3mxhfc6XE tMfcxw5tNXhnRsIDlWGX4Vwt4lNu1wkfMXy9uA02Jixze0nSTTfFROE2iBHMZX9k 08TOgrxyFHqz4QoENwIVFmObGJTbzjWhkHAuYPNPrD9Uu2M8vcmN2U7nzyKC+Vn9 Kabi9aA8pBinZFs84TE9UnvSP3wjbLWOI89ZjyXaGvNJJl6YE3ulSyQ36kmkupa+ ihrUXU1suzYkF/n7qCaSxxUHqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj3e5WS v2LYD6hUY0W1txcKnTsMMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQoXYqbrkdJMg0CM4hIGxfPjXUSuDkcEQgOsJg/DnN4PHGaK8HcKn6 /h0COIUl+aAGgo9l7KRTWgWMAX1F4E4gK77zUYhN92RoVtUqXSq2rriFEscMRHqw HB5mT7cd8Dt+a2sWzKP8izsS++ajXRcPnSEur59JbFscr4TtUIkgzZRzGy4VLyjs g7BNJzjZDfBPbWa2yLF0DXrN5caLWHNwQHVVRMm4478VIe7D3NsF6hP7hIZjtHkS tc1xyzHTB3zIVhQpm28akGdsrTE2n164KsKDp4lM1NWcA6D/+CPLCF/ZGOZxHn9e SLW9e2bcOMawHGgC3nyUr6Bua4D6zeYD -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:00 2025 by rpki-client