$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: rkrMjIpl+BonOMn7Y7haKPsLHNtlgrOu8H3VE1RjZos= Subject key identifier: C1:6B:59:99:78:C8:ED:CD:30:60:C8:4E:8D:4E:A7:27:23:23:2D:69 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 109D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 108E Signing time: Fri 04 Apr 2025 17:26:07 +0000 Manifest this update: Fri 04 Apr 2025 17:26:06 +0000 Manifest next update: Fri 11 Apr 2025 17:26:06 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: /1zIzxJ5rdjziO6dI8Kz/ICehnG5Ko1OfqG6oc9uLDE=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: ibzIHQiS71/cKL/AN17g76C8mULHtazMynL8XoJHu8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28 Validity Not Before: Apr 4 17:26:06 2025 GMT Not After : Apr 11 17:26:06 2025 GMT Subject: CN=67f0162e-264e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:26:24:a1:b4:21:21:91:42:27:f6:aa:4f: f6:f9:ba:6f:0e:f3:d8:ee:2d:b1:a6:51:f2:ea:43: 09:04:7c:5a:e6:c6:14:00:7b:f9:fb:3e:6e:b0:74: a2:b2:a9:96:e6:7c:eb:16:fc:07:f6:cb:97:63:09: 96:02:e6:e9:0d:7c:dd:05:67:1c:21:72:2e:d0:32: be:8f:1a:78:4f:a7:9f:5f:8b:27:2f:60:7f:7c:3d: 11:2c:88:6b:1b:a8:5a:cb:28:55:bc:12:2e:0d:6e: 05:20:ad:4c:45:5b:9a:b4:80:99:ea:94:c2:52:f5: 0e:55:4f:5f:6f:6b:9f:25:ee:35:7a:b3:2d:80:f9: f9:1e:9a:03:a1:ae:94:38:56:82:c6:16:cf:89:7b: 75:27:6f:03:00:33:b1:f5:af:80:f2:d0:08:02:6b: 93:aa:e0:94:65:28:69:a1:ab:02:a9:6a:63:f9:92: c2:54:ab:92:bc:9b:c5:c7:15:1e:38:0a:7e:5b:3d: 69:b9:b9:68:e2:dc:8d:bb:0c:9d:57:4b:11:26:8e: 99:71:70:91:37:fc:6e:06:2c:76:b8:a4:7c:c9:d8: 13:72:61:21:18:b0:2a:25:10:a3:3d:ef:8a:02:a1: ac:ae:9f:da:3a:d5:20:0e:6b:06:b7:32:23:de:12: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:59:99:78:C8:ED:CD:30:60:C8:4E:8D:4E:A7:27:23:23:2D:69 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:26:a3:58:83:42:e8:fc:76:8e:fa:1a:50:93:f8:f4:2a: 1c:84:97:90:5d:87:49:50:00:a9:50:39:a9:e5:09:e9:e4:ea: e4:bb:e2:0b:51:4a:e8:e9:9a:22:f9:f5:3c:bc:64:27:34:80: 02:aa:5d:e4:dc:7d:3e:88:e4:fd:82:5e:78:41:5e:96:b8:ee: 98:1d:eb:fd:94:57:c9:38:81:a4:da:ca:e8:21:8d:92:c7:ee: 52:41:12:d5:33:14:65:39:86:68:cb:14:5d:64:1e:54:4e:ad: 64:1c:7a:cb:75:8d:cb:96:6e:e2:59:b6:ad:7f:31:01:9a:e6: 16:47:13:e6:0b:82:7a:3d:9d:5b:3b:e0:23:bc:40:c1:d5:15: 7b:a4:12:3c:af:d6:98:fd:d0:8f:fd:eb:d3:10:88:67:1a:57: 57:59:1c:7a:db:25:35:42:ca:85:35:e8:54:22:d8:4d:b9:d6: 79:69:29:92:c7:23:90:6d:ec:e5:2d:72:98:64:48:24:36:84: 4b:57:b8:f3:a8:36:a4:18:71:53:ba:fd:05:15:e9:e1:ec:c9: 79:de:1b:2f:a6:24:cd:41:a3:c0:fe:f3:67:65:63:e5:4b:f1: cc:fd:34:13:39:46:0a:a4:94:01:fb:41:6a:11:dd:9a:6f:47: aa:42:d3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUwNDA0MTcyNjA2WhcNMjUwNDExMTcyNjA2WjAYMRYwFAYD VQQDEw02N2YwMTYyZS0yNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HsmJKG0ISGRQif2qk/2+bpvDvPY7i2xplHy6kMJBHxa5sYUAHv5+z5usHSi sqmW5nzrFvwH9suXYwmWAubpDXzdBWccIXIu0DK+jxp4T6efX4snL2B/fD0RLIhr G6hayyhVvBIuDW4FIK1MRVuatICZ6pTCUvUOVU9fb2ufJe41erMtgPn5HpoDoa6U OFaCxhbPiXt1J28DADOx9a+A8tAIAmuTquCUZShpoasCqWpj+ZLCVKuSvJvFxxUe OAp+Wz1publo4tyNuwydV0sRJo6ZcXCRN/xuBix2uKR8ydgTcmEhGLAqJRCjPe+K AqGsrp/aOtUgDmsGtzIj3hKgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFrWZl4 yO3NMGDITo1OpycjIy1pMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywCajWINC6Px2jvoaUJP49CochJeQXYdJUACpUDmp5Qnp5Orku+IL UUro6Zoi+fU8vGQnNIACql3k3H0+iOT9gl54QV6WuO6YHev9lFfJOIGk2sroIY2S x+5SQRLVMxRlOYZoyxRdZB5UTq1kHHrLdY3Llm7iWbatfzEBmuYWRxPmC4J6PZ1b O+AjvEDB1RV7pBI8r9aY/dCP/evTEIhnGldXWRx62yU1QsqFNehUIthNudZ5aSmS xyOQbezlLXKYZEgkNoRLV7jzqDakGHFTuv0FFenh7Ml53hsvpiTNQaPA/vNnZWPl S/HM/TQTOUYKpJQB+0FqEd2ab0eqQtMi -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:03 2025 by rpki-client