$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json) Hash identifier: fYCmuwGwJPnP5TZ1PTQMJM/IKHxHzL6ZL+BLUFp8o+Q= Subject key identifier: 19:18:94:C0:EA:EC:4C:44:98:90:C6:90:03:66:87:4B:C0:8E:5D:D9 Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft Manifest number: 0618 Signing time: Wed 02 Apr 2025 22:44:18 +0000 Manifest this update: Wed 02 Apr 2025 22:44:18 +0000 Manifest next update: Wed 09 Apr 2025 22:44:18 +0000 Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: wGBFqUTOK+KgUDsWUWZpNDZRbovypILy4And2g0SCJY=) 2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=) 3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF83 Validity Not Before: Apr 2 22:44:18 2025 GMT Not After : Apr 9 22:44:18 2025 GMT Subject: CN=67edbdc2-06ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:d3:7b:f5:33:a3:3d:ce:9c:dc:c3:12:3b: d2:2c:77:a3:3a:9e:9b:ec:b1:8a:de:d9:da:c6:5a: c9:a4:39:75:19:bc:56:fe:34:7f:d7:af:67:e3:0f: bf:d2:52:ce:d8:ef:6c:b5:b4:9f:73:18:48:58:22: d0:41:7c:6b:19:8e:4d:4a:13:c2:b0:87:74:57:3e: 2e:45:7f:cf:98:15:cb:df:1f:45:1f:02:63:8e:7a: ef:2e:10:39:ae:57:be:7f:f1:dc:1d:29:e7:8d:64: 1c:cd:d2:82:30:b2:1d:2c:c5:71:f6:2d:de:7f:17: 64:d3:54:f6:9f:8b:23:ea:59:ff:fa:d0:79:ff:7f: fe:f7:4e:2d:7f:9f:df:3d:02:cc:f7:fd:0d:3a:90: bc:a2:37:30:a5:7d:0a:16:bc:8c:54:8d:5c:d9:49: 17:1e:f1:2d:2f:01:f3:2b:ce:f9:12:b7:fe:3c:c6: 71:78:8c:4f:a7:f2:8b:ef:60:16:31:2b:c4:bd:d2: b2:7e:21:73:f0:04:4e:20:2b:c0:3e:1a:2d:03:f9: b7:4e:8d:2e:d5:40:02:db:8c:ea:18:c2:4f:70:bb: f3:ea:c5:cf:eb:5a:8b:65:22:b6:80:46:13:77:95: ad:e3:ba:db:5b:22:dd:c9:4c:89:4d:8e:00:95:e5: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:18:94:C0:EA:EC:4C:44:98:90:C6:90:03:66:87:4B:C0:8E:5D:D9 X509v3 Authority Key Identifier: keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:2a:3a:b1:ad:5d:41:93:f5:26:cf:d1:01:99:04:bc:22: 13:52:25:d3:8e:8b:9e:be:19:d7:d8:72:e3:b5:67:4c:3f:27: 3b:f6:2c:19:b3:2f:63:6b:f6:98:31:72:86:02:5c:9a:de:be: 5b:0c:b1:26:d3:1f:c0:13:9a:7c:81:8b:53:ee:41:4b:8c:5f: ca:62:cb:9c:f4:3a:bc:3e:d5:5b:0f:42:50:50:20:5f:16:b8: 1d:bc:e3:03:d4:65:f1:66:82:29:a9:17:a1:a9:bf:93:3d:80: f7:70:c8:fe:f9:67:ee:bd:b8:34:93:21:7c:b5:1d:3b:bc:57: 6a:e4:3b:b7:bb:89:fb:55:8d:d2:1d:2d:83:e0:24:9b:82:1e: ca:1b:86:f6:63:86:c8:ac:7d:04:fc:8c:98:a5:20:6c:88:29: 27:4a:5b:10:4f:28:69:eb:02:0f:09:b1:36:e0:0a:48:05:65: 6c:98:7a:51:cd:84:a3:f6:c3:ae:78:4e:ac:2f:27:32:10:4a: 05:34:34:67:32:4b:de:a8:21:cc:1e:25:d8:ff:87:96:86:b2: 89:b0:74:be:74:4e:91:2c:ab:af:29:2a:d0:25:76:02:d7:dc: 43:44:8c:4a:64:d7:c5:42:a8:3a:aa:0c:9a:69:65:6b:5f:f4: 53:e3:b4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz M0E3OTk2MDkwHhcNMjUwNDAyMjI0NDE4WhcNMjUwNDA5MjI0NDE4WjAYMRYwFAYD VQQDEw02N2VkYmRjMi0wNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2nTe/Uzoz3OnNzDEjvSLHejOp6b7LGK3tnaxlrJpDl1GbxW/jR/169n4w+/ 0lLO2O9stbSfcxhIWCLQQXxrGY5NShPCsId0Vz4uRX/PmBXL3x9FHwJjjnrvLhA5 rle+f/HcHSnnjWQczdKCMLIdLMVx9i3efxdk01T2n4sj6ln/+tB5/3/+904tf5/f PQLM9/0NOpC8ojcwpX0KFryMVI1c2UkXHvEtLwHzK875Erf+PMZxeIxPp/KL72AW MSvEvdKyfiFz8AROICvAPhotA/m3To0u1UAC24zqGMJPcLvz6sXP61qLZSK2gEYT d5Wt47rbWyLdyUyJTY4AleU5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkYlMDq 7ExEmJDGkANmh0vAjl3ZMB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0Y4My9BMzk5NjEwNjkxMjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpL V1RuWExxX2RPa2N6cDVsZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRtCo6sa1dQZP1Js/RAZkEvCITUiXTjouevhnX2HLjtWdMPyc79iwZ sy9ja/aYMXKGAlya3r5bDLEm0x/AE5p8gYtT7kFLjF/KYsuc9Dq8PtVbD0JQUCBf FrgdvOMD1GXxZoIpqRehqb+TPYD3cMj++Wfuvbg0kyF8tR07vFdq5Du3u4n7VY3S HS2D4CSbgh7KG4b2Y4bIrH0E/IyYpSBsiCknSlsQTyhp6wIPCbE24ApIBWVsmHpR zYSj9sOueE6sLycyEEoFNDRnMkveqCHMHiXY/4eWhrKJsHS+dE6RLKuvKSrQJXYC 19xDRIxKZNfFQqg6qgyaaWVrX/RT47QJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:07 2025 by rpki-client