$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json) Hash identifier: it0aDzRmCNjxnPfSUvHLqK0CW2s0JcPD+rVM9M0bYMw= Subject key identifier: EB:4E:7C:1E:00:7A:FE:41:1F:3F:52:24:CB:48:18:B9:4F:08:27:72 Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft Manifest number: 0748 Signing time: Tue 08 Apr 2025 21:26:40 +0000 Manifest this update: Tue 08 Apr 2025 21:26:39 +0000 Manifest next update: Tue 15 Apr 2025 21:26:39 +0000 Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: qOXoEl6SygeuL2VgA5uKDjHhVfowCuippNY3Bi4yb9M=) 2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E Validity Not Before: Apr 8 21:26:39 2025 GMT Not After : Apr 15 21:26:39 2025 GMT Subject: CN=67f5948f-a6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:c0:8f:32:fd:b2:f1:75:a0:46:13:2b:28: 7a:3d:82:38:40:4e:a3:aa:c2:88:9d:fb:bb:c6:39: e6:97:d2:2c:b9:ee:71:ec:82:b0:99:59:58:94:af: 27:2d:5b:22:8f:df:7c:d8:72:62:58:cd:8f:0d:f1: 60:a7:1c:78:02:ad:15:77:ff:05:ee:0b:73:68:e4: 46:9a:99:92:a2:3b:a2:18:c1:1e:d2:7b:02:6d:7a: bd:39:50:88:bd:bb:55:80:91:f9:d0:ef:0d:71:6d: df:50:f6:eb:b0:3c:d6:0e:58:98:cc:36:4b:80:ff: bf:11:bc:33:f7:0d:bf:b7:d2:51:02:3f:f6:0d:52: 92:78:d0:4a:e0:65:e4:44:16:e8:22:fd:c4:59:23: 46:e1:0b:ea:5a:9e:69:c6:e7:37:d5:85:48:8a:d8: e8:05:28:3f:97:39:b9:bb:8d:fa:58:7a:24:1f:18: 7b:ba:b5:52:24:f6:2c:31:4b:fe:af:03:1b:f4:99: 25:94:44:7b:87:a7:c6:82:47:1d:ff:d3:f8:a6:f1: b6:19:c6:06:f8:1d:ce:d9:da:11:a4:f6:7e:9e:9f: 30:0d:22:e9:5c:f9:87:5e:01:06:82:0b:54:de:a4: 19:7a:67:9b:1a:64:24:c4:e1:08:91:eb:bc:25:7a: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4E:7C:1E:00:7A:FE:41:1F:3F:52:24:CB:48:18:B9:4F:08:27:72 X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:76:1c:97:8f:10:bf:94:d1:25:73:57:a8:85:73:38:29:0a: fe:68:dc:e6:a5:47:82:d9:97:84:8e:92:52:ba:43:16:c2:93: bd:46:62:16:3a:f8:31:50:2f:a8:92:63:cf:dc:24:6c:07:d0: c0:28:7a:08:0d:42:20:d8:74:1f:e2:be:9d:80:b6:3d:c8:1d: 36:bf:53:67:0b:5f:e8:0a:04:4e:4c:51:1c:fb:fd:24:27:6f: 4e:14:3a:27:3b:a4:98:ec:4f:ad:8c:c8:47:ad:9e:24:12:8b: 0c:36:4d:e2:aa:6d:b5:06:81:bd:7f:73:ba:fa:84:88:e3:9b: eb:db:5e:17:bf:68:1f:89:6d:3b:1d:3e:bd:8e:5b:31:7c:9f: 65:ec:21:be:c2:14:0a:9d:07:bd:74:36:38:80:e3:91:bb:73: db:ac:37:d2:0c:61:ee:4a:db:46:18:3b:07:8e:e0:51:ff:74: 2a:90:cd:c5:ea:a0:9d:2e:db:71:6f:58:1b:9b:ef:d4:48:b3: d4:ee:15:9c:ff:9d:00:05:1e:00:ce:88:6d:51:6c:af:49:e3: 33:b2:56:a3:f0:78:25:e9:b7:59:0e:b5:30:44:66:c8:f4:d5: db:89:99:07:5b:a5:92:03:97:9c:24:b5:bf:83:21:ad:5d:56: d2:6c:3b:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjUwNDA4MjEyNjM5WhcNMjUwNDE1MjEyNjM5WjAYMRYwFAYD VQQDEw02N2Y1OTQ4Zi1hNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEzAjzL9svF1oEYTKyh6PYI4QE6jqsKInfu7xjnml9Isue5x7IKwmVlYlK8n LVsij9982HJiWM2PDfFgpxx4Aq0Vd/8F7gtzaORGmpmSojuiGMEe0nsCbXq9OVCI vbtVgJH50O8NcW3fUPbrsDzWDliYzDZLgP+/Ebwz9w2/t9JRAj/2DVKSeNBK4GXk RBboIv3EWSNG4QvqWp5pxuc31YVIitjoBSg/lzm5u436WHokHxh7urVSJPYsMUv+ rwMb9JkllER7h6fGgkcd/9P4pvG2GcYG+B3O2doRpPZ+np8wDSLpXPmHXgEGggtU 3qQZemebGmQkxOEIkeu8JXpX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtOfB4A ev5BHz9SJMtIGLlPCCdyMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCndhyXjxC/lNElc1eohXM4KQr+aNzmpUeC2ZeEjpJSukMWwpO9RmIW OvgxUC+okmPP3CRsB9DAKHoIDUIg2HQf4r6dgLY9yB02v1NnC1/oCgROTFEc+/0k J29OFDonO6SY7E+tjMhHrZ4kEosMNk3iqm21BoG9f3O6+oSI45vr214Xv2gfiW07 HT69jlsxfJ9l7CG+whQKnQe9dDY4gOORu3PbrDfSDGHuSttGGDsHjuBR/3QqkM3F 6qCdLttxb1gbm+/USLPU7hWc/50ABR4AzohtUWyvSeMzslaj8Hgl6bdZDrUwRGbI 9NXbiZkHW6WSA5ecJLW/gyGtXVbSbDt/ -----END CERTIFICATE-----Generated at Thu Apr 10 20:28:11 2025 by rpki-client