$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: 6YezQdigewUSEtrNZVB9nrkCPJ7blIc8b658z0B8Ng8= Subject key identifier: 2C:BC:D6:97:E7:C2:BD:9E:FB:C1:4F:2F:7C:1A:93:FD:EA:65:D7:9C Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1EFE Signing time: Fri 04 Apr 2025 16:04:29 +0000 Manifest this update: Fri 04 Apr 2025 16:04:28 +0000 Manifest next update: Fri 11 Apr 2025 16:04:28 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: rL8izf8i8TYHQkTzWyQV2sK8uLagDCZuy11bo6fSnPA=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: JPz0ZzHWwFSSfWmaNplpCU4QznJ0G9YXZ66T9hNIZ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7945 (0x1f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F Validity Not Before: Apr 4 16:04:28 2025 GMT Not After : Apr 11 16:04:28 2025 GMT Subject: CN=67f0030d-0c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:81:2e:d8:54:1e:2c:a4:d2:04:c0:28:0f: 61:3f:73:a5:87:26:22:c0:dc:e2:01:19:e3:69:c1: 6e:07:f5:18:43:1f:da:f5:f1:48:b1:d4:7d:6b:ac: d2:27:7c:2e:1a:cf:b3:55:2c:62:07:8f:b7:9a:f5: d2:0b:c7:ea:2f:46:fe:d6:c2:60:8a:0d:79:0b:19: 28:d5:0a:24:37:1e:c9:cd:74:3c:64:d5:6d:90:9e: 5e:96:fb:b9:92:75:47:e7:2b:cb:3b:9b:2e:c8:42: 3f:b6:18:f8:c7:4d:88:07:dc:16:ae:d6:32:e9:64: 02:7c:f3:05:c2:e2:bb:f2:c4:5d:b8:ec:29:28:a3: f3:e8:1f:48:01:18:0c:d1:42:e0:e4:2c:12:5d:89: 19:d7:40:0c:58:28:c7:a0:c2:7b:5a:32:b8:dd:7c: bb:e6:46:0c:10:28:35:5e:3f:a9:df:f1:e6:d8:ec: b6:87:8f:d2:ad:3e:b9:4b:98:ad:b7:07:f3:46:28: ed:f2:7d:de:de:4e:b5:9e:30:fc:b9:24:02:37:3d: 65:a4:40:f3:28:8c:1d:e6:a9:86:3f:98:66:36:5b: 97:08:0e:34:74:56:9b:1e:3e:a8:0e:fc:6d:a3:5a: b0:ff:79:a5:66:3d:9b:40:ca:cb:6d:0d:5d:29:44: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:D6:97:E7:C2:BD:9E:FB:C1:4F:2F:7C:1A:93:FD:EA:65:D7:9C X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:be:7d:4e:85:ff:ba:dc:3d:16:3b:3e:8b:21:74:d2:b0:00: 35:ea:6b:3b:c1:f1:89:d9:da:51:93:9c:68:c4:a5:2f:de:8c: ef:5b:ee:10:30:78:8f:67:36:0a:df:b5:6c:71:c0:e3:fd:52: 24:59:9d:c7:93:96:b7:0f:4d:08:56:bc:5e:f0:0b:3c:e6:34: 98:c6:f0:e1:c8:f1:0c:35:66:94:e8:0f:a3:cb:84:28:08:d4: 4a:49:f8:08:a9:c6:b9:b3:0c:16:bc:f5:f2:ee:e5:f9:d4:45: d3:61:16:92:7b:48:65:e3:99:a2:b1:fa:d4:e0:d3:d5:c3:17: a0:4a:fb:45:23:0c:2f:e5:5b:92:ec:3b:e4:cb:24:80:96:2f: e0:e6:ec:67:1f:a2:c0:c7:9f:f8:58:f7:fa:84:24:4c:00:ac: 50:5f:0f:c7:d1:ab:a8:61:95:fb:c2:05:2e:6f:74:65:2c:2c: ac:4c:18:5e:49:65:fb:e4:d9:8d:23:5d:e2:4a:4a:31:70:67: c9:aa:32:ef:6c:b1:be:e4:81:17:dd:5a:be:ac:8b:5f:70:26: 34:08:d8:4b:44:81:a2:f1:48:5a:65:1e:71:19:f6:57:35:a6: f4:e8:fd:a1:a4:0a:a5:08:f2:17:0b:7f:48:8f:ec:6d:95:3d: e0:d1:3e:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwNDA0MTYwNDI4WhcNMjUwNDExMTYwNDI4WjAYMRYwFAYD VQQDEw02N2YwMDMwZC0wYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cyBLthUHiyk0gTAKA9hP3OlhyYiwNziARnjacFuB/UYQx/a9fFIsdR9a6zS J3wuGs+zVSxiB4+3mvXSC8fqL0b+1sJgig15Cxko1QokNx7JzXQ8ZNVtkJ5elvu5 knVH5yvLO5suyEI/thj4x02IB9wWrtYy6WQCfPMFwuK78sRduOwpKKPz6B9IARgM 0ULg5CwSXYkZ10AMWCjHoMJ7WjK43Xy75kYMECg1Xj+p3/Hm2Oy2h4/SrT65S5it twfzRijt8n3e3k61njD8uSQCNz1lpEDzKIwd5qmGP5hmNluXCA40dFabHj6oDvxt o1qw/3mlZj2bQMrLbQ1dKUT2swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCy81pfn wr2e+8FPL3wak/3qZdecMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnvn1Ohf+63D0WOz6LIXTSsAA16ms7wfGJ2dpRk5xoxKUv3ozvW+4Q MHiPZzYK37VsccDj/VIkWZ3Hk5a3D00IVrxe8As85jSYxvDhyPEMNWaU6A+jy4Qo CNRKSfgIqca5swwWvPXy7uX51EXTYRaSe0hl45misfrU4NPVwxegSvtFIwwv5VuS 7DvkyySAli/g5uxnH6LAx5/4WPf6hCRMAKxQXw/H0auoYZX7wgUub3RlLCysTBhe SWX75NmNI13iSkoxcGfJqjLvbLG+5IEX3Vq+rItfcCY0CNhLRIGi8UhaZR5xGfZX Nab06P2hpAqlCPIXC39Ij+xtlT3g0T6s -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:54 2025 by rpki-client