$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: qYnNGVRbiYqSpUeB0JAYF+I9urejFindJmBJ9qLvJyk= Subject key identifier: 14:FA:81:3F:D2:A5:6B:39:30:35:86:C8:8A:03:63:75:0D:3E:C4:26 Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: 0166 Signing time: Sat 29 Mar 2025 03:26:19 +0000 Manifest this update: Sat 29 Mar 2025 03:26:19 +0000 Manifest next update: Sat 05 Apr 2025 03:26:19 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: BfIIAKY1PPa1VvCG3bfaQlb7FdATAZiDfOS6aD0xB+s=) 2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: /4irTBpoiGzznlRheaSOxr6kHjZLLSh0iN5TT10J9KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8 Validity Not Before: Mar 29 03:26:19 2025 GMT Not After : Apr 5 03:26:19 2025 GMT Subject: CN=67e7685b-e361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:c1:cf:a4:25:b7:92:02:87:7a:e9:1c:df: 1a:2b:26:06:0c:4d:24:ae:e5:48:56:07:2f:6e:5a: 35:df:0b:c5:0e:6a:40:23:73:ff:89:d9:d9:e8:c7: b4:1c:45:f2:78:59:55:cb:8e:46:bb:3f:32:1d:21: 2d:b1:eb:72:57:65:95:f6:a1:e5:c0:1c:f0:68:0c: cd:93:c3:60:f3:7b:be:c9:1d:1e:00:79:c6:36:a4: ec:c3:8c:eb:96:99:e5:e9:4c:51:b8:8d:ee:36:02: 30:ef:31:29:ac:65:7a:fb:0b:0b:87:ef:33:aa:30: bf:7b:e9:ba:2f:c8:fa:14:c7:0d:14:63:ee:be:36: 56:ea:2d:83:77:48:82:5c:d1:19:5c:a1:94:e1:e5: c6:f9:e2:6b:65:f0:2c:c3:5d:8e:49:95:93:c2:5a: b9:b0:57:5d:ba:b9:5a:83:84:ee:2c:0f:00:26:84: b2:c3:67:1e:d4:8f:2e:3f:23:27:0e:b5:77:d8:a2: 43:db:aa:5f:41:c1:b2:92:1e:a3:98:3b:2a:28:10: f6:d3:be:98:f6:03:75:f4:ec:4a:97:89:a4:7b:1a: f3:67:90:35:b8:52:d0:b2:4d:4f:34:63:2a:f5:51: 20:c0:0d:f5:09:02:26:c2:06:86:55:23:cd:03:0d: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:81:3F:D2:A5:6B:39:30:35:86:C8:8A:03:63:75:0D:3E:C4:26 X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d9:f6:0f:c7:49:d5:95:ea:6c:70:03:c2:a8:a9:c1:4e:06: d2:20:5c:50:9b:59:c7:30:03:ce:e0:48:11:86:db:85:f7:8f: 84:e9:56:01:14:a8:e1:79:b6:8c:93:9c:a3:b7:00:d3:5a:09: d7:d9:b5:00:7d:cd:ac:b8:7d:30:6e:c4:6a:1e:77:47:03:b3: e9:36:44:d6:b4:bc:09:76:74:04:39:7f:b5:b3:b2:a0:42:57: cc:aa:a6:42:5e:53:16:73:5d:03:7e:72:4d:9f:7c:bf:de:a3: e4:2a:52:aa:9b:ae:bf:d3:91:f4:03:45:82:cd:a3:78:65:3c: 35:40:50:4f:18:0e:ad:ed:cf:c8:64:6e:66:30:66:75:5d:eb: 0b:ba:df:86:56:55:34:f0:69:52:3e:1f:e4:cf:a2:ee:31:c2: 2a:c0:81:e3:38:82:65:b9:66:b8:cc:b1:02:26:36:dd:70:db: 9c:72:e0:9e:61:35:8d:63:fe:db:0c:dc:59:1e:19:94:ac:15: 7b:3d:7d:f1:e9:ea:f6:39:e2:8b:cd:1a:93:f7:d7:31:e3:5b: b3:d5:e3:ac:41:9d:94:eb:b8:5d:f6:b4:d9:1f:ab:a9:ac:e5: fe:73:38:8d:bb:db:20:d3:22:30:60:7b:aa:3f:d6:9c:d9:d4: f1:18:e6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjUwMzI5MDMyNjE5WhcNMjUwNDA1MDMyNjE5WjAYMRYwFAYD VQQDEw02N2U3Njg1Yi1lMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QHBz6Qlt5ICh3rpHN8aKyYGDE0kruVIVgcvblo13wvFDmpAI3P/idnZ6Me0 HEXyeFlVy45Guz8yHSEtsetyV2WV9qHlwBzwaAzNk8Ng83u+yR0eAHnGNqTsw4zr lpnl6UxRuI3uNgIw7zEprGV6+wsLh+8zqjC/e+m6L8j6FMcNFGPuvjZW6i2Dd0iC XNEZXKGU4eXG+eJrZfAsw12OSZWTwlq5sFddurlag4TuLA8AJoSyw2ce1I8uPyMn DrV32KJD26pfQcGykh6jmDsqKBD2076Y9gN19OxKl4mkexrzZ5A1uFLQsk1PNGMq 9VEgwA31CQImwgaGVSPNAw3LXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT6gT/S pWs5MDWGyIoDY3UNPsQmMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2fYPx0nVlepscAPCqKnBTgbSIFxQm1nHMAPO4EgRhtuF94+E6VYB FKjhebaMk5yjtwDTWgnX2bUAfc2suH0wbsRqHndHA7PpNkTWtLwJdnQEOX+1s7Kg QlfMqqZCXlMWc10DfnJNn3y/3qPkKlKqm66/05H0A0WCzaN4ZTw1QFBPGA6t7c/I ZG5mMGZ1XesLut+GVlU08GlSPh/kz6LuMcIqwIHjOIJluWa4zLECJjbdcNuccuCe YTWNY/7bDNxZHhmUrBV7PX3x6er2OeKLzRqT99cx41uz1eOsQZ2U67hd9rTZH6up rOX+cziNu9sg0yIwYHuqP9ac2dTxGOZK -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:23 2025 by rpki-client