$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft File: 1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json) Hash identifier: NL95DsgCV9VCPvM0Moe6iTOWqC5IvxehpBfu7ONM4KI= Subject key identifier: 00:99:59:97:D3:5D:09:CE:2D:9C:B0:77:2E:62:7A:95:64:9A:2F:50 Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft Manifest number: 01F4 Signing time: Thu 03 Apr 2025 02:04:58 +0000 Manifest this update: Thu 03 Apr 2025 02:04:57 +0000 Manifest next update: Thu 10 Apr 2025 02:04:57 +0000 Files and hashes: 1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: SlBkVq/Lc9HpbG0hLPTjt2GkUdiWU1ZCYtZw7I1n5Z0=) 2: 839EEF2C35F211ED97DF4D2EC4F9AE02.roa (hash: utbaFXvYsbMawkEsGIYiJOGznLub5CBtZ08YosxwrsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD27 Validity Not Before: Apr 3 02:04:57 2025 GMT Not After : Apr 10 02:04:57 2025 GMT Subject: CN=67edecc9-7771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:a2:8f:d6:a3:e1:de:ce:96:01:ba:57:71: f5:21:3c:ff:3f:13:84:e6:c1:d5:c8:70:0a:6e:fc: bd:df:50:c0:72:a6:fe:68:12:3d:ae:33:0d:06:4e: 08:aa:f0:e3:09:9a:ac:02:76:87:a5:5c:1e:67:14: e9:42:85:a0:99:f7:50:92:d0:04:80:34:fa:11:54: 18:eb:f2:9e:7f:3c:84:53:ad:53:1d:f6:b3:ad:ce: 62:05:a1:8a:b1:43:1b:97:9f:47:08:46:e5:7e:87: 6f:1a:0a:2c:55:88:d8:f0:3f:f9:c7:87:f6:e8:6a: 5f:08:3c:99:c1:17:7e:fe:70:ca:a4:3e:74:94:b6: 4a:74:06:67:61:13:68:d4:01:1d:59:8f:12:93:9c: 4c:80:f5:36:6d:0b:57:ac:7f:d3:d1:fd:b1:d7:c7: 71:bc:d2:c1:ff:a9:61:ab:62:b4:8d:a3:97:2f:69: c8:23:d3:31:51:cf:ea:14:76:75:d4:ef:ac:03:a9: 78:1f:81:e9:e7:18:65:cf:5c:0e:5b:e3:2b:fd:22: d5:b9:b8:0d:04:78:2d:4b:d3:9c:0f:ce:c0:f6:07: f0:71:bc:e2:3a:e3:00:f7:13:ed:61:1f:9a:ec:cb: ab:4c:d5:f2:88:47:57:30:96:89:f4:2d:7a:a2:88: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:59:97:D3:5D:09:CE:2D:9C:B0:77:2E:62:7A:95:64:9A:2F:50 X509v3 Authority Key Identifier: keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e0:9d:b2:c8:4b:ee:87:3b:82:f7:32:76:2e:b6:a5:fb:e2: 2e:9f:a7:85:c1:ee:54:56:51:f1:c6:a4:d1:7b:b8:2c:bb:da: 6d:20:db:46:6d:f0:9f:56:67:af:a7:da:4e:3f:e7:d6:b7:46: 43:19:e1:60:fb:5f:8d:78:cd:e8:eb:e7:05:2f:b9:11:89:f8: f8:5e:f0:ba:d4:26:ac:d8:8f:c4:70:97:20:ff:3f:94:19:7d: cd:65:9e:b3:b8:c6:8b:f8:77:09:18:64:89:eb:c6:a3:3a:e8: 2d:22:a6:f2:5b:75:71:fc:c9:29:77:8f:76:09:8b:7a:59:73: 00:23:d6:3e:2e:e2:cd:54:02:14:bd:34:ae:fd:5c:e6:b9:2e: 5e:24:6e:59:57:7a:e5:f2:e5:46:ed:a7:aa:d7:96:ba:fc:5d: 7d:54:0c:06:fc:c9:cf:de:7d:9f:81:32:01:69:34:8a:b1:e0: ab:e0:99:3a:48:21:69:9f:ee:20:c8:3b:8a:0b:61:52:9b:6d: cc:8e:3c:b6:8d:05:bc:fa:76:f8:a5:88:75:6a:95:68:53:1b: c7:f5:6b:58:ae:30:d3:b7:84:92:2f:77:0f:09:56:2b:7e:9b: a3:c7:f0:1e:09:07:29:92:81:f1:66:b9:42:69:1b:d7:91:5e: 71:36:8d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMjcxMTAvBgNVBAUTKEQ0NTJDNjdFRjY4NzQ0MzhBRkE5OTNBODRBRDBBQkMx ODUxNjkyMUIwHhcNMjUwNDAzMDIwNDU3WhcNMjUwNDEwMDIwNDU3WjAYMRYwFAYD VQQDEw02N2VkZWNjOS03NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01iij9aj4d7OlgG6V3H1ITz/PxOE5sHVyHAKbvy931DAcqb+aBI9rjMNBk4I qvDjCZqsAnaHpVweZxTpQoWgmfdQktAEgDT6EVQY6/KefzyEU61THfazrc5iBaGK sUMbl59HCEblfodvGgosVYjY8D/5x4f26GpfCDyZwRd+/nDKpD50lLZKdAZnYRNo 1AEdWY8Sk5xMgPU2bQtXrH/T0f2x18dxvNLB/6lhq2K0jaOXL2nII9MxUc/qFHZ1 1O+sA6l4H4Hp5xhlz1wOW+Mr/SLVubgNBHgtS9OcD87A9gfwcbziOuMA9xPtYR+a 7MurTNXyiEdXMJaJ9C16ooj/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACZWZfT XQnOLZywdy5iepVkmi9QMB8GA1UdIwQYMBaAFNRSxn72h0Q4r6mTqErQq8GFFpIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQyNy9BODBEQjM4MjM1 RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJEaXZxWk9vU3RDcndZVVdr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGTEdmdmFIUkRpdnFaT29TdENyd1lVV2tocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQyNy9BODBEQjM4MjM1RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJE aXZxWk9vU3RDcndZVVdraHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe4J2yyEvuhzuC9zJ2Lral++Iun6eFwe5UVlHxxqTRe7gsu9ptINtG bfCfVmevp9pOP+fWt0ZDGeFg+1+NeM3o6+cFL7kRifj4XvC61Cas2I/EcJcg/z+U GX3NZZ6zuMaL+HcJGGSJ68ajOugtIqbyW3Vx/Mkpd492CYt6WXMAI9Y+LuLNVAIU vTSu/VzmuS5eJG5ZV3rl8uVG7aeq15a6/F19VAwG/MnP3n2fgTIBaTSKseCr4Jk6 SCFpn+4gyDuKC2FSm23Mjjy2jQW8+nb4pYh1apVoUxvH9WtYrjDTt4SSL3cPCVYr fpujx/AeCQcpkoHxZrlCaRvXkV5xNo1w -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:46 2025 by rpki-client