$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: MCDB8hyNGG2TtbL/gu7TMiA52yDzIKT3Ii9xtLn0K6g= Subject key identifier: B4:99:28:96:69:A1:D8:D0:48:34:C5:BD:EE:09:C0:E0:D3:B7:62:34 Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 095D Signing time: Fri 04 Apr 2025 20:22:51 +0000 Manifest this update: Fri 04 Apr 2025 20:22:51 +0000 Manifest next update: Fri 11 Apr 2025 20:22:51 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: ayeUp4FVYd57xUnC1HaWT5nqO+kh7Fijo6ooxqQ4Vbw=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 60Yp+lMUoIhBshIDeToO24NmKvWSdMqkdEQgOkXf8BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75 Validity Not Before: Apr 4 20:22:51 2025 GMT Not After : Apr 11 20:22:51 2025 GMT Subject: CN=67f03f9b-eda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:87:86:6d:f1:42:f4:2d:f7:41:fa:f9:e2: 59:0c:66:59:fb:d9:d3:ca:be:4d:6d:14:69:31:56: 48:47:27:06:c2:d1:44:de:e7:3c:c4:4e:83:c4:cf: f4:a8:eb:ca:e1:e8:73:30:a7:fe:6f:8c:f8:4d:9f: e3:af:f6:a2:c8:ed:e7:39:ac:44:09:05:9b:2f:c2: f8:40:94:ed:62:6a:55:48:8c:c7:af:62:5f:31:c3: 40:a2:b7:08:63:ce:2c:dd:b7:db:64:28:4e:29:53: 56:cf:5d:84:47:b6:a8:b9:eb:c3:5e:13:74:9e:b5: 4f:26:e1:9f:aa:b5:cd:cc:b3:2b:b7:b7:f7:ea:31: 7a:40:07:92:7e:78:8b:a9:dd:b5:16:08:3d:dd:5a: 83:10:dd:e9:72:1d:a5:5c:35:6c:26:0a:b9:0e:0d: 05:bf:8d:ac:da:99:99:da:03:1a:e9:66:ca:3a:38: fe:0b:5d:97:d1:69:17:29:6f:0f:ee:e3:54:b7:1a: 02:5a:7a:ce:50:cd:2a:11:3b:89:8a:01:a2:04:83: 22:7d:a9:3a:dc:ab:27:c1:34:fc:79:c2:3c:80:99: 00:17:b8:90:97:c3:1d:70:0a:a1:d1:89:e2:63:ae: a6:c7:84:3b:e3:49:37:39:90:70:ac:72:66:75:89: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:28:96:69:A1:D8:D0:48:34:C5:BD:EE:09:C0:E0:D3:B7:62:34 X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8e:9a:92:89:28:eb:a1:65:0d:8e:cc:cb:eb:a4:66:44:89: 1f:1d:01:82:53:d9:3e:af:81:f6:35:ff:cf:e3:3d:e8:c6:32: 0a:07:6c:1f:9f:56:c5:15:b0:9a:d0:2a:c0:d4:f9:f8:1c:20: f7:bb:26:98:9d:f7:9d:13:76:2c:87:06:8e:f9:3b:ea:16:91: f1:88:c7:a6:1f:10:8a:c2:3b:88:8e:a1:e6:d7:17:57:da:a4: d2:80:0b:9e:42:94:be:74:6e:78:ed:45:93:61:f5:3c:26:39: f9:f3:28:12:d2:12:b8:31:e5:ff:e6:6c:d7:ce:19:fd:12:59: a0:e8:27:88:53:f5:90:32:21:ac:bc:c5:f4:85:b1:52:07:5b: bf:3b:5c:f6:d9:6d:25:82:0d:89:0d:ca:31:25:93:17:9a:dd: cf:3b:af:36:1d:a9:4a:a3:bc:47:08:a9:e8:af:00:1c:ac:71: 60:f5:08:fd:cf:a9:97:a7:13:e5:26:18:4f:32:31:59:a2:29: 5f:78:c4:b2:50:63:a3:e7:06:6d:dc:7f:a1:aa:cd:1b:86:d2: 62:b4:c1:b9:d4:8d:fc:ee:61:35:c7:9a:85:6b:1e:d9:66:6d: 44:51:a3:98:54:70:36:9b:24:42:79:ec:8b:2f:57:9f:ed:92: 2f:0e:34:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNDA0MjAyMjUxWhcNMjUwNDExMjAyMjUxWjAYMRYwFAYD VQQDEw02N2YwM2Y5Yi1lZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNGHhm3xQvQt90H6+eJZDGZZ+9nTyr5NbRRpMVZIRycGwtFE3uc8xE6DxM/0 qOvK4ehzMKf+b4z4TZ/jr/aiyO3nOaxECQWbL8L4QJTtYmpVSIzHr2JfMcNAorcI Y84s3bfbZChOKVNWz12ER7aouevDXhN0nrVPJuGfqrXNzLMrt7f36jF6QAeSfniL qd21Fgg93VqDEN3pch2lXDVsJgq5Dg0Fv42s2pmZ2gMa6WbKOjj+C12X0WkXKW8P 7uNUtxoCWnrOUM0qETuJigGiBIMifak63KsnwTT8ecI8gJkAF7iQl8MdcAqh0Yni Y66mx4Q740k3OZBwrHJmdYkAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSZKJZp odjQSDTFve4JwODTt2I0MB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtjpqSiSjroWUNjszL66RmRIkfHQGCU9k+r4H2Nf/P4z3oxjIKB2wf n1bFFbCa0CrA1Pn4HCD3uyaYnfedE3YshwaO+TvqFpHxiMemHxCKwjuIjqHm1xdX 2qTSgAueQpS+dG547UWTYfU8Jjn58ygS0hK4MeX/5mzXzhn9Elmg6CeIU/WQMiGs vMX0hbFSB1u/O1z22W0lgg2JDcoxJZMXmt3PO682HalKo7xHCKnorwAcrHFg9Qj9 z6mXpxPlJhhPMjFZoilfeMSyUGOj5wZt3H+hqs0bhtJitMG51I387mE1x5qFax7Z Zm1EUaOYVHA2myRCeeyLL1ef7ZIvDjRb -----END CERTIFICATE-----Generated at Sat Apr 5 10:32:11 2025 by rpki-client