$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json) Hash identifier: 3G2FjbXfwLCjkjaL8lGfTj/oxmy4qWBvD22w9m7h83g= Subject key identifier: 45:5E:79:94:9C:5A:70:25:57:B6:69:0F:1F:11:9B:84:4B:65:FF:3D Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft Manifest number: 3CA3 Signing time: Fri 04 Apr 2025 15:15:49 +0000 Manifest this update: Fri 04 Apr 2025 15:15:48 +0000 Manifest next update: Fri 11 Apr 2025 15:15:48 +0000 Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: AkSZOuxSmwKqxzHNm1rMRF7px7d+PjIfgm82P+jP5Rs=) 2: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: USZSkKOpvRstAy6bGHIvH9iPNrUuZ7zTpn1HoGAIWzs=) 3: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: 7XScGt+5Xh4t4lRJpA3T6ij1h1E2NJKftqBX/YrH1oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB Validity Not Before: Apr 4 15:15:48 2025 GMT Not After : Apr 11 15:15:48 2025 GMT Subject: CN=67eff7a5-cb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:9b:07:09:91:fd:86:24:c6:78:71:5e:f5: 93:0d:6d:17:42:0b:ba:6b:94:e0:27:89:18:af:a6: b5:c7:43:e4:1e:c0:93:8c:34:3d:12:a2:28:93:c3: c0:58:39:32:6f:1e:bc:09:ee:fd:61:c7:51:e3:04: ae:4b:08:09:b3:3c:ba:11:6c:c4:00:56:9a:42:d3: 34:95:a3:98:1d:78:2f:0d:bf:d3:ec:2e:af:6a:0b: 68:9b:41:16:43:2d:1f:05:8b:ff:4e:bf:ef:02:3d: de:d9:6b:d7:d1:39:f7:b0:e8:c7:b4:52:5d:69:83: 1a:62:e0:b2:68:62:00:2b:3f:8b:78:a0:a0:f7:c0: 6b:76:98:55:ce:1a:9e:c3:01:b1:49:57:7e:1f:e0: 37:f6:cb:37:a0:c8:d0:98:93:69:b4:da:ad:c3:3b: e4:19:80:61:4d:3c:ce:76:63:f8:23:d9:ba:03:bf: db:2d:d3:83:38:99:40:b3:21:a9:d5:7c:e8:07:67: 81:57:6f:a2:e4:52:da:43:a4:c4:e1:87:84:98:d1: 74:f2:ee:49:ae:be:17:bc:b3:99:9c:98:f9:c5:0d: 67:dd:18:0c:21:a9:86:2d:34:dc:17:48:8b:bc:a7: cd:bf:26:8d:26:9f:7c:00:bd:5d:5b:73:7c:81:61: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:79:94:9C:5A:70:25:57:B6:69:0F:1F:11:9B:84:4B:65:FF:3D X509v3 Authority Key Identifier: keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1d:4e:65:21:57:c5:2b:c7:cc:e3:4c:83:08:0d:06:43:83: 05:51:17:af:d2:d8:50:ef:41:a4:00:9a:31:cd:4a:35:6d:1a: f6:04:25:ea:9d:e8:a6:72:2f:a7:d7:92:30:26:dc:ac:b2:d1: 4c:56:5c:ca:a7:8c:7a:dc:bc:1d:da:2c:1b:25:30:1d:af:ee: e1:6b:6c:e9:cd:9f:10:8b:99:b0:27:b8:63:2f:d5:54:48:e1: 5c:25:fd:ae:9c:3e:d4:12:39:10:8a:db:13:41:18:db:e4:5e: 89:ae:0e:5f:7d:97:dc:db:b6:cc:45:fc:78:90:43:59:dd:6e: a8:08:3d:0b:3b:08:5b:49:40:e5:a5:3f:d5:a3:a1:bd:10:20: 0b:25:db:51:16:38:2c:d0:f6:8f:4a:ef:b7:8f:1b:50:6c:6a: 66:6a:b6:f3:40:23:af:12:af:90:86:00:5e:df:b4:08:3d:f0: 41:c1:51:81:46:c4:9f:e2:39:70:c1:3b:5f:67:18:40:e6:b1: 97:bb:76:ff:1a:c6:ab:3b:3a:4a:b8:89:07:f6:da:4d:13:3e: fa:e3:ce:f5:22:47:b6:89:41:de:25:62:8b:48:9b:c0:e1:44: 5d:9f:f3:04:af:a1:57:5c:15:77:6d:3d:f3:fe:b2:ae:16:4c: 19:15:10:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB MzI1OTI4RkQwHhcNMjUwNDA0MTUxNTQ4WhcNMjUwNDExMTUxNTQ4WjAYMRYwFAYD VQQDEw02N2VmZjdhNS1jYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7GbBwmR/YYkxnhxXvWTDW0XQgu6a5TgJ4kYr6a1x0PkHsCTjDQ9EqIok8PA WDkybx68Ce79YcdR4wSuSwgJszy6EWzEAFaaQtM0laOYHXgvDb/T7C6vagtom0EW Qy0fBYv/Tr/vAj3e2WvX0Tn3sOjHtFJdaYMaYuCyaGIAKz+LeKCg98BrdphVzhqe wwGxSVd+H+A39ss3oMjQmJNptNqtwzvkGYBhTTzOdmP4I9m6A7/bLdODOJlAsyGp 1XzoB2eBV2+i5FLaQ6TE4YeEmNF08u5Jrr4XvLOZnJj5xQ1n3RgMIamGLTTcF0iL vKfNvyaNJp98AL1dW3N8gWG9WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVeeZSc WnAlV7ZpDx8Rm4RLZf89MB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUHU5lIVfFK8fM40yDCA0GQ4MFURev0thQ70GkAJoxzUo1bRr2BCXq neimci+n15IwJtysstFMVlzKp4x63Lwd2iwbJTAdr+7ha2zpzZ8Qi5mwJ7hjL9VU SOFcJf2unD7UEjkQitsTQRjb5F6Jrg5ffZfc27bMRfx4kENZ3W6oCD0LOwhbSUDl pT/Vo6G9ECALJdtRFjgs0PaPSu+3jxtQbGpmarbzQCOvEq+QhgBe37QIPfBBwVGB RsSf4jlwwTtfZxhA5rGXu3b/GsarOzpKuIkH9tpNEz764871Ike2iUHeJWKLSJvA 4URdn/MEr6FXXBV3bT3z/rKuFkwZFRBH -----END CERTIFICATE-----Generated at Sun Apr 6 03:47:36 2025 by rpki-client