$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: RPgyo2jvE+6guYL2s+5hvHWd9WAPLsEG6+03kSuKXHE= Subject key identifier: D5:C3:9B:6F:1C:C7:A3:18:D1:2F:64:27:6D:52:E6:D7:34:F0:96:41 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 047D Signing time: Thu 03 Apr 2025 00:25:44 +0000 Manifest this update: Thu 03 Apr 2025 00:25:44 +0000 Manifest next update: Thu 10 Apr 2025 00:25:44 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: xZ8S33m9n87VxQCWZsJvbotp+JMrwQ8AGMaNdmUxeM8=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE Validity Not Before: Apr 3 00:25:44 2025 GMT Not After : Apr 10 00:25:44 2025 GMT Subject: CN=67edd588-389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:6f:e3:9e:53:8a:19:c3:48:da:69:a3:89: aa:d5:46:d7:0a:b3:5a:a6:f2:c2:b6:5d:54:16:fb: 8b:f4:09:e0:65:29:0e:79:56:05:ec:30:71:d3:83: 25:43:26:1b:eb:97:29:96:4d:6a:c2:31:2b:ca:06: d0:3b:04:a1:b9:eb:65:ad:b1:bb:dc:d7:2e:ee:d4: 42:af:a5:10:54:b0:a8:33:a9:46:24:17:6a:c1:99: ac:c1:ca:6a:98:41:f0:58:e2:92:da:66:21:d5:d7: 3a:37:80:33:c1:67:8f:93:61:6d:4b:1f:ba:27:bd: 1a:55:ba:2a:14:db:de:e6:78:97:ef:a0:f2:e3:69: e5:5e:cd:7a:11:37:75:d5:f3:6d:e6:57:ad:9d:12: 31:b5:68:b7:5c:27:b2:18:48:37:26:6d:81:1f:ed: 44:7d:ae:57:7a:ba:e6:aa:39:6c:ad:40:12:39:3a: 80:c4:2f:c6:78:7f:27:d6:2d:cd:9c:40:26:17:3a: c9:e3:79:a5:b3:c6:4e:e6:87:24:97:f7:02:f4:5e: 1f:b5:97:54:ee:84:03:8c:38:f2:65:a8:1b:67:a7: e1:be:6e:e0:b7:91:69:97:a4:aa:bc:c8:28:e2:1d: 41:fc:17:6f:c5:28:d1:3b:04:c2:88:17:01:fc:a5: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:9B:6F:1C:C7:A3:18:D1:2F:64:27:6D:52:E6:D7:34:F0:96:41 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:8b:b4:42:75:cc:03:94:bb:4a:e1:8f:68:34:80:a6:61: 71:e9:c9:10:9e:bc:83:bc:af:a5:dc:20:6a:3a:aa:ef:e2:60: 43:62:0e:3f:6e:18:2c:ae:29:e6:fc:a1:7f:97:08:a8:52:33: ac:be:91:27:55:90:93:d0:41:00:03:a5:b1:31:d9:83:a5:70: a8:e3:cb:40:e3:1c:86:91:25:44:80:f1:a2:22:d4:95:70:d9: 0a:44:a4:a3:a0:a5:f7:8d:82:3f:70:50:96:8e:5e:5d:9d:51: 1b:3e:d8:ba:1c:10:8d:ab:61:f5:0b:b4:1e:38:3c:57:04:d2: b2:e6:39:45:ae:70:0b:b8:a6:99:da:e3:5c:e3:fe:71:be:b0: 5b:05:7b:ce:f2:c4:68:e7:50:16:94:c5:e0:ff:82:ca:70:f2: 2a:f7:0f:97:15:a6:18:94:08:d6:1b:95:98:0e:a7:ce:da:b4: b9:e5:e1:0f:5e:cc:c7:85:cd:5f:d7:ae:bd:d5:e2:15:2d:c7: 43:85:1d:ab:90:39:81:91:18:93:1e:30:12:42:a9:54:09:73: 2b:79:77:7f:ef:b6:1e:29:4e:ab:d1:a0:31:84:d6:0a:74:61: 8a:f7:93:66:91:be:1e:a9:fd:49:91:f4:31:53:e1:b4:aa:80: 78:ab:31:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUwNDAzMDAyNTQ0WhcNMjUwNDEwMDAyNTQ0WjAYMRYwFAYD VQQDEw02N2VkZDU4OC0zODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTVv455TihnDSNppo4mq1UbXCrNapvLCtl1UFvuL9AngZSkOeVYF7DBx04Ml QyYb65cplk1qwjErygbQOwShuetlrbG73Ncu7tRCr6UQVLCoM6lGJBdqwZmswcpq mEHwWOKS2mYh1dc6N4AzwWePk2FtSx+6J70aVboqFNve5niX76Dy42nlXs16ETd1 1fNt5letnRIxtWi3XCeyGEg3Jm2BH+1Efa5XerrmqjlsrUASOTqAxC/GeH8n1i3N nEAmFzrJ43mls8ZO5ockl/cC9F4ftZdU7oQDjDjyZagbZ6fhvm7gt5Fpl6SqvMgo 4h1B/BdvxSjROwTCiBcB/KWHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXDm28c x6MY0S9kJ21S5tc08JZBMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvj4u0QnXMA5S7SuGPaDSApmFx6ckQnryDvK+l3CBqOqrv4mBDYg4/ bhgsrinm/KF/lwioUjOsvpEnVZCT0EEAA6WxMdmDpXCo48tA4xyGkSVEgPGiItSV cNkKRKSjoKX3jYI/cFCWjl5dnVEbPti6HBCNq2H1C7QeODxXBNKy5jlFrnALuKaZ 2uNc4/5xvrBbBXvO8sRo51AWlMXg/4LKcPIq9w+XFaYYlAjWG5WYDqfO2rS55eEP XszHhc1f16691eIVLcdDhR2rkDmBkRiTHjASQqlUCXMreXd/77YeKU6r0aAxhNYK dGGK95Nmkb4eqf1JkfQxU+G0qoB4qzGT -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:43 2025 by rpki-client