$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: PExtQ2BmAwOXJJEFqsr9ouLyztK9CtbriuYYJRtTQTE= Subject key identifier: FE:1C:4F:07:60:55:97:F6:88:72:23:51:10:49:17:9B:28:4A:22:D0 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 2B Signing time: Sat 31 May 2025 07:18:24 +0000 Manifest this update: Sat 31 May 2025 07:18:24 +0000 Manifest next update: Sat 07 Jun 2025 07:18:24 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: /cQ75kQ1Ud3zgvWkr+zcXfOYOai6HxF5HoImIltVIII=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: May 31 07:18:24 2025 GMT Not After : Jun 7 07:18:24 2025 GMT Subject: CN=683aad40-4c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:9a:14:7b:32:a3:df:5f:25:34:81:5d:fb: 12:29:0c:c0:1c:57:26:6d:24:db:13:87:0c:9b:f5: 4b:9d:27:21:56:25:83:77:77:02:a2:7b:1b:0d:90: 1e:ee:c9:88:bf:ee:7b:9d:81:f9:a5:d5:88:be:79: f2:29:b5:97:ff:fe:63:96:46:d9:2e:45:bd:9c:7c: 4a:11:4f:a0:7a:f9:b2:17:83:19:e2:f8:53:f1:e4: 34:2b:1f:45:6d:e9:f0:a9:c3:5f:d3:b1:8a:1e:67: 74:14:62:c6:bc:b8:01:9f:95:5d:35:11:1d:f4:34: 2b:e8:77:7f:2b:e6:20:0b:ec:04:b9:c8:a0:63:ad: 2b:12:f2:2a:81:71:19:ab:03:2c:f5:5d:b2:05:4d: 9e:f0:b3:5a:21:4d:af:a4:ec:57:08:c2:0b:b6:8c: 35:67:8b:08:bc:37:b0:43:fc:cb:f8:e2:76:b2:5f: 3f:79:67:5a:57:58:ef:c8:7f:42:92:f0:c1:e0:36: cd:1d:5c:6b:ad:1e:64:ae:8e:77:5a:02:f5:82:a3: 33:84:2b:b9:40:18:05:76:a4:2c:80:b3:ae:ec:90: fd:b2:53:07:b8:04:28:5b:f4:67:54:b7:f5:c6:85: 97:b3:a7:4a:58:27:e6:0e:29:ae:5a:93:95:29:0b: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1C:4F:07:60:55:97:F6:88:72:23:51:10:49:17:9B:28:4A:22:D0 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:ba:28:70:a0:04:9d:c5:17:f1:0a:4d:56:d1:59:e0:b6: 95:8b:1b:c1:26:69:09:8c:3e:da:c1:fc:90:8b:d0:0a:b3:f9: b0:bf:64:80:06:81:c6:83:4c:9d:08:2d:e8:3c:a1:be:df:9d: cc:55:4a:da:82:02:69:39:68:2e:51:66:bd:a4:f8:46:c5:ce: a0:da:d0:10:97:0d:c7:7f:f2:75:c0:16:60:90:75:20:ed:b0: 5c:06:1b:d5:aa:d7:bd:96:19:6d:f6:20:61:66:76:fa:82:7a: f7:e5:06:5b:63:0e:c6:ce:be:0b:c5:6c:f9:db:3e:86:34:44: bd:75:56:59:04:e4:50:75:08:1b:0a:75:fa:7a:b6:3a:46:ba: d0:f4:62:27:ec:52:48:2e:46:c1:a1:a2:f2:05:7c:b4:b7:3d: 11:ac:e1:d4:5f:c5:8b:64:40:75:25:09:2d:df:76:74:ac:ba: 09:67:6e:8b:32:71:a1:d3:51:16:d7:4c:63:16:16:49:07:1b: fd:64:fe:2b:1b:ee:50:f3:53:bc:f4:94:60:72:c8:56:ba:fe: 5d:5b:23:a3:e1:0e:0e:ce:bd:e2:4a:c7:a5:4c:aa:41:88:4f: 76:c3:3f:1e:db:9f:23:78:51:65:c0:fb:cd:09:f4:74:cb:c7: 81:7c:5a:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA1MzEwNzE4MjRaFw0yNTA2MDcwNzE4MjRaMBgxFjAUBgNV BAMTDTY4M2FhZDQwLTRjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtYZoUezKj318lNIFd+xIpDMAcVyZtJNsThwyb9UudJyFWJYN3dwKiexsNkB7u yYi/7nudgfml1Yi+efIptZf//mOWRtkuRb2cfEoRT6B6+bIXgxni+FPx5DQrH0Vt 6fCpw1/TsYoeZ3QUYsa8uAGflV01ER30NCvod38r5iAL7AS5yKBjrSsS8iqBcRmr Ayz1XbIFTZ7ws1ohTa+k7FcIwgu2jDVniwi8N7BD/Mv44nayXz95Z1pXWO/If0KS 8MHgNs0dXGutHmSujndaAvWCozOEK7lAGAV2pCyAs67skP2yUwe4BChb9GdUt/XG hZezp0pYJ+YOKa5ak5UpC8bpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/hxPB2BV l/aIciNREEkXmyhKItAwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxwuihwoASdxRfxCk1W0VngtpWLG8EmaQmMPtrB/JCL0Aqz+bC/ZIAG gcaDTJ0ILeg8ob7fncxVStqCAmk5aC5RZr2k+EbFzqDa0BCXDcd/8nXAFmCQdSDt sFwGG9Wq172WGW32IGFmdvqCevflBltjDsbOvgvFbPnbPoY0RL11VlkE5FB1CBsK dfp6tjpGutD0YifsUkguRsGhovIFfLS3PRGs4dRfxYtkQHUlCS3fdnSsuglnbosy caHTURbXTGMWFkkHG/1k/isb7lDzU7z0lGByyFa6/l1bI6PhDg7OveJKx6VMqkGI T3bDPx7bnyN4UWXA+80J9HTLx4F8WmE= -----END CERTIFICATE-----Generated at Sat May 31 17:51:31 2025 by rpki-client