$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: FMzxr0uYui+H3P+1zLQcWc84Lu8nln2Cru6/wUYA07E= Subject key identifier: D8:6C:6D:2A:C1:F5:3A:27:B1:E5:0D:49:B7:BC:35:5A:5F:8C:39:D2 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0162 Signing time: Sat 31 May 2025 03:43:55 +0000 Manifest this update: Sat 31 May 2025 03:43:54 +0000 Manifest next update: Sat 07 Jun 2025 03:43:54 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 9aaelgOi6GyhGxT2E+Rmz1QpLZnJFpExLo+RJfW/tVk=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: May 31 03:43:54 2025 GMT Not After : Jun 7 03:43:54 2025 GMT Subject: CN=683a7afb-517c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:de:0d:2b:4e:8b:ca:31:fa:3b:aa:4b:25: a3:71:ee:4c:9f:21:e7:54:86:42:93:84:67:fe:1f: 92:81:00:43:31:8a:1c:8c:c4:93:0e:1b:ce:c6:3f: c0:de:9a:c6:51:7e:eb:f7:31:b8:86:be:59:e7:f7: cb:c4:55:e5:91:df:8a:2a:e9:84:10:f0:14:bc:9c: 36:5e:bd:ad:8a:4d:8e:77:4b:10:a1:b2:1a:32:fa: d9:7d:99:59:0f:a7:d5:74:78:b1:6f:96:11:dd:40: e9:ac:65:6e:67:11:72:af:3f:68:59:85:1c:93:e4: 90:3d:a5:db:d3:88:c7:f7:82:d2:44:6f:b9:6b:cf: 01:ca:90:b0:9e:5d:35:75:93:c0:15:f6:e1:4c:a8: a5:99:4f:07:65:d8:b1:ba:6b:b1:7f:12:54:97:2a: 9e:bd:66:ac:c3:35:54:42:83:30:41:88:3f:73:87: db:27:50:dc:b0:89:8a:09:d1:bb:31:7f:4c:c9:24: 40:a0:d3:2c:82:7d:23:33:c5:b9:8d:79:07:9a:1e: b0:c0:af:55:fd:de:29:c1:dd:ad:a1:19:62:9e:a3: b5:e1:d8:a4:07:cd:3c:c9:81:38:5c:64:a0:1a:7d: b3:38:50:42:5e:c9:67:99:55:7b:0d:ff:95:7f:6d: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:6D:2A:C1:F5:3A:27:B1:E5:0D:49:B7:BC:35:5A:5F:8C:39:D2 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:61:92:8d:ff:67:ab:aa:51:57:f9:72:61:10:d4:7e:1d:d1: 17:fe:ad:10:95:62:35:bf:a3:43:55:2d:37:a5:bb:bb:bf:74: 4c:03:bf:31:b0:ee:0f:41:e2:b7:6e:2a:14:4c:9f:f9:a7:ea: d6:82:38:dc:78:28:92:e6:e7:3d:51:77:c7:24:6c:85:46:6d: c7:60:51:f6:6a:08:5e:e1:26:5d:05:30:ce:2f:64:19:39:37: d0:12:f3:4c:f4:3a:c3:b5:98:65:de:bc:12:84:18:eb:10:dc: 82:71:f1:a8:8b:6a:77:fd:99:e1:22:f1:fc:21:02:6d:8b:7c: c0:4d:55:36:79:8d:31:f3:f0:3d:ea:59:ce:ba:47:e6:1c:9f: d3:bb:9b:e7:d7:da:6e:55:c3:bd:36:85:6d:82:ba:f9:b6:71: 8b:60:28:95:3f:6f:6a:bf:73:ef:ea:f2:74:1b:4e:93:35:47: 91:8b:9b:6d:2b:ad:47:cf:14:41:2b:72:d8:91:dd:ad:74:55: 6a:7b:65:17:4e:10:b7:ea:5d:38:de:d5:c4:6a:4e:51:5d:79: 21:5e:b3:88:19:9e:18:fd:cc:03:a7:b5:76:30:91:2c:74:c4: c2:bd:ce:3b:a9:86:60:fe:6a:3b:97:4a:3b:fc:8e:af:aa:7c: 9b:67:cf:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwNTMxMDM0MzU0WhcNMjUwNjA3MDM0MzU0WjAYMRYwFAYD VQQDEw02ODNhN2FmYi01MTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCDeDStOi8ox+juqSyWjce5MnyHnVIZCk4Rn/h+SgQBDMYocjMSTDhvOxj/A 3prGUX7r9zG4hr5Z5/fLxFXlkd+KKumEEPAUvJw2Xr2tik2Od0sQobIaMvrZfZlZ D6fVdHixb5YR3UDprGVuZxFyrz9oWYUck+SQPaXb04jH94LSRG+5a88BypCwnl01 dZPAFfbhTKilmU8HZdixumuxfxJUlyqevWaswzVUQoMwQYg/c4fbJ1DcsImKCdG7 MX9MySRAoNMsgn0jM8W5jXkHmh6wwK9V/d4pwd2toRlinqO14dikB808yYE4XGSg Gn2zOFBCXslnmVV7Df+Vf21KFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhsbSrB 9TonseUNSbe8NVpfjDnSMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrYZKN/2erqlFX+XJhENR+HdEX/q0QlWI1v6NDVS03pbu7v3RMA78x sO4PQeK3bioUTJ/5p+rWgjjceCiS5uc9UXfHJGyFRm3HYFH2aghe4SZdBTDOL2QZ OTfQEvNM9DrDtZhl3rwShBjrENyCcfGoi2p3/ZnhIvH8IQJti3zATVU2eY0x8/A9 6lnOukfmHJ/Tu5vn19puVcO9NoVtgrr5tnGLYCiVP29qv3Pv6vJ0G06TNUeRi5tt K61HzxRBK3LYkd2tdFVqe2UXThC36l043tXEak5RXXkhXrOIGZ4Y/cwDp7V2MJEs dMTCvc47qYZg/mo7l0o7/I6vqnybZ8+9 -----END CERTIFICATE-----Generated at Sat May 31 17:53:06 2025 by rpki-client