$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: OmKK5jllpDWM7AEltKhS2eVVhvm9D4u+lN91ffccd6o= Subject key identifier: 57:29:1F:BA:10:63:02:6A:EA:33:96:99:26:86:CA:0D:EF:91:C0:B1 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0271 Signing time: Sat 31 May 2025 01:54:21 +0000 Manifest this update: Sat 31 May 2025 01:54:20 +0000 Manifest next update: Sat 07 Jun 2025 01:54:20 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: 1t1fPi3j0ssuGgjBjeoSp6zmVHbVRlxRq/j2YrhJkbc=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: May 31 01:54:20 2025 GMT Not After : Jun 7 01:54:20 2025 GMT Subject: CN=683a614d-58a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:a8:1e:75:5a:2c:00:71:a9:1d:e5:e9:41: 1a:00:0d:49:84:b5:4b:30:28:31:10:15:bb:3c:1c: d3:8b:2c:bf:7f:fa:b3:70:c9:eb:89:4a:74:87:7e: 8a:6c:33:3d:0c:5d:1f:30:a7:dc:67:49:d3:92:68: 2f:a9:0b:e2:d7:fa:c8:5a:fd:ae:e0:5e:e6:61:f8: 50:31:f0:1b:58:2c:15:39:97:2b:3b:78:78:cd:43: 78:4c:55:cd:ef:64:d6:4d:c9:4c:96:f9:ee:65:aa: b2:60:a8:29:c8:ad:17:ac:ab:5b:00:46:72:5c:fb: 1d:cd:96:06:5e:e1:c0:89:e4:d1:4f:6b:cc:65:8c: 2a:71:97:3e:a8:dd:28:8d:8c:d1:5c:36:e4:3c:5e: c7:05:48:09:89:37:5e:8b:48:36:2e:47:0e:7e:e0: a4:cf:38:4b:e4:80:a4:95:b4:27:c7:5d:38:c0:88: ad:74:16:de:50:20:b5:ce:6b:3a:6b:f5:b7:fe:76: 8e:12:fb:f1:58:26:42:d4:7f:99:55:3a:3e:21:ea: b3:ee:b8:39:e0:46:6f:e8:7e:6c:d6:f7:a6:db:6c: 37:d8:7e:bd:9f:b1:cf:25:fb:d0:73:c9:4f:88:3d: e4:b6:f0:6b:a8:d7:58:5d:56:82:ed:c1:43:48:fd: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:29:1F:BA:10:63:02:6A:EA:33:96:99:26:86:CA:0D:EF:91:C0:B1 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:22:54:0b:28:b8:5e:83:9d:c6:94:db:bc:24:20:24:e6:f5: 14:53:7c:27:32:74:41:be:0a:36:2b:75:b7:cd:77:a8:14:40: 92:af:f9:57:d3:81:e5:03:bc:e0:e5:af:e1:c4:77:50:1d:78: b6:61:d9:ed:6e:cc:64:7b:7f:83:b7:8a:c5:89:0e:c8:c1:57: 18:97:69:94:e3:a6:7d:e5:6b:9d:9f:9f:ea:1e:39:ea:c7:ce: 52:d3:e7:10:cb:51:83:60:ea:bc:8b:5a:13:c9:4d:f2:16:2c: 83:23:79:60:6c:dc:c1:72:a5:c2:98:15:e7:60:32:72:5d:8f: 9a:4c:e6:ab:02:b2:13:44:18:53:a7:35:4b:18:55:3a:e1:e6: c4:7d:db:f9:8b:49:a3:e8:df:78:20:f0:4a:72:ee:3c:a5:22: e4:98:41:ad:89:35:64:3c:72:cd:ba:d2:2d:14:14:6a:3e:e0: 0a:32:df:11:f1:4b:62:1b:34:8f:24:cd:37:f4:0a:68:e5:74: 23:1b:a1:c7:99:e1:aa:4a:0b:84:7f:87:e8:0c:cc:78:36:96: d7:3e:b3:8d:09:c7:8d:a2:4a:d5:d6:e1:1b:cb:91:f2:eb:d6: 3b:5c:f9:f5:2f:dc:0a:3d:9b:a7:c9:09:d5:47:d9:e7:74:01: d5:37:7a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNTMxMDE1NDIwWhcNMjUwNjA3MDE1NDIwWjAYMRYwFAYD VQQDEw02ODNhNjE0ZC01OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41GoHnVaLABxqR3l6UEaAA1JhLVLMCgxEBW7PBzTiyy/f/qzcMnriUp0h36K bDM9DF0fMKfcZ0nTkmgvqQvi1/rIWv2u4F7mYfhQMfAbWCwVOZcrO3h4zUN4TFXN 72TWTclMlvnuZaqyYKgpyK0XrKtbAEZyXPsdzZYGXuHAieTRT2vMZYwqcZc+qN0o jYzRXDbkPF7HBUgJiTdei0g2LkcOfuCkzzhL5ICklbQnx104wIitdBbeUCC1zms6 a/W3/naOEvvxWCZC1H+ZVTo+Ieqz7rg54EZv6H5s1vem22w32H69n7HPJfvQc8lP iD3ktvBrqNdYXVaC7cFDSP1PfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcpH7oQ YwJq6jOWmSaGyg3vkcCxMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9IlQLKLheg53GlNu8JCAk5vUUU3wnMnRBvgo2K3W3zXeoFECSr/lX 04HlA7zg5a/hxHdQHXi2Ydntbsxke3+Dt4rFiQ7IwVcYl2mU46Z95Wudn5/qHjnq x85S0+cQy1GDYOq8i1oTyU3yFiyDI3lgbNzBcqXCmBXnYDJyXY+aTOarArITRBhT pzVLGFU64ebEfdv5i0mj6N94IPBKcu48pSLkmEGtiTVkPHLNutItFBRqPuAKMt8R 8UtiGzSPJM039Apo5XQjG6HHmeGqSguEf4foDMx4NpbXPrONCceNokrV1uEby5Hy 69Y7XPn1L9wKPZunyQnVR9nndAHVN3qp -----END CERTIFICATE-----Generated at Sat May 31 17:08:56 2025 by rpki-client