$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json) Hash identifier: xb2ndiuzPVQ/3Aq+2B7i7IPDuuNAUJvi9Yi9wsrprTU= Subject key identifier: 2F:10:10:C9:05:75:61:AC:46:8A:F9:49:37:CC:87:52:45:F3:D0:FE Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft Manifest number: 25 Signing time: Sat 31 May 2025 07:23:08 +0000 Manifest this update: Sat 31 May 2025 07:23:07 +0000 Manifest next update: Sat 07 Jun 2025 07:23:07 +0000 Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: V329aEH0AwIhAKkKSIVtWEX8OP6DZDdlux2Ac4EcUwA=) 2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Validity Not Before: May 31 07:23:07 2025 GMT Not After : Jun 7 07:23:07 2025 GMT Subject: CN=683aae5b-255e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ce:2c:d4:72:d8:ae:7d:c6:31:cc:be:f1:c9: a4:61:6c:64:a5:56:c6:de:20:8f:ac:b4:63:4e:e3: 3e:c8:9a:68:3a:59:67:f1:1a:fd:6c:72:24:09:39: c5:db:21:12:ff:ea:f6:a4:ef:04:8c:e3:62:50:83: 26:6c:9f:1d:84:74:50:c8:c9:86:b3:c0:79:f1:1b: 06:a1:35:1e:07:e9:b5:3f:c4:91:04:1a:3f:82:5d: c0:64:2e:7f:51:26:cc:1e:6c:7e:25:ab:7c:81:80: b5:a1:f3:9e:07:8a:94:26:34:39:3f:dd:f9:05:74: f9:78:54:b2:f2:30:67:ce:5a:4a:b2:2d:ce:2e:6e: a6:a8:74:39:39:e4:78:4f:d8:9d:f3:40:d1:6c:8f: bf:6a:dc:49:61:43:45:f4:a4:f8:68:62:a7:e7:e6: 8a:25:96:65:cb:bb:04:67:d9:46:b2:bb:7c:c8:9e: 39:43:9c:3c:11:fe:5a:08:de:ea:3b:f3:06:57:69: 92:d3:36:a0:58:8d:ee:df:56:da:bd:b5:b0:78:0e: e5:70:29:1b:22:c6:5e:d1:7f:26:e8:4e:85:a6:28: f4:b6:78:e9:b5:3c:68:d1:47:19:b9:66:e0:d7:35: d0:96:f3:d7:79:21:2e:f3:c1:fd:9e:d2:0d:88:11: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:10:C9:05:75:61:AC:46:8A:F9:49:37:CC:87:52:45:F3:D0:FE X509v3 Authority Key Identifier: keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:1d:1e:db:79:51:ba:60:8d:ea:0b:d4:ec:8d:77:e6:2b:17: c3:f3:13:9e:46:c3:c2:8f:58:47:58:8e:e4:b6:1e:f4:f8:7e: 68:cd:78:38:80:58:7d:c2:58:f5:43:f8:75:0e:66:05:81:30: 2b:14:eb:df:78:81:96:d1:b1:7d:bb:78:ad:21:32:97:40:da: ad:3c:ff:1f:fa:3d:c1:e4:ec:35:44:86:ec:6a:1b:b2:d1:0b: e5:98:d0:c0:82:15:a2:e3:96:18:f9:db:99:3f:db:c7:c4:9b: 9a:c6:18:ed:48:46:4e:62:42:d6:3e:d6:cd:99:11:59:58:35: ee:ca:b9:46:e9:30:7c:b4:0a:65:dd:f4:77:15:ca:02:70:1a: 14:af:06:22:e5:74:fd:94:25:13:b2:43:9a:04:68:be:53:9c: 97:6e:7b:50:eb:be:47:17:ff:ee:53:14:e9:6d:4c:05:eb:c6: ea:1a:5a:b9:e0:e9:54:fa:52:0c:13:be:24:1e:25:5e:c0:65: d4:59:86:c1:10:a2:f1:cb:7e:0b:4d:fd:23:2d:6c:cd:57:d1: 62:75:31:e9:d5:65:d0:1c:24:44:05:28:70:6c:5c:4c:34:ff: e6:2a:52:2d:cb:00:70:fe:e7:ed:d6:b9:79:46:99:d7:e5:68: 35:30:1c:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTMzMDExMC8GA1UEBRMoRkJGODEyQTBCOUFBOEFFRDYyMTg3NkM4OTIwMUZGRjEw NDMyQjY5NzAeFw0yNTA1MzEwNzIzMDdaFw0yNTA2MDcwNzIzMDdaMBgxFjAUBgNV BAMTDTY4M2FhZTViLTI1NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDezizUctiufcYxzL7xyaRhbGSlVsbeII+stGNO4z7Immg6WWfxGv1sciQJOcXb IRL/6vak7wSM42JQgyZsnx2EdFDIyYazwHnxGwahNR4H6bU/xJEEGj+CXcBkLn9R JswebH4lq3yBgLWh854HipQmNDk/3fkFdPl4VLLyMGfOWkqyLc4ubqaodDk55HhP 2J3zQNFsj79q3ElhQ0X0pPhoYqfn5oollmXLuwRn2Uayu3zInjlDnDwR/loI3uo7 8wZXaZLTNqBYje7fVtq9tbB4DuVwKRsixl7RfyboToWmKPS2eOm1PGjRRxm5ZuDX NdCW89d5IS7zwf2e0g2IEZkBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULxAQyQV1 YaxGivlJN8yHUkXz0P4wHwYDVR0jBBgwFoAU+/gSoLmqiu1iGHbIkgH/8QQytpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMzMwL0FBRTQ5QTM4MDYw RjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV9nU29MbXFpdTFpR0hiSWtnSF84UVF5dHBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MzMwL0FBRTQ5QTM4MDYwRjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUx aUdIYklrZ0hfOFFReXRwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAModHtt5UbpgjeoL1OyNd+YrF8PzE55Gw8KPWEdYjuS2HvT4fmjNeDiA WH3CWPVD+HUOZgWBMCsU6994gZbRsX27eK0hMpdA2q08/x/6PcHk7DVEhuxqG7LR C+WY0MCCFaLjlhj525k/28fEm5rGGO1IRk5iQtY+1s2ZEVlYNe7KuUbpMHy0CmXd 9HcVygJwGhSvBiLldP2UJROyQ5oEaL5TnJdue1DrvkcX/+5TFOltTAXrxuoaWrng 6VT6UgwTviQeJV7AZdRZhsEQovHLfgtN/SMtbM1X0WJ1MenVZdAcJEQFKHBsXEw0 /+YqUi3LAHD+5+3WuXlGmdflaDUwHNk= -----END CERTIFICATE-----Generated at Sat May 31 17:14:40 2025 by rpki-client