$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: XIcZw69QKU+Bub/PEI1Z4pvO9TQZLYIv8NmN/tk4oH0= Subject key identifier: A7:70:83:99:C3:58:02:9A:B6:D4:51:E2:37:88:9B:8D:98:69:D1:CF Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C52 Signing time: Fri 30 May 2025 18:33:33 +0000 Manifest this update: Fri 30 May 2025 18:33:33 +0000 Manifest next update: Fri 06 Jun 2025 18:33:33 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: oqTqHi/fXPZYxLGcqQhbSAvhMlD/tHUMT+O1MRqNLTs=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: May 30 18:33:33 2025 GMT Not After : Jun 6 18:33:33 2025 GMT Subject: CN=6839f9fd-2a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:6e:53:c6:d2:c9:99:58:67:7c:da:ab:27: a3:06:b7:69:a7:69:79:c2:11:45:dd:39:c2:73:35: 7d:7a:9f:db:21:01:fa:55:01:4c:89:82:27:51:44: 41:1f:4b:b6:4e:d2:a4:e7:05:8e:9a:54:5d:ce:bc: 8f:ad:de:59:d8:15:c8:1e:2b:07:f5:50:52:52:6b: 03:bc:9e:bd:34:23:26:dd:44:fb:bd:96:30:1c:9c: cb:cd:a3:ed:4b:e9:3d:f5:8d:dc:51:a4:ea:f9:58: 6f:ba:9d:6d:76:95:6f:c5:bc:4a:44:1b:e4:93:44: ce:cc:bd:82:7d:a4:81:fd:79:f7:9e:de:bb:d7:2b: bd:41:05:70:68:ff:df:01:fc:89:27:9c:b3:29:7b: 95:26:34:af:6e:0a:fb:36:80:de:08:60:eb:0a:ab: 73:db:10:7b:c8:25:43:69:7b:21:db:12:1a:a4:c5: 1f:1a:81:07:48:74:6d:29:b6:01:74:2d:2d:c1:1c: e9:ed:c7:4d:24:6a:24:d2:61:73:27:d2:98:49:3e: 58:5d:9a:9d:0b:ac:c5:c4:39:78:52:13:2a:c7:62: 60:74:38:c0:37:be:8b:b5:76:77:79:77:13:9a:46: 72:de:22:c5:1a:8d:4b:c3:8b:bb:e6:a8:20:bc:64: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:70:83:99:C3:58:02:9A:B6:D4:51:E2:37:88:9B:8D:98:69:D1:CF X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:df:be:59:e0:c7:4b:ab:0b:ec:36:e7:c1:85:f1:b5:f6:a5: 79:db:f5:de:f8:33:c3:12:eb:4a:ee:b5:43:bf:93:9e:30:2b: c3:5b:9e:08:ae:a8:00:4a:77:18:6b:05:34:14:5b:f8:2c:82: 45:73:38:79:bd:47:c2:18:db:ec:b0:28:1e:19:f0:d9:22:93: fd:44:ed:d5:4d:b9:7b:c7:55:1b:f9:d5:84:77:54:f2:14:7f: 0a:d9:67:8c:50:d2:5c:44:a6:7c:fa:d4:df:8a:8e:d7:1e:42: 40:05:93:6a:36:fe:c5:b0:14:64:ee:6a:a4:4c:01:92:53:5f: 73:29:87:77:49:60:dd:41:b9:12:be:96:d9:d1:5d:2c:ce:80: 0b:dd:b7:20:fa:b0:41:ff:4b:a0:7e:fe:32:a6:f3:57:63:1e: 2a:88:33:20:cc:a8:15:07:c3:c7:a5:d3:bc:8a:66:bc:fb:c9: 29:0d:90:7a:95:42:8c:3b:06:bd:a8:7f:2a:70:26:b6:6e:15: d0:ec:cb:60:82:c8:e4:b8:98:8c:89:91:d0:40:35:fe:2c:7f: 37:31:b1:98:21:5b:ce:de:58:13:27:9d:36:05:ee:ef:39:c1: a0:75:00:44:44:1a:51:87:58:fc:0d:fd:4e:d2:b2:8e:5c:87: d4:af:d6:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwNTMwMTgzMzMzWhcNMjUwNjA2MTgzMzMzWjAYMRYwFAYD VQQDEw02ODM5ZjlmZC0yYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXJuU8bSyZlYZ3zaqyejBrdpp2l5whFF3TnCczV9ep/bIQH6VQFMiYInUURB H0u2TtKk5wWOmlRdzryPrd5Z2BXIHisH9VBSUmsDvJ69NCMm3UT7vZYwHJzLzaPt S+k99Y3cUaTq+Vhvup1tdpVvxbxKRBvkk0TOzL2CfaSB/Xn3nt671yu9QQVwaP/f AfyJJ5yzKXuVJjSvbgr7NoDeCGDrCqtz2xB7yCVDaXsh2xIapMUfGoEHSHRtKbYB dC0twRzp7cdNJGok0mFzJ9KYST5YXZqdC6zFxDl4UhMqx2JgdDjAN76LtXZ3eXcT mkZy3iLFGo1Lw4u75qggvGRxdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdwg5nD WAKattRR4jeIm42YadHPMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz375Z4MdLqwvsNufBhfG19qV52/Xe+DPDEutK7rVDv5OeMCvDW54I rqgASncYawU0FFv4LIJFczh5vUfCGNvssCgeGfDZIpP9RO3VTbl7x1Ub+dWEd1Ty FH8K2WeMUNJcRKZ8+tTfio7XHkJABZNqNv7FsBRk7mqkTAGSU19zKYd3SWDdQbkS vpbZ0V0szoAL3bcg+rBB/0ugfv4ypvNXYx4qiDMgzKgVB8PHpdO8ima8+8kpDZB6 lUKMOwa9qH8qcCa2bhXQ7MtggsjkuJiMiZHQQDX+LH83MbGYIVvO3lgTJ502Be7v OcGgdQBERBpRh1j8Df1O0rKOXIfUr9ZD -----END CERTIFICATE-----Generated at Sat May 31 17:31:52 2025 by rpki-client