$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: wOGLS6r/RrQfuVSYx3zaQw0YEE7qq/2ustGKgySYgvA= Subject key identifier: DA:11:CF:EC:9C:43:A6:A5:2E:C4:0F:51:B4:D7:69:F2:66:13:1B:27 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 0726 Signing time: Fri 30 May 2025 22:04:56 +0000 Manifest this update: Fri 30 May 2025 22:04:56 +0000 Manifest next update: Fri 06 Jun 2025 22:04:56 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: ZuLDhmaLv1e3/xYpuM8DMbRmYxE8ACokv8K9liXJP7Q=) 2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: U4a8o1KXqQZowZ9aJ6tXOocb6xkGyoj65dTRVzeEvrE=) 3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: May 30 22:04:56 2025 GMT Not After : Jun 6 22:04:56 2025 GMT Subject: CN=683a2b88-7c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:e2:4d:8f:70:c4:10:7f:30:13:0c:43:aa: 83:25:64:7b:d2:61:c6:28:7c:f9:d1:88:62:8f:f3: 4e:8b:f2:a7:eb:3f:3a:28:7f:af:89:bb:d0:25:b3: e6:40:95:2d:92:e0:15:7b:f3:b5:00:78:ac:2b:99: 0d:24:78:09:21:ba:5f:49:f3:8a:48:f0:e7:13:ac: bf:cd:59:c8:ab:a1:d6:ec:6f:e3:77:4d:c2:4f:34: 8d:6e:f9:c3:8a:5d:8e:b9:74:07:5d:ec:c2:0c:c5: 28:4a:07:43:0b:7a:79:c6:45:fb:26:ef:f6:2b:2a: 2a:26:81:62:96:33:f5:b0:e0:19:d6:f4:28:eb:87: fd:cc:c6:5c:cd:21:fb:50:83:97:e5:4d:5e:33:c0: 5a:08:69:3e:d4:65:24:9e:36:b0:8c:39:d2:e0:a4: ca:d6:97:a0:6c:89:7a:35:1f:be:f1:b5:a9:85:9b: d3:74:aa:13:43:68:b4:13:d4:52:61:ae:d0:5f:d7: a1:dc:58:21:1b:0d:10:7b:de:6f:f4:e0:f7:ab:7f: 19:17:c4:a8:2e:50:24:df:21:ff:87:eb:a5:44:97: bf:51:f7:69:04:5a:c7:db:90:a8:fc:47:c1:99:66: f7:3c:b0:64:fa:af:26:59:7f:d4:b9:57:b2:d3:b8: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:CF:EC:9C:43:A6:A5:2E:C4:0F:51:B4:D7:69:F2:66:13:1B:27 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:97:dc:98:2f:01:c4:fa:b8:00:be:04:28:b3:50:ae:d1:d1: 36:97:74:0a:ff:ea:69:b0:3d:b1:bd:92:f3:2c:e6:68:56:46: 3a:8e:20:2c:74:f9:a1:36:2f:6f:91:71:6f:21:22:e3:d4:45: d1:d4:7c:8e:a4:ee:02:01:31:72:8a:9a:9a:b3:1e:b6:d2:1a: a0:44:28:99:e4:87:85:41:63:8f:fd:92:69:f9:64:64:30:50: 1d:23:84:19:cd:1d:8b:25:16:36:d8:42:aa:3e:7d:33:4d:e2: dc:4e:38:a2:29:5f:38:55:1c:1d:51:4a:82:9d:33:0c:70:a9: 0b:10:e1:86:65:44:65:ce:d2:fd:03:50:1f:66:0b:74:d8:b0: 8d:d6:dc:7a:4a:c6:c0:3b:cc:44:b6:c1:96:21:84:21:1f:08: 51:5d:3b:d6:ee:29:e0:8e:ac:63:44:73:bb:09:13:53:db:70: ed:11:b6:a1:c7:21:83:3b:8e:87:88:14:fc:f5:b9:fb:ce:77: 1d:21:d9:5b:6f:5b:38:2c:7a:1a:bd:57:cb:7a:77:c8:d0:3d: b8:45:37:72:b8:f6:a1:9a:78:c8:19:c0:a9:b9:61:74:22:f6: 8a:98:3c:f6:e2:dd:3e:5c:82:0a:b6:f5:26:09:7f:9f:da:5f: e7:61:50:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjUwNTMwMjIwNDU2WhcNMjUwNjA2MjIwNDU2WjAYMRYwFAYD VQQDEw02ODNhMmI4OC03Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zviTY9wxBB/MBMMQ6qDJWR70mHGKHz50Yhij/NOi/Kn6z86KH+vibvQJbPm QJUtkuAVe/O1AHisK5kNJHgJIbpfSfOKSPDnE6y/zVnIq6HW7G/jd03CTzSNbvnD il2OuXQHXezCDMUoSgdDC3p5xkX7Ju/2KyoqJoFiljP1sOAZ1vQo64f9zMZczSH7 UIOX5U1eM8BaCGk+1GUknjawjDnS4KTK1pegbIl6NR++8bWphZvTdKoTQ2i0E9RS Ya7QX9eh3FghGw0Qe95v9OD3q38ZF8SoLlAk3yH/h+ulRJe/UfdpBFrH25Co/EfB mWb3PLBk+q8mWX/UuVey07hcQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoRz+yc Q6alLsQPUbTXafJmExsnMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHl9yYLwHE+rgAvgQos1Cu0dE2l3QK/+ppsD2xvZLzLOZoVkY6jiAs dPmhNi9vkXFvISLj1EXR1HyOpO4CATFyipqasx620hqgRCiZ5IeFQWOP/ZJp+WRk MFAdI4QZzR2LJRY22EKqPn0zTeLcTjiiKV84VRwdUUqCnTMMcKkLEOGGZURlztL9 A1AfZgt02LCN1tx6SsbAO8xEtsGWIYQhHwhRXTvW7ingjqxjRHO7CRNT23DtEbah xyGDO46HiBT89bn7zncdIdlbb1s4LHoavVfLenfI0D24RTdyuPahmnjIGcCpuWF0 IvaKmDz24t0+XIIKtvUmCX+f2l/nYVAu -----END CERTIFICATE-----Generated at Sat May 31 17:08:55 2025 by rpki-client