$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: dYLo0qIeoYTcf9Xs17Kwk7/neEullda2HtcrACrhtWI= Subject key identifier: E5:B0:70:CF:36:12:44:78:34:9C:95:3D:00:B6:C4:A3:9A:13:AF:02 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F1A Signing time: Fri 30 May 2025 16:11:56 +0000 Manifest this update: Fri 30 May 2025 16:11:56 +0000 Manifest next update: Fri 06 Jun 2025 16:11:56 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: +gDq9P3YReIdoFoyV+XA9SuD+3in3g3gAMWE/b7evsE=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: JPz0ZzHWwFSSfWmaNplpCU4QznJ0G9YXZ66T9hNIZ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7973 (0x1f25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: May 30 16:11:56 2025 GMT Not After : Jun 6 16:11:56 2025 GMT Subject: CN=6839d8cc-3f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:b0:65:01:45:2c:66:62:26:92:be:98:03: 14:74:7e:3c:bf:94:d4:8d:9a:35:d9:40:42:fc:7f: 07:5f:ea:6c:3d:a9:1a:4a:4d:d1:51:4f:3a:5b:77: 39:1e:77:64:41:71:ed:7e:be:33:9b:d9:15:69:20: 74:12:b2:2a:b8:01:00:0c:dc:d9:d9:d0:fe:2d:34: 7b:25:e4:35:65:86:df:ab:a3:9a:26:55:5d:23:01: 94:30:db:02:a9:e9:59:23:1c:6a:47:51:77:28:83: 42:c6:38:81:58:7f:ce:e0:8b:b8:0b:5b:59:1b:e9: c5:ef:6d:1e:c4:a0:7d:c7:57:ba:3d:16:23:53:f5: 9d:c6:9c:2b:71:af:88:2e:79:ee:ef:79:b3:5d:c4: 04:86:16:54:e6:f9:e2:a2:20:99:f8:7a:aa:c8:0b: 19:12:99:d9:50:e8:c9:0e:57:65:05:74:49:d8:bf: 14:da:84:d0:d7:e7:eb:73:a6:83:c7:64:ea:c3:95: f6:e7:ff:7a:b4:4e:82:7b:2f:d2:93:9a:ef:fb:72: 4f:0c:63:72:ab:86:e6:d3:44:bf:b4:23:b9:24:21: ce:53:a5:21:1b:28:ae:67:14:cf:9d:fe:6b:8d:3a: b8:13:92:22:7b:ba:13:7d:04:79:e0:8e:54:a6:b2: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B0:70:CF:36:12:44:78:34:9C:95:3D:00:B6:C4:A3:9A:13:AF:02 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:98:c5:33:ed:08:51:14:1c:28:0d:15:8c:69:75:f2:6e:f9: 5f:de:72:1b:94:75:a7:a9:dd:df:2f:be:e7:dc:97:00:a6:44: bc:11:77:c5:cc:0a:06:8a:0e:13:4a:50:45:21:28:22:f1:de: 8f:24:5a:fe:db:fa:d8:39:77:f0:e5:d0:7e:54:c5:8a:1f:28: 30:cb:72:99:b6:b5:19:32:ac:3c:49:16:0f:61:82:c9:82:6a: d7:23:da:32:04:b6:f8:d8:76:5a:5d:aa:df:5d:53:17:97:5a: c3:9f:9c:56:42:ac:73:99:d9:54:a7:1d:b4:94:85:be:4f:99: 00:ba:a6:ab:31:db:ec:93:68:a4:15:0c:2a:43:0f:35:73:2b: 4d:5a:1c:96:79:5f:49:68:15:12:27:cd:1d:58:2c:a6:ca:0a: d4:a9:79:b8:3f:9a:b7:a2:6d:b0:08:ea:87:ab:2b:b0:b0:09: 57:0e:e9:41:30:27:7a:0a:97:d8:ab:ae:78:c6:57:51:85:cc: 7c:99:3b:b1:5e:a8:d4:48:ec:6a:3e:cb:70:77:f8:04:fb:d0: b1:3c:0f:66:95:f0:4c:ca:48:1c:02:7f:f2:a0:de:fe:02:2b: aa:08:01:ad:df:75:7b:04:e4:58:ea:8a:60:ba:e3:ff:60:7d: fa:9e:4e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwNTMwMTYxMTU2WhcNMjUwNjA2MTYxMTU2WjAYMRYwFAYD VQQDEw02ODM5ZDhjYy0zZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6awZQFFLGZiJpK+mAMUdH48v5TUjZo12UBC/H8HX+psPakaSk3RUU86W3c5 HndkQXHtfr4zm9kVaSB0ErIquAEADNzZ2dD+LTR7JeQ1ZYbfq6OaJlVdIwGUMNsC qelZIxxqR1F3KINCxjiBWH/O4Iu4C1tZG+nF720exKB9x1e6PRYjU/Wdxpwrca+I Lnnu73mzXcQEhhZU5vnioiCZ+HqqyAsZEpnZUOjJDldlBXRJ2L8U2oTQ1+frc6aD x2Tqw5X25/96tE6Cey/Sk5rv+3JPDGNyq4bm00S/tCO5JCHOU6UhGyiuZxTPnf5r jTq4E5Iie7oTfQR54I5UprLsgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWwcM82 EkR4NJyVPQC2xKOaE68CMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFmMUz7QhRFBwoDRWMaXXybvlf3nIblHWnqd3fL77n3JcApkS8EXfF zAoGig4TSlBFISgi8d6PJFr+2/rYOXfw5dB+VMWKHygwy3KZtrUZMqw8SRYPYYLJ gmrXI9oyBLb42HZaXarfXVMXl1rDn5xWQqxzmdlUpx20lIW+T5kAuqarMdvsk2ik FQwqQw81cytNWhyWeV9JaBUSJ80dWCymygrUqXm4P5q3om2wCOqHqyuwsAlXDulB MCd6CpfYq654xldRhcx8mTuxXqjUSOxqPstwd/gE+9CxPA9mlfBMykgcAn/yoN7+ AiuqCAGt33V7BORY6opguuP/YH36nk54 -----END CERTIFICATE-----Generated at Sat May 31 17:30:19 2025 by rpki-client