$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: PLBkOKwIerUb76M5x6qK/1aXIro1lez9FSEVqf96/gk= Subject key identifier: 99:57:3C:8A:17:83:36:76:47:F2:6D:70:00:80:46:03:EC:B4:51:9C Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 097C Signing time: Fri 30 May 2025 21:00:24 +0000 Manifest this update: Fri 30 May 2025 21:00:23 +0000 Manifest next update: Fri 06 Jun 2025 21:00:23 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: 3opH+XiV8Wt2ks+CAIfbpVHj4f6WNjDvEDPBDteqjfY=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 9yZSRRj+c0xUC0wLONS1pajEgEnXcu6/+H0zYnjOy0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: May 30 21:00:23 2025 GMT Not After : Jun 6 21:00:23 2025 GMT Subject: CN=683a1c68-ed3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:de:2c:0b:49:73:ac:7b:8f:fa:bc:53:06: d8:17:e1:ff:74:ec:4f:9f:67:0f:93:c1:d4:00:76: 23:69:d5:63:74:da:62:5d:ef:32:d3:c6:71:49:be: 2c:cc:11:f8:87:2d:1a:65:6b:ab:96:1c:b1:ac:35: 92:1e:9f:0e:23:70:6c:23:45:83:40:61:91:b7:cd: 00:ab:23:89:be:8e:36:67:f6:3b:6a:be:60:af:b4: c9:85:c6:a1:0c:8b:0e:cc:76:70:2e:03:39:58:b9: 60:51:a5:a7:19:d9:5e:43:1c:84:30:18:49:f4:db: d0:3a:2f:61:28:35:61:64:e3:4d:5c:11:a1:7e:a3: 0b:79:d1:50:92:98:2b:a8:12:c6:12:ae:53:71:9e: d6:41:3c:ab:72:93:e4:0e:01:cb:24:8c:11:d7:a0: 90:3a:b8:aa:ca:b7:f9:d4:2e:9c:dc:c5:f9:7b:d3: e4:2b:ec:e7:d1:ce:05:e1:4e:e9:41:39:12:92:ac: 0b:54:7e:30:f8:a9:1e:3b:cc:bd:15:83:7c:c8:ab: ac:8c:31:ed:75:bd:3d:b8:09:88:e0:10:2a:47:fd: 6d:4f:db:6c:4d:c2:b3:9b:a6:e9:02:08:f8:e7:e6: e3:18:89:61:66:55:5f:51:ac:38:64:7a:82:26:74: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:3C:8A:17:83:36:76:47:F2:6D:70:00:80:46:03:EC:B4:51:9C X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:f1:50:f3:eb:c0:c9:c2:4f:78:cb:7c:46:c3:ed:0a:71: f8:ad:e4:c6:a0:72:d8:aa:a0:8d:d0:d1:ef:f3:74:24:94:1a: b6:62:14:ec:a2:e2:d6:72:ea:34:de:10:92:8b:65:9d:71:d0: 0e:01:84:06:79:c5:2f:e8:27:55:a2:bb:4e:92:a3:0d:e4:d2: 14:a9:26:b7:a7:3f:a6:25:cd:17:f4:60:1c:95:bb:c3:cd:97: b0:bf:36:fd:4b:dd:27:8e:62:5a:6a:78:c5:fb:9b:53:c9:58: f7:34:f2:1a:e1:fd:4a:4b:1e:94:c2:3e:07:24:a5:81:2c:47: 88:88:10:ee:68:c1:c1:3b:f8:f9:f7:1d:11:fd:0f:37:af:b8: c7:27:40:af:b6:c8:88:6b:eb:96:4e:8c:e0:4d:13:01:61:19: fe:87:91:df:e0:d9:81:16:e8:a3:2e:e2:0f:80:90:9b:d0:a2: 33:6f:08:35:ed:54:5d:83:57:98:f3:6b:39:8f:57:3a:53:be: f2:bb:92:f4:96:e3:f4:ba:57:2c:bf:c9:57:98:07:14:91:fb: 93:aa:64:77:4e:c9:8d:bc:63:83:a7:0f:d0:0d:ad:f7:3e:75: f8:35:04:41:6e:bc:95:c8:12:b0:4e:21:1e:f2:d4:30:e8:f5: bb:bc:8c:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNTMwMjEwMDIzWhcNMjUwNjA2MjEwMDIzWjAYMRYwFAYD VQQDEw02ODNhMWM2OC1lZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI7eLAtJc6x7j/q8UwbYF+H/dOxPn2cPk8HUAHYjadVjdNpiXe8y08ZxSb4s zBH4hy0aZWurlhyxrDWSHp8OI3BsI0WDQGGRt80AqyOJvo42Z/Y7ar5gr7TJhcah DIsOzHZwLgM5WLlgUaWnGdleQxyEMBhJ9NvQOi9hKDVhZONNXBGhfqMLedFQkpgr qBLGEq5TcZ7WQTyrcpPkDgHLJIwR16CQOriqyrf51C6c3MX5e9PkK+zn0c4F4U7p QTkSkqwLVH4w+KkeO8y9FYN8yKusjDHtdb09uAmI4BAqR/1tT9tsTcKzm6bpAgj4 5+bjGIlhZlVfUaw4ZHqCJnT/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlXPIoX gzZ2R/JtcACARgPstFGcMB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWJfFQ8+vAycJPeMt8RsPtCnH4reTGoHLYqqCN0NHv83QklBq2YhTs ouLWcuo03hCSi2WdcdAOAYQGecUv6CdVortOkqMN5NIUqSa3pz+mJc0X9GAclbvD zZewvzb9S90njmJaanjF+5tTyVj3NPIa4f1KSx6Uwj4HJKWBLEeIiBDuaMHBO/j5 9x0R/Q83r7jHJ0CvtsiIa+uWTozgTRMBYRn+h5Hf4NmBFuijLuIPgJCb0KIzbwg1 7VRdg1eY82s5j1c6U77yu5L0luP0ulcsv8lXmAcUkfuTqmR3TsmNvGODpw/QDa33 PnX4NQRBbryVyBKwTiEe8tQw6PW7vIx5 -----END CERTIFICATE-----Generated at Sat May 31 15:18:04 2025 by rpki-client