$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json) Hash identifier: BKOxMHRDXlhXYLmwl2hG83sIAmpplE+ts9Mkaq32CnE= Subject key identifier: A7:6B:C5:62:F1:8E:2D:F2:94:FB:24:8F:11:E5:B8:46:F2:52:3D:52 Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft Manifest number: 3CDE Signing time: Fri 30 May 2025 15:18:57 +0000 Manifest this update: Fri 30 May 2025 15:18:56 +0000 Manifest next update: Fri 06 Jun 2025 15:18:56 +0000 Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: 1kF7hBhy1nhn+VIbS/q/c7IWzVwT1sgk6NnXvZKgzFs=) 2: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: bjYMDtpJZNg5Y2L6Uj46FEgAtSCkkttriVFUrF2NgNE=) 3: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: luZqCIjqnlKYbUcpH0XD0h67wo+vIREwLR7SC2P9HUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Validity Not Before: May 30 15:18:56 2025 GMT Not After : Jun 6 15:18:56 2025 GMT Subject: CN=6839cc61-4a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:0d:7a:49:8d:a5:ae:5e:44:cb:79:bd:d5: 3c:a5:d7:53:e3:1e:20:ee:e8:a7:f7:16:2b:9a:a6: 38:ec:5b:26:19:19:6b:c9:8d:d6:e1:25:1a:a1:47: 48:ad:29:44:68:0f:7c:c5:82:ff:c9:97:b1:1d:4e: 54:9f:98:eb:cd:8f:56:5f:2b:8d:9c:aa:c7:ab:8c: fd:02:e2:6d:6e:40:73:75:08:ec:24:4d:77:e2:b0: b5:2a:cb:ff:32:85:88:6c:a2:45:a2:80:17:37:99: cd:ce:cf:f2:b7:24:86:07:d1:3f:a6:43:88:2a:31: f6:7d:37:40:ba:24:7a:c2:98:e1:a7:78:c5:f0:7c: 39:9d:da:f7:c2:e6:14:0a:c5:cf:cc:18:86:50:17: 6a:e6:c9:9d:93:65:2c:d5:7a:74:f2:ff:76:e9:53: cd:e5:bd:54:d3:e9:a8:07:84:a8:62:87:48:41:00: b0:39:84:26:ac:3f:fb:2b:f3:0d:7b:5e:77:74:1c: d5:7f:21:55:33:10:1a:9c:0a:d3:a5:02:fb:3f:6a: fe:02:25:e8:18:13:e9:02:7c:48:3f:9d:f7:5c:38: 4a:1b:fb:77:2b:76:ed:84:5d:2f:a8:a8:da:b7:fe: b0:79:ba:16:d7:f0:65:9b:c7:d0:17:1c:47:13:6e: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:C5:62:F1:8E:2D:F2:94:FB:24:8F:11:E5:B8:46:F2:52:3D:52 X509v3 Authority Key Identifier: keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:57:a6:eb:51:4d:f5:cb:c9:4c:b3:5e:7b:50:e5:b0:4c:ca: 1d:12:9b:c5:ee:8f:ca:bb:5b:07:58:d1:39:0a:b4:d2:cf:c9: b6:32:44:81:78:9b:9e:bd:52:9c:54:88:57:de:db:ff:71:b7: 6f:f4:eb:32:21:05:a2:16:b0:07:af:7c:62:6f:e3:60:11:98: d8:f5:aa:83:ff:8c:e1:41:79:23:2f:b7:af:f7:eb:23:d7:5b: 76:ba:34:a2:fe:1f:15:53:0a:68:37:67:ff:52:a2:16:bb:0c: 80:21:ed:97:88:1c:52:f8:32:31:30:89:57:63:c7:67:61:95: 96:65:2c:84:5d:67:ee:37:9b:e2:d9:ee:7e:e8:54:97:64:52: f8:e6:9e:3c:cc:d4:72:ed:88:41:d1:28:08:1c:19:af:0e:c9: 1b:eb:2c:78:91:35:04:64:f9:ee:df:67:8d:aa:4a:76:9a:ef: f4:fb:18:5e:b6:94:2a:ba:f1:a1:b2:09:42:c3:ab:a6:b2:28: e0:2c:2a:d5:bd:40:1d:18:cc:22:5b:65:48:3e:d1:10:14:58: ad:ee:84:e5:dd:22:96:2a:b4:d1:63:5f:9b:9a:ef:ae:2f:0e: 84:70:68:fc:be:11:e3:0d:06:4b:49:68:f7:b2:d2:96:ab:8f: 13:50:e1:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB MzI1OTI4RkQwHhcNMjUwNTMwMTUxODU2WhcNMjUwNjA2MTUxODU2WjAYMRYwFAYD VQQDEw02ODM5Y2M2MS00YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48cNekmNpa5eRMt5vdU8pddT4x4g7uin9xYrmqY47FsmGRlryY3W4SUaoUdI rSlEaA98xYL/yZexHU5Un5jrzY9WXyuNnKrHq4z9AuJtbkBzdQjsJE134rC1Ksv/ MoWIbKJFooAXN5nNzs/ytySGB9E/pkOIKjH2fTdAuiR6wpjhp3jF8Hw5ndr3wuYU CsXPzBiGUBdq5smdk2Us1Xp08v926VPN5b1U0+moB4SoYodIQQCwOYQmrD/7K/MN e153dBzVfyFVMxAanArTpQL7P2r+AiXoGBPpAnxIP533XDhKG/t3K3bthF0vqKja t/6weboW1/Blm8fQFxxHE25f2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdrxWLx ji3ylPskjxHluEbyUj1SMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADV6brUU31y8lMs157UOWwTModEpvF7o/Ku1sHWNE5CrTSz8m2MkSB eJuevVKcVIhX3tv/cbdv9OsyIQWiFrAHr3xib+NgEZjY9aqD/4zhQXkjL7ev9+sj 11t2ujSi/h8VUwpoN2f/UqIWuwyAIe2XiBxS+DIxMIlXY8dnYZWWZSyEXWfuN5vi 2e5+6FSXZFL45p48zNRy7YhB0SgIHBmvDskb6yx4kTUEZPnu32eNqkp2mu/0+xhe tpQquvGhsglCw6umsijgLCrVvUAdGMwiW2VIPtEQFFit7oTl3SKWKrTRY1+bmu+u Lw6EcGj8vhHjDQZLSWj3stKWq48TUOEc -----END CERTIFICATE-----Generated at Sat May 31 16:32:19 2025 by rpki-client