$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: 8d6O/kUVQO/bzo9s6/RnQHlHSHrNAtVvqWC5NszeoDU= Subject key identifier: AD:49:51:49:11:56:18:89:90:BB:C6:50:C8:CD:A0:60:E8:6A:73:62 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 25 Signing time: Sat 17 May 2025 07:17:07 +0000 Manifest this update: Sat 17 May 2025 07:17:06 +0000 Manifest next update: Sat 24 May 2025 07:17:06 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: 3GaKRl102BJkCsidek9WLNQ6sZj3p5+O4TOLCgQBRD0=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: May 17 07:17:06 2025 GMT Not After : May 24 07:17:06 2025 GMT Subject: CN=682837f3-fb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:51:f0:b9:ab:fb:7a:4a:1b:14:1c:e2:47: 7d:7f:cc:6f:d0:ea:6b:c9:d3:e5:65:84:22:2f:68: fb:67:9f:4f:6f:df:e4:a7:90:59:d3:ad:4d:ec:7a: 69:5e:ed:8b:d9:7d:4e:77:a5:28:c0:60:f0:b1:d9: 50:2b:fb:fb:dc:72:9e:64:34:bb:d8:15:0c:7e:1e: 38:10:43:f8:3c:b9:55:ea:f3:48:29:59:d4:48:fe: 5a:da:fa:5f:65:bf:61:d3:ed:b4:3e:1f:7a:32:a9: 1d:e2:1e:31:c4:47:d2:51:f0:c0:3c:5b:9b:f6:3b: 1a:be:fb:52:fa:2e:88:f4:fd:99:6b:56:7b:a9:9f: 10:17:32:f8:90:75:b8:15:e6:cd:75:bc:a0:1f:85: 16:9f:8c:1b:0a:18:0e:c8:11:0b:6b:85:f1:c3:fe: f4:ff:1d:43:1b:1e:65:b5:2d:57:22:7f:2b:e2:c5: 5d:ac:87:35:fb:1a:56:a5:27:74:7b:46:82:3e:19: 9e:df:e6:6f:2e:0d:23:b8:c5:64:46:45:d1:c4:a2: 21:47:4c:e3:91:88:54:70:1d:57:bb:1a:db:d2:c7: db:0d:9b:be:60:03:5e:de:a2:6a:8b:d7:75:23:b9: 1a:6b:5f:ab:80:86:1e:e6:5e:aa:6a:08:0b:37:1b: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:51:49:11:56:18:89:90:BB:C6:50:C8:CD:A0:60:E8:6A:73:62 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9e:1f:8f:77:28:53:9d:24:d7:87:60:5c:82:70:13:e6:0b: e8:82:64:46:2d:b1:bb:e1:bd:69:9d:19:94:a7:b4:4c:f2:01: 95:10:5a:17:8f:00:5b:1b:4c:b5:48:9e:18:cb:a8:d1:2e:a5: 42:e6:a0:14:47:e0:d2:83:73:65:b6:bb:e8:95:5d:3e:74:18: 68:c9:17:35:be:9f:23:00:77:0d:f0:d6:d7:ea:e9:9a:e9:4f: 88:e5:6d:ee:3b:69:86:b1:51:d2:4a:24:c1:c6:49:88:b3:6e: 04:42:30:57:1f:9b:c1:ec:c9:15:c9:91:dc:8e:95:aa:f9:36: bf:ed:03:92:d3:bd:55:89:be:99:c4:aa:63:26:24:9a:32:a2: e1:5f:51:26:f7:3d:f8:49:af:b4:04:7c:ab:38:d2:4b:a5:a4: 45:04:43:5c:63:92:ec:9f:fb:1f:43:9f:58:87:94:94:10:61: e7:d5:5f:82:37:fe:f5:71:3c:b1:54:92:21:ca:3a:bc:27:28: 84:5e:fb:2a:c7:03:df:75:04:b4:a7:d2:ed:65:aa:3a:cc:c0: a5:19:73:04:95:11:84:08:13:19:c7:54:bb:19:2e:60:4c:34: 32:bb:ba:c4:c0:4f:21:32:58:96:6b:28:a8:50:ec:e6:e7:22: fe:4c:38:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA1MTcwNzE3MDZaFw0yNTA1MjQwNzE3MDZaMBgxFjAUBgNV BAMTDTY4MjgzN2YzLWZiNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2DlHwuav7ekobFBziR31/zG/Q6mvJ0+VlhCIvaPtnn09v3+SnkFnTrU3semle 7YvZfU53pSjAYPCx2VAr+/vccp5kNLvYFQx+HjgQQ/g8uVXq80gpWdRI/lra+l9l v2HT7bQ+H3oyqR3iHjHER9JR8MA8W5v2Oxq++1L6Loj0/ZlrVnupnxAXMviQdbgV 5s11vKAfhRafjBsKGA7IEQtrhfHD/vT/HUMbHmW1LVcifyvixV2shzX7GlalJ3R7 RoI+GZ7f5m8uDSO4xWRGRdHEoiFHTOORiFRwHVe7GtvSx9sNm75gA17eomqL13Uj uRprX6uAhh7mXqpqCAs3G8/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrUlRSRFW GImQu8ZQyM2gYOhqc2IwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFyeH493KFOdJNeHYFyCcBPmC+iCZEYtsbvhvWmdGZSntEzyAZUQWheP AFsbTLVInhjLqNEupULmoBRH4NKDc2W2u+iVXT50GGjJFzW+nyMAdw3w1tfq6Zrp T4jlbe47aYaxUdJKJMHGSYizbgRCMFcfm8HsyRXJkdyOlar5Nr/tA5LTvVWJvpnE qmMmJJoyouFfUSb3PfhJr7QEfKs40kulpEUEQ1xjkuyf+x9Dn1iHlJQQYefVX4I3 /vVxPLFUkiHKOrwnKIRe+yrHA991BLSn0u1lqjrMwKUZcwSVEYQIExnHVLsZLmBM NDK7usTATyEyWJZrKKhQ7ObnIv5MOCA= -----END CERTIFICATE-----Generated at Sat May 17 11:20:30 2025 by rpki-client