$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: 0uQeqxeIHDcNPO35LkeXWYxk3zEh2K7Ex1heh4HzSf8= Subject key identifier: 35:A6:8A:D9:6B:67:D6:FB:47:0A:99:00:E1:BF:DF:8E:4E:52:D0:89 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0269 Signing time: Tue 13 May 2025 01:32:23 +0000 Manifest this update: Tue 13 May 2025 01:32:22 +0000 Manifest next update: Tue 20 May 2025 01:32:22 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: RFsMdWJXI2TgmZRSOedmM6fSyxelYF+HigV7ZiLlfa8=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: May 13 01:32:22 2025 GMT Not After : May 20 01:32:22 2025 GMT Subject: CN=6822a126-a3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:38:9d:8b:b9:85:e7:04:6b:f8:cf:94:07: f8:71:25:67:95:15:cb:c7:ef:59:be:34:61:76:3f: af:c6:24:de:19:0f:51:fa:29:44:b3:21:90:b0:f4: d5:ce:ed:75:13:03:54:50:b0:24:f9:b8:7e:25:a1: f5:e4:98:28:02:6c:bd:a6:ce:2b:a1:4e:e0:1d:39: 57:a5:df:21:40:5b:48:d9:5d:28:95:c0:a5:4c:60: df:4b:5b:11:8f:9f:f8:ca:20:32:e2:b3:7c:5c:89: 92:fa:60:79:6e:cc:12:14:ec:7b:a4:d1:b4:eb:33: 06:ed:4d:ae:da:ad:18:a7:28:bb:da:0d:f5:0c:3f: c1:37:2e:62:2f:cd:8e:68:75:48:b6:8d:77:6b:ec: 0a:63:e1:de:74:f8:49:69:fb:06:61:8c:2e:e5:00: 7c:e0:e9:f4:f0:67:e1:5a:33:d5:dc:18:bb:1e:7e: 8d:c1:a7:f6:9f:db:94:5e:08:36:aa:c0:a0:4f:e7: a3:86:bb:f2:86:c3:ac:e1:e5:38:bb:43:91:00:fc: 2e:bb:e6:09:9a:da:d5:7e:5e:b9:c4:15:9e:d4:69: 8d:14:20:a9:43:53:89:3f:5d:78:5e:b0:00:4e:19: ef:ac:83:f9:e0:22:ca:f1:bd:e1:3f:89:6d:b8:1e: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A6:8A:D9:6B:67:D6:FB:47:0A:99:00:E1:BF:DF:8E:4E:52:D0:89 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:6b:ff:06:e0:ee:89:19:e8:57:63:c6:1e:76:21:f6:2c: 85:fe:e7:0b:eb:df:d6:7c:a9:44:43:48:c0:09:67:08:d6:62: 1a:d5:9f:61:f0:e6:9f:ac:0b:bf:8a:ed:94:6f:d2:fa:69:5f: a6:ff:15:59:47:ca:94:ff:98:ca:62:c6:1f:e7:88:ff:c0:2b: 0b:99:0b:cc:ec:e3:47:d3:ca:40:52:3f:89:23:a4:78:69:18: 8f:2e:74:0f:6b:ec:bd:8b:e3:bd:07:f7:45:de:e7:b3:31:27: 9f:ef:ac:dd:31:4b:92:3b:4f:08:47:9e:a5:e5:91:05:b7:44: f5:75:1c:bc:69:c8:bb:b2:42:d9:b7:3d:b4:5c:45:df:1c:f7: 4f:70:e6:c9:05:ae:c2:65:cf:63:0a:06:a5:84:07:75:88:54: 26:18:54:b3:3f:29:1b:37:8a:d1:f6:51:7c:75:58:e4:fe:c0: 81:90:0c:3b:29:c9:49:dc:48:98:90:82:1f:9a:c8:f2:88:01: 51:45:6d:44:4e:6c:3f:56:b0:0d:9b:2c:43:c0:32:fa:56:f4: 88:85:94:c0:da:a8:ee:4a:f4:07:8f:75:77:6f:17:9b:46:e5: 6d:53:84:02:0a:26:16:6d:68:48:0b:c7:06:5d:b8:47:39:a4: fb:09:11:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNTEzMDEzMjIyWhcNMjUwNTIwMDEzMjIyWjAYMRYwFAYD VQQDEw02ODIyYTEyNi1hM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt904nYu5hecEa/jPlAf4cSVnlRXLx+9ZvjRhdj+vxiTeGQ9R+ilEsyGQsPTV zu11EwNUULAk+bh+JaH15JgoAmy9ps4roU7gHTlXpd8hQFtI2V0olcClTGDfS1sR j5/4yiAy4rN8XImS+mB5bswSFOx7pNG06zMG7U2u2q0Ypyi72g31DD/BNy5iL82O aHVIto13a+wKY+HedPhJafsGYYwu5QB84On08GfhWjPV3Bi7Hn6Nwaf2n9uUXgg2 qsCgT+ejhrvyhsOs4eU4u0ORAPwuu+YJmtrVfl65xBWe1GmNFCCpQ1OJP114XrAA ThnvrIP54CLK8b3hP4ltuB5L+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWmitlr Z9b7RwqZAOG/345OUtCJMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGpWv/BuDuiRnoV2PGHnYh9iyF/ucL69/WfKlEQ0jACWcI1mIa1Z9h 8OafrAu/iu2Ub9L6aV+m/xVZR8qU/5jKYsYf54j/wCsLmQvM7ONH08pAUj+JI6R4 aRiPLnQPa+y9i+O9B/dF3uezMSef76zdMUuSO08IR56l5ZEFt0T1dRy8aci7skLZ tz20XEXfHPdPcObJBa7CZc9jCgalhAd1iFQmGFSzPykbN4rR9lF8dVjk/sCBkAw7 KclJ3EiYkIIfmsjyiAFRRW1ETmw/VrANmyxDwDL6VvSIhZTA2qjuSvQHj3V3bxeb RuVtU4QCCiYWbWhIC8cGXbhHOaT7CRFo -----END CERTIFICATE-----Generated at Wed May 14 01:04:41 2025 by rpki-client