$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: PPKjJFhqM0foppouFpjPS5q8J2r/i1KGkfA5H28Kf/s= Subject key identifier: F9:E0:34:95:D5:F8:89:83:31:C2:CC:6C:FC:0D:F7:09:AF:7B:4F:99 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 0125 Signing time: Tue 13 May 2025 03:52:51 +0000 Manifest this update: Tue 13 May 2025 03:52:51 +0000 Manifest next update: Tue 20 May 2025 03:52:51 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: kjIS4Z/wgRhu1k7Obt7hgfiKKMV7B0DSM33n4QSULkg=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: May 13 03:52:51 2025 GMT Not After : May 20 03:52:51 2025 GMT Subject: CN=6822c213-581f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:fb:5f:3c:b5:6f:17:da:31:18:ba:3f:dd: 62:4b:0b:61:4f:fc:36:40:7d:46:1e:e3:ec:b8:4a: 31:5c:e3:d4:36:4c:2e:a3:30:b7:20:77:39:cc:cf: 09:15:7b:3c:26:50:87:2e:46:e8:04:e9:e3:9d:43: 9e:64:ee:c1:64:22:0a:3a:9a:89:ea:54:78:25:47: e5:59:66:bf:01:20:00:fa:bb:f4:a1:e0:2a:d7:e0: d3:89:e4:ef:ef:87:44:bc:07:87:a3:f0:0f:75:b0: a6:a9:77:1a:10:7f:5c:4f:ef:85:9e:a7:37:62:89: 5e:a0:1c:17:43:99:4e:81:d0:e5:37:3e:ac:6c:3b: bf:5e:35:b2:3e:ac:42:7d:1d:83:41:0e:6c:e4:57: 35:e4:18:a9:a2:80:68:87:4b:0b:f4:87:f4:f2:22: c3:d7:2a:60:22:5c:3f:f2:20:3a:b8:ca:73:21:97: 10:36:a1:0b:92:72:93:21:e3:f2:b2:eb:e2:75:31: 51:74:eb:83:f6:2b:db:7f:97:ff:82:04:99:37:1e: 03:cb:91:35:1e:47:7f:c9:12:60:e1:04:30:b2:fc: 81:7c:1c:a9:41:e0:2b:82:c1:49:87:73:fc:c5:ef: a3:bb:c0:d1:19:e2:ef:ed:59:f2:6c:2b:4f:7b:f3: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:34:95:D5:F8:89:83:31:C2:CC:6C:FC:0D:F7:09:AF:7B:4F:99 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:c2:5e:cd:fd:fc:f4:32:da:f4:f2:d5:d4:71:37:52:63:41: 63:87:5e:fe:f5:31:fc:49:bd:93:40:a1:12:0d:5c:94:ea:74: 2f:46:71:b3:aa:8b:24:2e:d1:82:b6:c5:ee:02:3e:0f:36:b7: 75:47:17:95:af:66:43:c3:6b:91:38:75:0a:cd:2a:2c:89:28: 3a:4a:09:da:46:f8:aa:97:83:aa:8a:c5:00:ef:b5:17:61:5d: b9:cd:04:1c:58:fd:75:90:ca:86:67:56:c6:3e:4d:44:66:61: 52:38:a0:14:4d:53:fb:a5:6b:aa:2b:4e:62:3a:7d:5b:32:37: 7e:9c:8b:5d:dc:d7:36:7c:77:2e:66:8e:3f:04:35:24:72:7d: dd:d5:d9:01:94:a4:9d:0e:4c:7f:60:6f:b6:6e:65:57:ea:31: d5:ff:fd:f3:da:59:a4:8a:77:72:17:db:77:14:f6:f7:fe:c7: 4b:b5:74:b5:b5:c6:5c:e3:74:b3:62:94:cb:5a:4b:1c:8a:74: 2c:f0:d6:a7:54:29:a9:c9:e6:1c:f9:0b:2f:28:54:a0:ef:92: 13:eb:e9:99:ee:c4:00:1a:60:d8:63:b0:3c:16:51:fb:3f:5b: f1:a2:e9:d8:4a:37:0f:2f:4b:0a:14:de:25:d1:1c:47:c1:57: 3c:95:a8:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNTEzMDM1MjUxWhcNMjUwNTIwMDM1MjUxWjAYMRYwFAYD VQQDEw02ODIyYzIxMy01ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWX7Xzy1bxfaMRi6P91iSwthT/w2QH1GHuPsuEoxXOPUNkwuozC3IHc5zM8J FXs8JlCHLkboBOnjnUOeZO7BZCIKOpqJ6lR4JUflWWa/ASAA+rv0oeAq1+DTieTv 74dEvAeHo/APdbCmqXcaEH9cT++Fnqc3YoleoBwXQ5lOgdDlNz6sbDu/XjWyPqxC fR2DQQ5s5Fc15BipooBoh0sL9If08iLD1ypgIlw/8iA6uMpzIZcQNqELknKTIePy suvidTFRdOuD9ivbf5f/ggSZNx4Dy5E1Hkd/yRJg4QQwsvyBfBypQeArgsFJh3P8 xe+ju8DRGeLv7VnybCtPe/OUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPngNJXV +ImDMcLMbPwN9wmve0+ZMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXwl7N/fz0Mtr08tXUcTdSY0Fjh17+9TH8Sb2TQKESDVyU6nQvRnGz qoskLtGCtsXuAj4PNrd1RxeVr2ZDw2uROHUKzSosiSg6SgnaRviql4OqisUA77UX YV25zQQcWP11kMqGZ1bGPk1EZmFSOKAUTVP7pWuqK05iOn1bMjd+nItd3Nc2fHcu Zo4/BDUkcn3d1dkBlKSdDkx/YG+2bmVX6jHV//3z2lmkindyF9t3FPb3/sdLtXS1 tcZc43SzYpTLWkscinQs8NanVCmpyeYc+QsvKFSg75IT6+mZ7sQAGmDYY7A8FlH7 P1vxounYSjcPL0sKFN4l0RxHwVc8laik -----END CERTIFICATE-----Generated at Wed May 14 08:31:05 2025 by rpki-client