$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json) Hash identifier: DaysgU2AzPc9W03PFT1QpvhGpbtPeOlfNj0YPkxTaC4= Subject key identifier: 1A:66:66:94:BB:85:5A:24:03:3A:EA:5C:71:02:40:D4:BE:DC:04:64 Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft Manifest number: 1D Signing time: Tue 13 May 2025 07:09:22 +0000 Manifest this update: Tue 13 May 2025 07:09:21 +0000 Manifest next update: Tue 20 May 2025 07:09:21 +0000 Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: jh0ELRAYcw8XAfDbNK7+DQ3c+tMffuCZf/7SGyWFBvY=) 2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Validity Not Before: May 13 07:09:21 2025 GMT Not After : May 20 07:09:21 2025 GMT Subject: CN=6822f021-afe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:d5:9f:d3:1b:ed:2a:ab:ec:d8:7d:63:99: 97:ad:51:50:c0:05:bf:29:34:c1:c4:69:d7:1f:7a: 78:30:12:3c:0e:94:40:95:e3:5d:39:4a:3e:fb:17: d1:49:62:f0:5c:6e:90:26:e3:a9:72:71:bb:6f:d1: d6:3e:35:57:24:e5:a8:69:ff:79:08:55:fa:95:e7: 93:20:e6:db:e7:db:99:ed:ea:21:0b:ee:92:2b:92: d9:da:eb:5c:48:11:4c:69:45:a3:83:ba:c5:76:c0: a1:47:44:5f:0a:f1:a3:d2:bd:0b:06:c6:a2:42:90: 8e:a8:15:c3:35:50:fa:95:98:0c:39:9e:c8:56:31: 90:06:de:2a:8f:b4:11:d3:d4:d8:ea:0d:d8:1f:e7: 41:42:b5:46:cb:f1:28:3d:09:f4:c6:eb:dc:49:e9: ea:8f:8b:5b:80:5a:ef:25:43:38:6a:46:45:62:32: e3:a0:b3:35:1e:d0:5b:36:da:85:8c:0b:bf:42:9a: ce:77:7d:29:39:1e:ac:02:87:37:f0:27:cb:5c:eb: 83:ac:2a:1c:ac:55:99:c0:b7:9c:81:1a:14:c0:f9: cc:7b:ff:3d:d1:84:97:fe:a8:1d:91:81:c0:63:3e: c4:5d:aa:6a:37:bb:94:92:07:c5:e5:0d:8e:20:a6: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:66:94:BB:85:5A:24:03:3A:EA:5C:71:02:40:D4:BE:DC:04:64 X509v3 Authority Key Identifier: keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:67:4d:cb:49:d6:eb:3e:2a:5a:3a:2e:ca:64:39:9d:07: d4:01:30:ca:58:a7:25:7a:7f:71:35:de:75:29:59:99:0b:8d: 51:e3:5a:45:9a:ea:99:30:46:0b:2d:c1:e4:1d:13:38:14:1e: 82:57:14:c1:b3:9f:ef:30:88:94:12:8a:2e:29:d4:e6:2a:38: f3:a9:58:fa:e1:b2:87:b8:cb:77:47:96:7d:9f:de:b0:2a:01: 8c:3d:82:7c:d9:25:1e:b2:d9:da:90:4d:1c:0b:55:39:15:85: 64:f4:5c:a7:16:ae:60:88:c1:fe:db:19:48:a6:00:af:0f:84: 69:92:02:48:f1:52:f1:83:35:0d:56:0c:34:43:26:2c:87:f9: 49:bf:ac:86:bf:69:9a:13:57:82:07:59:45:f6:a1:b5:45:ea: ea:ca:d7:e8:36:4b:56:e0:31:b5:2b:85:7a:f4:af:08:c6:f5: a6:63:36:5a:a6:f3:f8:b1:08:c5:93:15:79:b4:d6:99:a3:9c: 04:c7:19:ce:34:5a:11:f8:b2:7e:ee:8e:08:9c:a6:56:f2:71: 00:8d:90:a2:66:27:e9:f5:11:81:54:42:e5:30:c4:bf:db:ee: 96:06:96:e8:19:6c:32:ac:1d:22:25:da:3b:70:01:62:24:ca: db:fb:33:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTMzMDExMC8GA1UEBRMoRkJGODEyQTBCOUFBOEFFRDYyMTg3NkM4OTIwMUZGRjEw NDMyQjY5NzAeFw0yNTA1MTMwNzA5MjFaFw0yNTA1MjAwNzA5MjFaMBgxFjAUBgNV BAMTDTY4MjJmMDIxLWFmZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYgdWf0xvtKqvs2H1jmZetUVDABb8pNMHEadcfengwEjwOlECV4105Sj77F9FJ YvBcbpAm46lycbtv0dY+NVck5ahp/3kIVfqV55Mg5tvn25nt6iEL7pIrktna61xI EUxpRaODusV2wKFHRF8K8aPSvQsGxqJCkI6oFcM1UPqVmAw5nshWMZAG3iqPtBHT 1NjqDdgf50FCtUbL8Sg9CfTG69xJ6eqPi1uAWu8lQzhqRkViMuOgszUe0Fs22oWM C79Cms53fSk5HqwChzfwJ8tc64OsKhysVZnAt5yBGhTA+cx7/z3RhJf+qB2RgcBj PsRdqmo3u5SSB8XlDY4gprVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGmZmlLuF WiQDOupccQJA1L7cBGQwHwYDVR0jBBgwFoAU+/gSoLmqiu1iGHbIkgH/8QQytpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMzMwL0FBRTQ5QTM4MDYw RjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV9nU29MbXFpdTFpR0hiSWtnSF84UVF5dHBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MzMwL0FBRTQ5QTM4MDYwRjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUx aUdIYklrZ0hfOFFReXRwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCQZ03LSdbrPipaOi7KZDmdB9QBMMpYpyV6f3E13nUpWZkLjVHjWkWa 6pkwRgstweQdEzgUHoJXFMGzn+8wiJQSii4p1OYqOPOpWPrhsoe4y3dHln2f3rAq AYw9gnzZJR6y2dqQTRwLVTkVhWT0XKcWrmCIwf7bGUimAK8PhGmSAkjxUvGDNQ1W DDRDJiyH+Um/rIa/aZoTV4IHWUX2obVF6urK1+g2S1bgMbUrhXr0rwjG9aZjNlqm 8/ixCMWTFXm01pmjnATHGc40WhH4sn7ujgicplbycQCNkKJmJ+n1EYFUQuUwxL/b 7pYGlugZbDKsHSIl2jtwAWIkytv7M6U= -----END CERTIFICATE-----Generated at Wed May 14 09:39:04 2025 by rpki-client