$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: 5mgr9RJ+Z6IFlpEaGax0o743l7sIVSkpnby8MtklaFU= Subject key identifier: 22:13:D7:F5:C3:38:24:CB:04:BC:7B:71:3D:5B:AA:E3:A4:62:58:EF Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C4A Signing time: Wed 14 May 2025 18:31:24 +0000 Manifest this update: Wed 14 May 2025 18:31:24 +0000 Manifest next update: Wed 21 May 2025 18:31:24 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: TR7CRNl2QjJOEpWJQDTyMpzVQl0EB/dzAs9AOQ5vO44=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: May 14 18:31:24 2025 GMT Not After : May 21 18:31:24 2025 GMT Subject: CN=6824e17c-0936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:c0:0e:fa:db:23:6e:b3:8d:f6:4a:b6:20: 02:80:b8:8d:b5:eb:62:7d:42:33:8c:12:30:54:d7: 15:7a:f2:9c:1e:05:30:25:72:6a:8d:54:66:35:29: 43:af:b4:1e:68:11:a4:3c:b8:17:be:29:22:16:52: 38:a8:5f:4d:ae:87:75:70:28:28:9e:37:da:98:f5: 42:ba:cb:8d:ca:16:54:73:e5:79:c2:73:a1:97:80: 1e:8a:2d:5d:91:f8:0c:d9:ef:14:e1:e7:ea:f6:e4: 30:53:3b:4a:78:16:47:c4:7a:5d:59:5e:87:ac:34: 45:59:51:5e:89:39:a5:2e:db:8a:fa:33:9f:e5:bb: ff:04:d2:ae:b2:9e:a8:27:55:46:07:d1:ff:7d:64: 6f:02:67:73:42:53:1b:06:5f:68:a4:d7:a9:0c:10: 1f:24:ee:0b:6b:6c:49:3c:32:3e:fc:c2:60:72:ba: 4c:87:63:83:bd:f2:41:5c:bd:4e:87:12:e6:a9:e6: 0b:93:fd:f9:ae:55:f6:d1:b6:18:d3:06:fa:8c:96: 21:ab:c5:7e:b2:d9:6d:3d:6b:71:74:ac:97:55:6b: 08:29:8c:e3:a0:2f:77:32:86:1b:b3:21:cd:69:09: 5b:66:ac:e2:e2:3f:be:d9:0d:44:5a:af:3b:75:29: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:13:D7:F5:C3:38:24:CB:04:BC:7B:71:3D:5B:AA:E3:A4:62:58:EF X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:54:19:a0:ce:8e:69:29:b3:9c:28:3a:04:a4:2d:f9:10:1a: fc:fe:e0:45:36:d9:a2:eb:28:42:bf:5e:91:9f:bb:82:c6:69: 78:89:b1:99:cf:30:08:11:3c:da:99:2f:8b:b6:76:73:e7:74: 5d:c1:40:d8:11:c1:c1:53:07:e7:08:b0:0a:91:6c:a8:d7:de: 25:1c:54:d5:2e:94:79:cd:51:cc:b1:e5:77:4b:2a:6f:a5:13: fe:a6:f0:b5:ae:02:78:41:77:ca:58:ed:5b:98:64:c2:8d:08: 99:38:2a:c3:c1:ea:67:82:42:8b:d3:c2:68:b6:dd:02:82:c8: 27:3c:5c:a9:19:08:cf:bc:7b:30:4e:e2:11:b8:34:36:91:eb: 47:58:42:e5:1f:6c:9c:1e:b2:c3:96:e1:6f:5d:12:16:00:f7: 90:43:96:b2:ea:74:2c:2e:3d:18:3c:96:ec:b1:1a:39:20:0c: 3d:7c:06:8a:6a:e1:e4:f4:be:82:9a:64:9c:97:0c:81:11:05: d8:8d:4b:c0:5f:f5:80:14:28:91:21:18:42:38:66:f5:85:f5: cc:84:12:f7:a8:5f:00:40:14:23:9c:c2:e1:09:ed:01:aa:4e: 7b:2d:e3:27:0a:9b:a5:e0:bb:0c:61:b5:45:5d:a7:cb:bb:73: a2:1f:bb:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUwNTE0MTgzMTI0WhcNMjUwNTIxMTgzMTI0WjAYMRYwFAYD VQQDEw02ODI0ZTE3Yy0wOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYDADvrbI26zjfZKtiACgLiNtetifUIzjBIwVNcVevKcHgUwJXJqjVRmNSlD r7QeaBGkPLgXvikiFlI4qF9Nrod1cCgonjfamPVCusuNyhZUc+V5wnOhl4Aeii1d kfgM2e8U4efq9uQwUztKeBZHxHpdWV6HrDRFWVFeiTmlLtuK+jOf5bv/BNKusp6o J1VGB9H/fWRvAmdzQlMbBl9opNepDBAfJO4La2xJPDI+/MJgcrpMh2ODvfJBXL1O hxLmqeYLk/35rlX20bYY0wb6jJYhq8V+stltPWtxdKyXVWsIKYzjoC93MoYbsyHN aQlbZqzi4j++2Q1EWq87dSl1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIT1/XD OCTLBLx7cT1bquOkYljvMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZVBmgzo5pKbOcKDoEpC35EBr8/uBFNtmi6yhCv16Rn7uCxml4ibGZ zzAIETzamS+LtnZz53RdwUDYEcHBUwfnCLAKkWyo194lHFTVLpR5zVHMseV3Sypv pRP+pvC1rgJ4QXfKWO1bmGTCjQiZOCrDwepngkKL08Jott0CgsgnPFypGQjPvHsw TuIRuDQ2ketHWELlH2ycHrLDluFvXRIWAPeQQ5ay6nQsLj0YPJbssRo5IAw9fAaK auHk9L6CmmSclwyBEQXYjUvAX/WAFCiRIRhCOGb1hfXMhBL3qF8AQBQjnMLhCe0B qk57LeMnCpul4LsMYbVFXafLu3OiH7vO -----END CERTIFICATE-----Generated at Thu May 15 19:37:24 2025 by rpki-client