$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: j4XHrBiKTP/fMwkbmnDd5FLs2kRD/9nLqEMyMnXRT2I= Subject key identifier: 2E:18:06:5F:4A:C3:8C:B6:90:59:0D:33:45:39:42:B0:36:71:99:77 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C3E Signing time: Fri 16 May 2025 18:38:01 +0000 Manifest this update: Fri 16 May 2025 18:38:00 +0000 Manifest next update: Fri 23 May 2025 18:38:00 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: ZDoMqsP9ToqM5mPKai0JX7a6fxWvZCUpZ/VyVnLWc+E=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: May 16 18:38:00 2025 GMT Not After : May 23 18:38:00 2025 GMT Subject: CN=68278608-6328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:e5:ec:09:7c:f0:71:f6:af:fd:cb:0b:be: c6:6f:61:53:16:71:02:48:b0:5d:ea:0f:76:1d:5f: 3d:c4:3f:65:eb:ab:97:bc:e1:f4:ee:89:5c:00:1c: f3:54:6f:fc:1b:10:02:61:2a:7d:d8:dd:34:b8:a1: bb:8f:bf:b9:a0:f3:0d:10:bf:96:33:29:be:c4:71: 4c:70:3d:aa:81:c1:d8:7b:b2:f6:76:55:6f:9a:31: b9:54:3b:dc:06:ff:7d:55:f4:af:fa:28:4f:1a:c8: 88:86:42:87:b6:56:b5:ae:cb:77:1a:f0:f5:96:5c: c7:9d:7a:2c:24:70:de:bc:ce:48:04:16:fc:71:e8: 2e:77:7e:a3:eb:c2:82:21:98:d0:56:00:27:2c:4c: cf:a3:ac:3e:5c:9c:1e:6c:f7:41:3f:b3:a2:f8:6d: 3b:d7:94:f6:1d:a2:da:5c:4e:15:d4:d9:fc:d8:8f: 15:4d:46:fc:6f:a7:14:5f:6e:f1:4b:b2:0c:3d:42: 14:d5:c8:60:90:bf:cb:38:96:e1:53:b5:b1:11:be: ca:82:ae:65:73:15:f7:36:85:61:6f:b3:13:28:8c: 76:dd:42:c8:dd:58:c8:9a:b7:dd:cc:e6:8b:83:6c: 7e:bb:4c:49:f2:ae:b4:28:c5:4b:f4:cf:a3:d2:fc: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:18:06:5F:4A:C3:8C:B6:90:59:0D:33:45:39:42:B0:36:71:99:77 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:a0:74:27:c2:6d:11:21:09:4a:4a:59:15:9c:e9:d6:f2:f8: 3e:1a:d9:10:a9:de:e6:62:f9:f0:ec:d1:98:a7:69:96:14:6b: f1:2a:c7:5e:45:1f:ac:b6:f7:1d:50:53:61:0f:64:a1:28:d0: c3:c7:56:e9:39:12:ec:70:12:47:e0:ae:58:6c:4a:2c:84:2f: 65:33:86:87:89:d0:0f:d4:6b:1c:5d:20:f5:0e:a3:91:ce:d5: 75:24:76:0a:5c:cb:03:69:64:c0:75:ee:7e:20:c9:9e:50:aa: e3:47:25:a7:38:0d:9c:92:4b:fd:43:6f:30:53:0f:90:88:83: 61:82:d0:90:30:71:40:2e:a3:59:cb:63:5e:93:ad:9d:4c:ff: b9:7c:ca:1b:93:71:22:3e:4b:8c:b6:26:36:84:b5:bb:06:e1: 9f:66:d2:65:fd:a0:47:76:23:76:7b:0a:7d:20:44:f0:45:42: e4:d9:b0:22:e2:98:4d:d5:69:b9:08:3a:4a:10:4f:c5:cc:d6: 8e:0a:98:c2:a8:3f:1f:84:f1:c1:33:c7:51:9f:f8:4c:f9:e5: f6:56:0e:49:bd:3e:e0:e5:28:cd:49:6e:82:40:d3:4c:73:bb: 0d:ed:1b:aa:be:ac:5e:6e:47:23:6f:fc:e8:22:5c:ae:18:06: 3a:78:c8:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNTE2MTgzODAwWhcNMjUwNTIzMTgzODAwWjAYMRYwFAYD VQQDEw02ODI3ODYwOC02MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEfl7Al88HH2r/3LC77Gb2FTFnECSLBd6g92HV89xD9l66uXvOH07olcABzz VG/8GxACYSp92N00uKG7j7+5oPMNEL+WMym+xHFMcD2qgcHYe7L2dlVvmjG5VDvc Bv99VfSv+ihPGsiIhkKHtla1rst3GvD1llzHnXosJHDevM5IBBb8cegud36j68KC IZjQVgAnLEzPo6w+XJwebPdBP7Oi+G0715T2HaLaXE4V1Nn82I8VTUb8b6cUX27x S7IMPUIU1chgkL/LOJbhU7WxEb7Kgq5lcxX3NoVhb7MTKIx23ULI3VjImrfdzOaL g2x+u0xJ8q60KMVL9M+j0vwnXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4YBl9K w4y2kFkNM0U5QrA2cZl3MB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLoHQnwm0RIQlKSlkVnOnW8vg+GtkQqd7mYvnw7NGYp2mWFGvxKsde RR+stvcdUFNhD2ShKNDDx1bpORLscBJH4K5YbEoshC9lM4aHidAP1GscXSD1DqOR ztV1JHYKXMsDaWTAde5+IMmeUKrjRyWnOA2ckkv9Q28wUw+QiINhgtCQMHFALqNZ y2Nek62dTP+5fMobk3EiPkuMtiY2hLW7BuGfZtJl/aBHdiN2ewp9IETwRULk2bAi 4phN1Wm5CDpKEE/FzNaOCpjCqD8fhPHBM8dRn/hM+eX2Vg5JvT7g5SjNSW6CQNNM c7sN7Ruqvqxebkcjb/zoIlyuGAY6eMhu -----END CERTIFICATE-----Generated at Sat May 17 06:05:56 2025 by rpki-client