$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: 5PUKWYNIa6NA5BsqbB6WxW4G5S8UD2PTUqR9lQNBJMQ= Subject key identifier: DA:98:38:75:67:E7:BC:F5:9D:92:69:E4:3A:60:BB:E6:9A:0C:DD:E4 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 0732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 071E Signing time: Mon 12 May 2025 21:40:55 +0000 Manifest this update: Mon 12 May 2025 21:40:55 +0000 Manifest next update: Mon 19 May 2025 21:40:55 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: wQOADwB0kGjtJp00WI3YsZDgWDeA7oKt6NzfDWoQcKE=) 2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: U4a8o1KXqQZowZ9aJ6tXOocb6xkGyoj65dTRVzeEvrE=) 3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: May 12 21:40:55 2025 GMT Not After : May 19 21:40:55 2025 GMT Subject: CN=68226ae7-c816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:28:55:b9:d7:07:e7:eb:8c:b3:56:e9:96:f6: e8:ca:0c:2a:bd:cc:b0:db:bb:8d:e5:7a:5f:53:a9: 30:04:00:fb:7e:0a:53:06:a3:68:ec:50:ba:e3:af: 3e:98:ae:62:f4:0a:d4:d5:5b:48:cf:c9:12:8e:dc: 57:10:65:23:d8:86:4a:fd:19:d2:cf:a5:67:f8:ca: 3c:81:8b:49:53:8a:31:2c:b3:15:1c:f7:01:df:8c: 28:df:61:42:b4:a1:a7:2a:ab:54:83:18:4d:6a:23: 92:f7:96:a6:3e:8c:3a:8e:a0:96:bf:0d:94:78:86: b3:d1:24:01:a0:b8:1e:1a:bd:f2:62:38:c7:a0:ef: 0a:d3:85:f7:db:80:fe:05:07:ba:15:2c:b5:06:c6: 1d:55:4f:c6:84:df:50:8d:93:66:fa:e4:11:24:81: d4:7c:66:4b:24:86:87:82:ef:23:7b:52:09:df:98: 5d:b4:c2:03:23:e4:1b:df:4f:bb:5d:fa:1f:f4:89: 98:9c:97:e7:15:da:9c:09:ee:fa:33:eb:d7:b7:96: ce:76:6f:31:92:17:81:50:d9:50:3b:3a:9a:47:5d: 55:44:be:a2:a9:cd:c3:34:72:ef:21:c5:ac:b6:e7: 37:86:d6:27:fd:d1:ef:44:50:9e:b7:bc:6d:9a:b8: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:38:75:67:E7:BC:F5:9D:92:69:E4:3A:60:BB:E6:9A:0C:DD:E4 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:bf:5a:b9:92:4d:c8:85:82:df:94:6e:18:63:37:84:18:c7: 93:74:ae:75:4a:ef:cd:7a:c5:bd:77:4e:7a:c4:14:47:80:80: 18:d3:23:94:1d:43:ed:62:c7:90:22:b9:d4:c4:e2:0a:93:d6: 79:28:12:37:41:5b:73:7a:d7:7c:b1:c9:3d:f0:da:4e:16:ab: 13:5d:32:97:23:dd:5e:b1:1e:6f:4c:73:e9:8d:b2:9b:bf:18: 67:98:c7:ec:cd:e0:8c:ed:4b:e7:76:ee:e4:0e:7e:8c:2c:e4: eb:7c:fc:1a:82:ea:76:a5:e3:2e:de:d8:e2:ed:a0:be:7b:46: ff:da:da:90:57:87:02:91:75:8f:73:14:83:59:33:af:cb:82: 34:e5:4c:e2:43:38:3d:bb:01:db:ed:1f:28:e2:fd:ed:6b:ca: 51:a9:de:f9:6e:62:ea:64:25:c0:95:b9:11:b2:72:b9:4e:ae: 06:08:12:80:ba:12:5c:e6:13:be:62:c4:e6:99:9c:82:ec:6c: 9f:ef:ea:2c:fb:0f:eb:5e:da:ab:d4:79:91:6b:95:dc:f8:89: 62:8e:b4:e9:7d:65:11:73:e3:52:4f:29:3b:fd:bd:95:11:8d: 38:b9:25:62:82:16:41:f6:65:e8:ec:b4:58:82:20:43:54:f9: 6a:90:78:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjUwNTEyMjE0MDU1WhcNMjUwNTE5MjE0MDU1WjAYMRYwFAYD VQQDEw02ODIyNmFlNy1jODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ChVudcH5+uMs1bplvboygwqvcyw27uN5XpfU6kwBAD7fgpTBqNo7FC6468+ mK5i9ArU1VtIz8kSjtxXEGUj2IZK/RnSz6Vn+Mo8gYtJU4oxLLMVHPcB34wo32FC tKGnKqtUgxhNaiOS95amPow6jqCWvw2UeIaz0SQBoLgeGr3yYjjHoO8K04X324D+ BQe6FSy1BsYdVU/GhN9QjZNm+uQRJIHUfGZLJIaHgu8je1IJ35hdtMIDI+Qb30+7 Xfof9ImYnJfnFdqcCe76M+vXt5bOdm8xkheBUNlQOzqaR11VRL6iqc3DNHLvIcWs tuc3htYn/dHvRFCet7xtmrhrPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqYOHVn 57z1nZJp5Dpgu+aaDN3kMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEv1q5kk3IhYLflG4YYzeEGMeTdK51Su/NesW9d056xBRHgIAY0yOU HUPtYseQIrnUxOIKk9Z5KBI3QVtzetd8sck98NpOFqsTXTKXI91esR5vTHPpjbKb vxhnmMfszeCM7Uvndu7kDn6MLOTrfPwagup2peMu3tji7aC+e0b/2tqQV4cCkXWP cxSDWTOvy4I05UziQzg9uwHb7R8o4v3ta8pRqd75bmLqZCXAlbkRsnK5Tq4GCBKA uhJc5hO+YsTmmZyC7Gyf7+os+w/rXtqr1HmRa5Xc+IlijrTpfWURc+NSTyk7/b2V EY04uSVighZB9mXo7LRYgiBDVPlqkHht -----END CERTIFICATE-----Generated at Tue May 13 11:44:00 2025 by rpki-client