$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: AzIk8l9cOXkWW//gNk8hZpJOMmxYfze5BbdXL+FE12Q= Subject key identifier: 78:C4:D2:3B:4D:08:26:93:39:6E:9E:B5:C3:F8:35:FF:CC:1D:96:73 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 085F Signing time: Thu 08 May 2025 21:27:54 +0000 Manifest this update: Thu 08 May 2025 21:27:53 +0000 Manifest next update: Thu 15 May 2025 21:27:53 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: 2aPEWwUjl7kdUht31nNFHH6V3cTOk+zEum4U6eKr8cg=) 2: 2A9266CE072011EF91900755C4F9AE02.roa (hash: 1UQyIR+zkI72cQbZxerdxNExQFMrwDhzi1gIctp1LqE=) 3: AA4C4484A9EC11EE800F7626C4F9AE02.roa (hash: xw1jxxQf5K+8yqPQHHQW9Ez9CpRZwMvJIq7BVR/kDks=) 4: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (hash: /JN+tKTO8U2ULCoacg07wTsiFwlauGODMPYg4qXhFFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: May 8 21:27:53 2025 GMT Not After : May 15 21:27:53 2025 GMT Subject: CN=681d21d9-9a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:19:7c:9a:59:d1:32:fa:7a:b5:6e:32:e3: 24:8f:f8:ca:75:5f:3b:d0:7f:ec:49:c2:68:80:7b: fe:fe:91:77:07:ed:d2:23:d8:29:bb:18:0f:19:30: 02:e8:bd:58:55:97:72:1c:9a:f1:98:0c:16:48:58: 4e:44:67:b9:13:7b:5f:61:91:25:54:40:bc:cd:56: 59:b4:3b:9d:a4:82:36:c2:d1:12:fc:02:ae:86:1e: 58:19:dd:69:a1:62:27:a6:d4:8e:bb:dd:a2:01:7c: 6e:52:9b:4c:d6:bd:9a:c4:91:bd:8e:e3:31:92:e4: fc:9f:82:e0:12:ae:5d:93:3d:63:95:da:4e:c9:21: f1:6a:98:29:9b:49:de:cb:dd:e3:bd:bb:d7:db:9a: ba:65:12:a6:70:fc:cc:ed:65:53:97:dc:d0:3d:2e: 49:a6:ec:a7:73:99:64:b2:53:e3:64:62:45:4a:09: fb:d9:3e:83:23:43:36:b5:96:56:97:8f:b5:bf:fe: 4b:c5:14:58:0b:d9:5d:4b:1a:f4:a2:7b:cb:a3:27: 3c:a0:58:2c:a6:b4:b2:49:43:80:16:ed:95:86:4c: ad:99:26:0b:ef:57:63:c1:0a:39:db:33:1d:f3:44: b5:40:fa:59:67:e4:2d:ea:8b:3f:9b:d9:c1:a9:8f: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C4:D2:3B:4D:08:26:93:39:6E:9E:B5:C3:F8:35:FF:CC:1D:96:73 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:8b:7b:57:78:af:49:b2:27:3d:ff:40:90:28:0c:eb:3f:15: 4a:a1:d7:01:40:87:2f:01:fe:9c:0c:94:02:7b:0b:dd:ac:d2: c7:e8:b2:6b:11:6e:6a:3f:10:9d:fc:89:cf:dd:37:86:c7:b8: 83:0d:34:9b:91:6e:b6:c9:f2:6d:b1:f1:79:7d:eb:d5:25:b1: 66:68:da:52:d6:26:88:47:72:9a:7c:69:9d:8f:15:6e:35:2d: 55:fb:e7:5e:2c:39:1b:38:df:ac:3c:bf:b9:ab:89:5c:1a:4f: 57:e0:a5:65:c3:a8:29:31:5d:d0:50:2e:59:82:1d:93:c8:ea: 56:df:e7:c7:9d:aa:47:dd:c5:ca:3e:c4:aa:12:d9:b5:be:d8: f6:5a:5b:d3:e7:73:34:30:0b:42:be:ff:1e:89:84:2b:b0:4d: 70:4c:79:36:39:fa:53:09:00:47:6f:72:3f:c7:cc:2b:d9:09: 40:d6:95:a0:33:c7:a2:d3:0a:1a:73:b6:1e:bc:25:96:4a:bb: 4a:20:6a:de:d5:6c:d2:0f:99:46:15:6d:2d:d3:96:c5:b9:47: 7b:c6:06:86:8b:87:40:29:b1:c5:43:b9:e0:ce:ab:9d:24:6b: b9:31:cb:52:3a:1c:15:d2:91:6d:84:42:08:28:9c:39:2f:18: 68:53:ed:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNTA4MjEyNzUzWhcNMjUwNTE1MjEyNzUzWjAYMRYwFAYD VQQDEw02ODFkMjFkOS05YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArokZfJpZ0TL6erVuMuMkj/jKdV870H/sScJogHv+/pF3B+3SI9gpuxgPGTAC 6L1YVZdyHJrxmAwWSFhORGe5E3tfYZElVEC8zVZZtDudpII2wtES/AKuhh5YGd1p oWInptSOu92iAXxuUptM1r2axJG9juMxkuT8n4LgEq5dkz1jldpOySHxapgpm0ne y93jvbvX25q6ZRKmcPzM7WVTl9zQPS5Jpuync5lkslPjZGJFSgn72T6DI0M2tZZW l4+1v/5LxRRYC9ldSxr0onvLoyc8oFgsprSySUOAFu2VhkytmSYL71djwQo52zMd 80S1QPpZZ+Qt6os/m9nBqY85kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjE0jtN CCaTOW6etcP4Nf/MHZZzMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6i3tXeK9Jsic9/0CQKAzrPxVKodcBQIcvAf6cDJQCewvdrNLH6LJr EW5qPxCd/InP3TeGx7iDDTSbkW62yfJtsfF5fevVJbFmaNpS1iaIR3KafGmdjxVu NS1V++deLDkbON+sPL+5q4lcGk9X4KVlw6gpMV3QUC5Zgh2TyOpW3+fHnapH3cXK PsSqEtm1vtj2WlvT53M0MAtCvv8eiYQrsE1wTHk2OfpTCQBHb3I/x8wr2QlA1pWg M8ei0woac7YevCWWSrtKIGre1WzSD5lGFW0t05bFuUd7xgaGi4dAKbHFQ7ngzqud JGu5MctSOhwV0pFthEIIKJw5LxhoU+23 -----END CERTIFICATE-----Generated at Sat May 10 10:27:03 2025 by rpki-client