$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: 6sDJIhJaGNGFw8wws8Uw5Fd3f8CDtEWv9mVohOYpBho= Subject key identifier: 01:79:5A:28:A6:56:69:A4:1C:02:5D:D0:0E:03:31:B9:0A:95:38:AF Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F12 Signing time: Wed 14 May 2025 16:06:18 +0000 Manifest this update: Wed 14 May 2025 16:06:18 +0000 Manifest next update: Wed 21 May 2025 16:06:18 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: /Yb6MjyNIJ1d7qjKFaHzBh71JZtGEerRKuAGSKMxo/E=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: JPz0ZzHWwFSSfWmaNplpCU4QznJ0G9YXZ66T9hNIZ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7965 (0x1f1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: May 14 16:06:18 2025 GMT Not After : May 21 16:06:18 2025 GMT Subject: CN=6824bf7a-3397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:6f:d9:bb:6f:82:0a:9c:6c:d5:f4:bd:3e: 27:0f:3b:74:22:45:24:27:f1:98:56:19:51:87:79: 58:bf:a1:42:a5:03:32:1c:e9:31:be:b8:f7:31:6a: 38:0b:e7:79:b6:32:38:95:69:d5:a6:90:65:6a:cf: 63:b0:9e:5f:6d:25:2a:ea:19:42:48:75:ca:ac:bc: 67:fc:2d:a2:15:e6:57:ce:c4:85:9e:41:8b:7a:3d: 5d:9b:85:5e:89:fc:a3:32:99:0a:c6:7a:6c:df:a5: c8:b5:f0:70:e1:af:0d:18:67:3d:e7:e5:d3:d5:f8: 18:68:32:3d:03:44:09:43:18:2a:13:c6:be:af:b9: 99:08:68:6e:49:6b:5d:ca:c4:39:e9:bf:52:fc:7e: d5:9d:1d:a2:d1:5c:33:6f:99:50:f6:f3:e1:67:0b: c8:6a:fb:14:60:1c:88:ec:f7:44:f7:41:6d:f7:13: 88:c4:ed:b1:88:43:7e:9d:df:ce:ad:1b:da:25:ee: c4:e7:7f:37:2e:44:a3:92:b6:fd:e5:21:89:e1:03: c8:25:56:2d:79:5e:f4:35:b2:76:66:c5:e5:b9:58: 88:cb:7d:d9:db:bf:c1:b0:9e:de:dd:aa:4f:6b:d8: 16:6a:e3:e0:3b:46:79:21:06:be:0f:bb:d9:64:3f: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:5A:28:A6:56:69:A4:1C:02:5D:D0:0E:03:31:B9:0A:95:38:AF X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:15:46:95:21:9d:f7:31:36:86:1e:d4:f3:7a:91:df:c6:8b: da:63:6c:aa:97:ce:db:0d:8d:96:9b:3b:56:a0:1f:36:3d:f4: 18:3f:2d:b3:a6:46:f0:ad:09:16:7c:74:ed:60:1c:d9:a4:65: f5:11:46:b6:84:4e:73:a0:aa:2c:4e:78:a3:c2:5d:9f:39:d8: 9f:b7:90:3c:5e:27:64:52:b5:4d:e7:6b:ec:2a:fd:ea:83:53: a7:93:95:b6:4c:0c:c6:81:d8:93:f8:5b:47:b7:89:cb:26:1e: ff:df:4d:de:4d:9d:38:c4:23:7c:f8:ed:2e:d4:54:e8:79:6e: 78:e4:aa:79:02:c3:6c:e2:4e:c2:de:df:9c:d7:7d:4f:79:4a: e8:7b:a7:c2:40:c5:ab:ba:f2:37:2a:a5:0e:9f:12:a6:aa:3a: a9:8a:ed:a7:80:ae:3f:9b:1b:11:b2:93:98:c5:2d:36:9d:1f: 69:dc:0f:b3:48:ee:52:5f:0a:24:a5:94:2d:7c:6d:f4:4f:47: 6b:3c:12:f6:fb:93:b6:28:cc:8d:e3:d4:60:9a:b9:a3:e6:48: d0:3f:8c:40:09:3c:7f:16:b9:82:8f:cd:bd:65:66:42:7d:ee: 57:d8:f8:21:56:3e:9d:4f:a2:a9:0a:56:2f:f3:75:e0:5f:b7: e5:e9:33:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwNTE0MTYwNjE4WhcNMjUwNTIxMTYwNjE4WjAYMRYwFAYD VQQDEw02ODI0YmY3YS0zMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38Fv2btvggqcbNX0vT4nDzt0IkUkJ/GYVhlRh3lYv6FCpQMyHOkxvrj3MWo4 C+d5tjI4lWnVppBlas9jsJ5fbSUq6hlCSHXKrLxn/C2iFeZXzsSFnkGLej1dm4Ve ifyjMpkKxnps36XItfBw4a8NGGc95+XT1fgYaDI9A0QJQxgqE8a+r7mZCGhuSWtd ysQ56b9S/H7VnR2i0Vwzb5lQ9vPhZwvIavsUYByI7PdE90Ft9xOIxO2xiEN+nd/O rRvaJe7E5383LkSjkrb95SGJ4QPIJVYteV70NbJ2ZsXluViIy33Z27/BsJ7e3apP a9gWauPgO0Z5IQa+D7vZZD8U3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF5Wiim VmmkHAJd0A4DMbkKlTivMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfFUaVIZ33MTaGHtTzepHfxovaY2yql87bDY2WmztWoB82PfQYPy2z pkbwrQkWfHTtYBzZpGX1EUa2hE5zoKosTnijwl2fOdift5A8XidkUrVN52vsKv3q g1Onk5W2TAzGgdiT+FtHt4nLJh7/303eTZ04xCN8+O0u1FToeW545Kp5AsNs4k7C 3t+c131PeUroe6fCQMWruvI3KqUOnxKmqjqpiu2ngK4/mxsRspOYxS02nR9p3A+z SO5SXwokpZQtfG30T0drPBL2+5O2KMyN49Rgmrmj5kjQP4xACTx/FrmCj829ZWZC fe5X2PghVj6dT6KpClYv83XgX7fl6TNI -----END CERTIFICATE-----Generated at Thu May 15 09:57:48 2025 by rpki-client