$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft File: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json) Hash identifier: 7/JHkopNXY9pblfjTTX1Wo4WUSkuGPbrldMHQWwDhxA= Subject key identifier: E7:23:7F:38:86:89:AD:24:E7:A7:A6:48:FF:9B:85:4C:8D:27:C9:40 Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft Manifest number: 0692 Signing time: Thu 08 May 2025 22:03:11 +0000 Manifest this update: Thu 08 May 2025 22:03:10 +0000 Manifest next update: Thu 15 May 2025 22:03:10 +0000 Files and hashes: 1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: ob0UEv+Gupbx318VJq3EZR3iHKvaIFn72ac+8TwBunk=) 2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Validity Not Before: May 8 22:03:10 2025 GMT Not After : May 15 22:03:10 2025 GMT Subject: CN=681d2a1f-4624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:e5:35:eb:cd:67:5d:56:35:da:87:ad:d7: df:9c:fa:47:50:7f:9b:90:8a:eb:ca:ba:4b:44:e4: 65:a6:05:ca:42:0a:5a:25:32:cc:b8:70:7e:3b:b8: 4e:b5:66:0d:d6:12:40:13:18:19:d4:87:cf:17:b1: 4f:d3:8b:b9:13:08:a4:13:0d:5a:9d:cc:9a:07:e2: 01:c7:6d:96:a1:e7:3a:bc:83:4b:cf:9a:61:47:63: c9:ca:1d:e6:8b:71:ae:96:fa:cf:f8:f9:0e:0c:79: 40:ae:ff:94:3c:61:1a:6f:11:5f:a5:ae:19:d4:1a: 13:1f:ec:c0:46:f0:05:12:df:44:0a:76:a1:f9:18: d0:be:f2:ba:64:02:21:79:6e:06:90:40:ee:cf:20: 50:8b:c2:60:c7:81:71:ec:bf:e4:91:70:c3:ff:d2: ce:1d:b7:77:7d:cb:c5:2f:5e:4b:67:de:4d:29:d7: 73:2a:a3:b8:2f:29:7a:d3:4f:35:d0:c9:c6:f9:88: 2d:d9:64:4b:72:a8:9a:6d:cc:5e:03:03:4c:7a:b7: 76:0d:99:61:61:d7:60:dc:41:37:96:1b:a8:c6:19: ea:68:51:d4:de:47:be:09:ae:55:71:e1:22:3d:b6: 74:d1:d9:a2:52:4a:e3:bd:1c:db:19:00:c7:78:cb: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:23:7F:38:86:89:AD:24:E7:A7:A6:48:FF:9B:85:4C:8D:27:C9:40 X509v3 Authority Key Identifier: keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:87:12:3c:71:92:45:81:da:ad:af:e2:b5:62:c5:2b:88:03: 81:79:eb:26:b7:cc:03:87:59:80:aa:6f:47:95:1a:2a:06:60: 2c:c9:ec:01:18:6e:d1:b7:20:36:0d:30:ff:48:ac:62:7a:70: 1f:90:29:92:ce:19:d8:e3:cd:da:81:60:e2:74:cb:52:f7:e9: 64:37:ff:0e:01:c0:68:7c:7c:80:2a:bd:44:98:d2:f7:35:91: 2f:8e:67:37:79:35:c6:25:2e:ae:1b:6a:19:f5:c7:fa:e6:40: 56:af:5c:b5:ec:16:a0:48:74:b2:fa:60:a4:5f:7a:c9:fa:fd: 90:32:4d:c8:4e:cb:1e:52:3b:3d:cd:57:8a:49:2e:bc:77:b6: 32:30:2e:11:8e:2e:2b:e8:60:0e:b0:40:5e:42:7e:73:a2:7a: e1:8e:79:98:bf:e5:5f:8b:6a:49:89:5e:eb:29:76:6d:9a:7d: 16:7a:60:f8:26:ce:0e:8d:cb:32:28:6c:22:e5:b3:10:59:0a: 3c:99:aa:b0:55:d9:2f:14:d6:1d:96:eb:54:c2:06:06:89:17: 38:ab:43:d9:7e:11:c5:c2:c7:c5:a0:ef:69:21:f8:43:56:2e: cf:32:d5:2e:f6:53:4a:58:dd:f9:e3:5f:0d:08:a7:3b:75:ec: a1:de:8a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw OTc4MTVBMzUwHhcNMjUwNTA4MjIwMzEwWhcNMjUwNTE1MjIwMzEwWjAYMRYwFAYD VQQDEw02ODFkMmExZi00NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZXlNevNZ11WNdqHrdffnPpHUH+bkIrryrpLRORlpgXKQgpaJTLMuHB+O7hO tWYN1hJAExgZ1IfPF7FP04u5EwikEw1ancyaB+IBx22Woec6vINLz5phR2PJyh3m i3GulvrP+PkODHlArv+UPGEabxFfpa4Z1BoTH+zARvAFEt9ECnah+RjQvvK6ZAIh eW4GkEDuzyBQi8Jgx4Fx7L/kkXDD/9LOHbd3fcvFL15LZ95NKddzKqO4Lyl60081 0MnG+Ygt2WRLcqiabcxeAwNMerd2DZlhYddg3EE3lhuoxhnqaFHU3ke+Ca5VceEi PbZ00dmiUkrjvRzbGQDHeMtg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcjfziG ia0k56emSP+bhUyNJ8lAMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkJFQS9BQTdFMzkxQTZDNkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00t N2JSRTBad3dvQThKZUJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhxI8cZJFgdqtr+K1YsUriAOBeesmt8wDh1mAqm9HlRoqBmAsyewB GG7RtyA2DTD/SKxienAfkCmSzhnY483agWDidMtS9+lkN/8OAcBofHyAKr1EmNL3 NZEvjmc3eTXGJS6uG2oZ9cf65kBWr1y17BagSHSy+mCkX3rJ+v2QMk3ITsseUjs9 zVeKSS68d7YyMC4Rji4r6GAOsEBeQn5zonrhjnmYv+Vfi2pJiV7rKXZtmn0WemD4 Js4OjcsyKGwi5bMQWQo8maqwVdkvFNYdlutUwgYGiRc4q0PZfhHFwsfFoO9pIfhD Vi7PMtUu9lNKWN35418NCKc7deyh3ooU -----END CERTIFICATE-----Generated at Sat May 10 09:46:29 2025 by rpki-client