$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: l63R0qj+7J4uwg1U2yqtKNPzamBR2DmBhTRb0Bp65AU= Subject key identifier: 5E:22:CF:1F:72:5B:21:94:75:BA:AD:C5:50:DC:EF:E3:BB:E7:50:CE Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: 7B Signing time: Sun 11 May 2025 05:27:31 +0000 Manifest this update: Sun 11 May 2025 05:27:31 +0000 Manifest next update: Sun 18 May 2025 05:27:31 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: 4HtMOTJ6zwxsPu8Bcw/pcJNf2UDjZZuU2kT5yoGNRHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: May 11 05:27:31 2025 GMT Not After : May 18 05:27:31 2025 GMT Subject: CN=68203543-0070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:07:83:3f:bc:9f:e5:5c:ce:62:10:1f:36: 25:cf:e4:47:f9:3a:64:d1:8f:4b:b3:80:9d:94:90: 60:a3:c9:62:cf:78:cb:cd:bc:65:86:97:c7:b7:ad: 7e:a9:be:9c:99:5e:ac:3c:cd:58:99:ce:7a:49:c6: 00:4b:24:cd:40:a0:45:4c:27:9d:9e:61:3e:f3:37: ef:05:c5:c2:b2:74:d1:58:ec:69:59:b9:82:18:7f: d8:17:87:18:07:5b:45:4a:59:6f:ca:cc:33:97:17: e6:00:d8:6c:9b:06:4f:58:e7:3c:9d:39:47:d7:56: 44:d1:87:f9:2e:81:15:54:ad:c6:be:f2:c9:eb:a9: 22:85:c8:7c:21:9d:a6:44:60:67:84:5d:57:b3:2a: cc:3a:02:1d:7b:b0:7d:e1:c1:58:0a:d9:17:3d:a4: 7e:4a:d4:9d:25:4c:e6:81:6e:72:6f:5f:5b:7c:d0: f5:c0:b3:ff:53:30:b7:a7:fd:81:0d:e7:c4:13:cf: 9b:28:83:ec:5f:cf:79:67:7c:4c:b9:5d:70:3d:cc: 17:cb:fb:2e:4f:7b:c6:21:31:45:84:2b:f2:40:d7: 6e:04:bc:d5:23:20:d3:2f:1d:40:a4:f1:35:97:ae: 7c:f4:b8:bd:94:fa:5d:48:ae:d5:cc:09:0c:09:1c: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:22:CF:1F:72:5B:21:94:75:BA:AD:C5:50:DC:EF:E3:BB:E7:50:CE X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bc:81:6e:5e:bd:af:25:f6:59:29:aa:d4:e7:6f:36:e4:e1: b3:eb:ab:15:64:66:a7:90:29:ee:66:49:3a:64:01:82:0e:c3: 4f:76:46:17:2b:03:ea:2b:7b:b5:4d:e9:ea:8c:6c:74:28:a1: bf:eb:34:01:51:76:d3:1d:6a:85:5f:aa:5c:15:03:97:2f:89: ec:86:31:fd:11:62:c5:11:91:83:b6:8f:c0:dc:38:98:6f:9d: aa:b7:db:fb:82:40:dd:26:95:37:fc:7e:19:0e:25:cb:6e:8e: 30:3b:6f:ac:1c:66:15:57:19:34:3f:11:f6:18:20:ed:34:d0: 6f:e3:b9:13:03:b0:af:c0:32:8a:fc:e8:5e:0f:a7:8b:13:f7: fb:da:82:2b:e6:b1:94:38:15:0b:fa:ec:77:eb:c3:13:83:13: cd:09:94:fb:c5:73:59:a2:1f:9a:34:41:56:2a:82:86:fb:75: ba:1e:2d:fa:b2:2c:ad:bc:45:7d:e8:b7:a4:14:9d:ba:1c:c9: eb:28:fe:a0:20:17:68:a7:72:eb:13:ec:2d:38:56:d7:d4:7f: ec:5a:49:5a:e3:8c:83:4f:7d:be:90:a0:ad:cb:29:09:2b:a6: a2:5c:ee:71:cb:77:09:26:aa:c0:ea:bb:3f:ef:e8:b9:a5:bc: 95:8c:a2:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoRDc5QkZEODM5QjlEMEUwOUQwNDA1RUQwNEVFNTI5MjBF OTBCN0FDNDAeFw0yNTA1MTEwNTI3MzFaFw0yNTA1MTgwNTI3MzFaMBgxFjAUBgNV BAMTDTY4MjAzNTQzLTAwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpbgeDP7yf5VzOYhAfNiXP5Ef5OmTRj0uzgJ2UkGCjyWLPeMvNvGWGl8e3rX6p vpyZXqw8zViZznpJxgBLJM1AoEVMJ52eYT7zN+8FxcKydNFY7GlZuYIYf9gXhxgH W0VKWW/KzDOXF+YA2GybBk9Y5zydOUfXVkTRh/kugRVUrca+8snrqSKFyHwhnaZE YGeEXVezKsw6Ah17sH3hwVgK2Rc9pH5K1J0lTOaBbnJvX1t80PXAs/9TMLen/YEN 58QTz5sog+xfz3lnfEy5XXA9zBfL+y5Pe8YhMUWEK/JA124EvNUjINMvHUCk8TWX rnz0uL2U+l1IrtXMCQwJHMotAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXiLPH3Jb IZR1uq3FUNzv47vnUM4wHwYDVR0jBBgwFoAU15v9g5udDgnQQF7QTuUpIOkLesQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0FGODg1RjY2NzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTV2OWc1dWREZ25RUUY3UVR1VXBJT2tMZXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0FGODg1RjY2NzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGdu UVFGN1FUdVVwSU9rTGVzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEW8gW5eva8l9lkpqtTnbzbk4bPrqxVkZqeQKe5mSTpkAYIOw092Rhcr A+ore7VN6eqMbHQoob/rNAFRdtMdaoVfqlwVA5cvieyGMf0RYsURkYO2j8DcOJhv naq32/uCQN0mlTf8fhkOJctujjA7b6wcZhVXGTQ/EfYYIO000G/juRMDsK/AMor8 6F4Pp4sT9/vagivmsZQ4FQv67HfrwxODE80JlPvFc1miH5o0QVYqgob7dboeLfqy LK28RX3ot6QUnbocyeso/qAgF2incusT7C04VtfUf+xaSVrjjINPfb6QoK3LKQkr pqJc7nHLdwkmqsDquz/v6LmlvJWMoh4= -----END CERTIFICATE-----Generated at Tue May 13 03:46:45 2025 by rpki-client