$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: iLCxmjtJ42uzQpnpiJUlk4imEQ2lLnlsWIaF+sjGt58= Subject key identifier: C3:F0:E5:E4:BF:10:76:B0:D7:E5:87:C2:CF:57:E4:29:4F:7E:27:BE Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 0977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 096F Signing time: Sat 10 May 2025 19:54:22 +0000 Manifest this update: Sat 10 May 2025 19:54:21 +0000 Manifest next update: Sat 17 May 2025 19:54:21 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: +OrQxNDBuup7NWz1ZT3WGZ+NnEF5Zc6jwBj4Uc93UmY=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 60Yp+lMUoIhBshIDeToO24NmKvWSdMqkdEQgOkXf8BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: May 10 19:54:21 2025 GMT Not After : May 17 19:54:21 2025 GMT Subject: CN=681faeed-d1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:cf:04:59:c6:82:64:2b:33:df:89:76:73: 41:67:97:80:b5:ec:ea:49:b0:1e:31:a4:d8:1f:06: 8d:d9:f5:f3:17:8d:a5:ba:6f:a8:17:05:d6:2a:f4: 7c:36:7a:68:f1:f0:9d:4b:b2:77:8a:d2:e4:63:d5: 84:1b:92:10:92:a5:47:6f:96:d1:ca:f6:f0:7c:81: 66:35:be:c8:4b:a4:c0:40:7a:2f:35:9c:89:ed:5d: 18:bd:ed:bd:ea:ab:78:aa:2e:77:a5:ff:89:85:21: ca:ed:93:8d:fe:4e:c4:f9:b2:5b:b0:e9:7b:54:7c: 7c:1e:d6:fa:8d:d9:8a:49:ec:1d:69:12:a3:96:e1: 16:69:a2:f6:d3:ac:19:f6:13:b2:84:9d:96:60:ed: 97:7f:2e:2d:cd:83:51:46:e2:f6:2a:ec:28:56:64: f1:f5:2a:ba:34:67:47:35:c0:9a:59:0d:1d:e1:ff: 38:ba:2e:0d:d8:8c:63:84:8e:ec:0a:d1:08:c7:4f: 8b:18:bc:0b:f6:f0:b0:b7:73:1b:89:e7:8c:1f:f2: 64:0f:e8:cd:e6:46:38:7e:81:a6:c3:51:33:c1:dd: 92:73:68:b3:a6:7e:99:19:9a:c7:ba:f9:b7:17:cb: 03:c8:ef:cd:3c:5e:17:d3:51:81:31:60:a3:0e:8b: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:E5:E4:BF:10:76:B0:D7:E5:87:C2:CF:57:E4:29:4F:7E:27:BE X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:01:16:d6:a1:fc:88:fe:c4:ba:87:e5:01:a8:27:f9:ee: f4:c6:6f:d0:6d:5f:25:57:55:05:82:8f:a6:4a:62:e0:0c:58: 3a:6b:d5:ad:ba:8e:29:5b:32:f2:05:f9:95:db:a6:3b:b8:8a: 61:45:ea:22:05:83:bd:0e:2e:04:1c:87:02:46:9e:0f:0f:fb: cb:e7:7a:a5:ec:a6:cf:af:97:22:5c:2d:5a:9f:ae:1e:bf:cd: 15:d8:52:50:b6:9f:5e:b4:17:42:09:68:66:f3:6e:b4:a6:c1: c2:6b:b3:2d:03:36:e1:a1:53:cc:cb:f4:c0:fc:a9:5c:14:97: db:d7:4e:41:ac:b4:65:b6:ed:6d:94:22:00:d3:36:07:c2:45: 95:a6:4a:93:19:ff:51:78:17:c1:57:d3:4f:ef:30:32:12:f3: 58:61:d2:93:6a:59:8a:d5:d4:cc:bf:dc:4f:ac:42:74:aa:53: bb:08:5d:69:a3:a6:f4:c4:c4:a7:78:81:d6:a7:89:34:ef:49: 04:99:0d:4b:12:ae:69:67:50:3d:8f:56:3a:45:3a:3d:09:0c: c9:7e:ae:78:e0:ac:ac:e4:48:e2:a0:df:6a:50:a7:18:1b:5f: 30:43:99:4d:d0:ad:a2:13:c9:58:40:a6:ce:1d:93:f6:a7:a2: cd:ac:55:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNTEwMTk1NDIxWhcNMjUwNTE3MTk1NDIxWjAYMRYwFAYD VQQDEw02ODFmYWVlZC1kMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07PPBFnGgmQrM9+JdnNBZ5eAtezqSbAeMaTYHwaN2fXzF42lum+oFwXWKvR8 Nnpo8fCdS7J3itLkY9WEG5IQkqVHb5bRyvbwfIFmNb7IS6TAQHovNZyJ7V0Yve29 6qt4qi53pf+JhSHK7ZON/k7E+bJbsOl7VHx8Htb6jdmKSewdaRKjluEWaaL206wZ 9hOyhJ2WYO2Xfy4tzYNRRuL2KuwoVmTx9Sq6NGdHNcCaWQ0d4f84ui4N2IxjhI7s CtEIx0+LGLwL9vCwt3MbieeMH/JkD+jN5kY4foGmw1Ezwd2Sc2izpn6ZGZrHuvm3 F8sDyO/NPF4X01GBMWCjDouZ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPw5eS/ EHaw1+WHws9X5ClPfie+MB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9AEW1qH8iP7EuoflAagn+e70xm/QbV8lV1UFgo+mSmLgDFg6a9Wt uo4pWzLyBfmV26Y7uIphReoiBYO9Di4EHIcCRp4PD/vL53ql7KbPr5ciXC1an64e v80V2FJQtp9etBdCCWhm8260psHCa7MtAzbhoVPMy/TA/KlcFJfb105BrLRltu1t lCIA0zYHwkWVpkqTGf9ReBfBV9NP7zAyEvNYYdKTalmK1dTMv9xPrEJ0qlO7CF1p o6b0xMSneIHWp4k070kEmQ1LEq5pZ1A9j1Y6RTo9CQzJfq544Kys5EjioN9qUKcY G18wQ5lN0K2iE8lYQKbOHZP2p6LNrFWf -----END CERTIFICATE-----Generated at Sun May 11 13:30:02 2025 by rpki-client