$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: hf59uUitU92XQWAQ36ArVkPQ1usZvfFr0BF0CITIL34= Subject key identifier: 59:32:70:E3:97:6E:25:9D:37:8C:BF:55:2D:25:47:36:2A:26:49:CA Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0491 Signing time: Mon 12 May 2025 23:49:41 +0000 Manifest this update: Mon 12 May 2025 23:49:41 +0000 Manifest next update: Mon 19 May 2025 23:49:41 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: df4y2leGx/r4U10Xh0ljkS862UKO2UmTLa9Plo3r9mU=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: May 12 23:49:41 2025 GMT Not After : May 19 23:49:41 2025 GMT Subject: CN=68228915-9e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:c5:18:59:5f:ca:76:d8:17:59:68:9b:4b: c3:09:c7:9d:30:33:42:2a:b0:88:7a:c9:5d:05:6b: 5d:c7:ef:16:0d:36:6d:57:d1:26:f4:c8:f1:74:e1: 63:0b:92:1b:dd:d6:20:4a:eb:f6:2d:00:86:7d:2e: e6:ef:57:77:bb:a0:4a:e2:52:e8:fd:9b:9a:fa:33: 36:b9:a9:3e:50:95:0a:c3:03:cc:55:7c:75:f3:60: 88:34:62:9b:3c:20:29:32:68:75:12:ee:4c:87:6d: e6:7a:89:c1:d9:82:02:83:bb:a0:cb:52:17:a5:ea: f9:93:49:2e:03:91:da:a8:26:19:f2:31:d4:9e:2c: d6:8c:4e:fa:41:6b:03:74:43:76:bd:32:73:75:86: 74:be:24:8b:c3:8f:2b:80:5b:c8:df:52:66:f2:d2: 24:a9:19:c7:b3:3d:11:e8:11:e3:bb:32:bf:61:b1: 00:d5:4d:66:a0:c0:b8:54:fc:49:1b:8b:e4:8f:16: c6:80:76:b0:bd:43:e5:d7:f9:0a:6b:f0:10:2c:cf: 46:93:83:da:b4:d1:91:e6:57:cf:6f:3f:16:8a:0a: b6:36:a6:6d:bd:26:25:f4:7a:07:aa:4a:6c:82:c3: e8:5b:e7:20:05:6e:a0:1f:89:41:44:28:3a:ed:0a: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:70:E3:97:6E:25:9D:37:8C:BF:55:2D:25:47:36:2A:26:49:CA X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:4c:d5:1e:24:05:44:96:dc:09:bd:53:25:10:cd:c1:f2:d7: 00:40:b2:43:a6:42:a3:eb:b9:86:5a:b2:61:fa:2d:04:03:78: 29:f2:0d:25:35:d5:4f:80:b0:7e:48:39:1c:89:86:9c:78:3f: ad:47:90:b9:e9:83:e9:bd:75:75:15:f2:10:43:67:1e:6b:42: d3:23:aa:c4:05:e2:70:26:c0:e7:b7:76:ce:02:0f:cb:60:3a: 13:80:08:1e:01:63:4c:1d:6a:c7:6a:be:d9:e6:4e:2d:ba:da: f1:ea:c9:f6:55:66:88:3e:2f:cc:36:86:f4:ee:d2:6f:2d:4b: 27:32:b4:0b:06:a1:a5:c9:71:c9:d0:0c:8c:11:24:2d:a8:81: 38:a9:40:bd:91:72:e6:e8:fb:eb:c7:13:c7:8d:be:2a:06:29: 49:4d:12:e8:b4:1a:de:de:ee:cf:fc:49:27:19:4e:74:46:5d: 80:0f:2c:0e:27:ac:5e:a3:e3:b9:01:f2:eb:6b:3c:e4:c5:22: e1:6a:1b:d8:13:c6:c0:5f:c6:27:ce:00:15:91:85:2d:1e:77: 8c:0d:62:f9:08:0b:7d:68:fe:09:25:04:12:4a:0f:e5:d6:f2: 33:40:4b:af:d4:9d:14:64:a5:35:7f:d8:fd:90:69:4f:44:1c: 20:38:01:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUwNTEyMjM0OTQxWhcNMjUwNTE5MjM0OTQxWjAYMRYwFAYD VQQDEw02ODIyODkxNS05ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuPFGFlfynbYF1lom0vDCcedMDNCKrCIesldBWtdx+8WDTZtV9Em9MjxdOFj C5Ib3dYgSuv2LQCGfS7m71d3u6BK4lLo/Zua+jM2uak+UJUKwwPMVXx182CINGKb PCApMmh1Eu5Mh23meonB2YICg7ugy1IXper5k0kuA5HaqCYZ8jHUnizWjE76QWsD dEN2vTJzdYZ0viSLw48rgFvI31Jm8tIkqRnHsz0R6BHjuzK/YbEA1U1moMC4VPxJ G4vkjxbGgHawvUPl1/kKa/AQLM9Gk4PatNGR5lfPbz8Wigq2NqZtvSYl9HoHqkps gsPoW+cgBW6gH4lBRCg67Qq8+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkycOOX biWdN4y/VS0lRzYqJknKMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBTNUeJAVEltwJvVMlEM3B8tcAQLJDpkKj67mGWrJh+i0EA3gp8g0l NdVPgLB+SDkciYaceD+tR5C56YPpvXV1FfIQQ2cea0LTI6rEBeJwJsDnt3bOAg/L YDoTgAgeAWNMHWrHar7Z5k4tutrx6sn2VWaIPi/MNob07tJvLUsnMrQLBqGlyXHJ 0AyMESQtqIE4qUC9kXLm6PvrxxPHjb4qBilJTRLotBre3u7P/EknGU50Rl2ADywO J6xeo+O5AfLrazzkxSLhahvYE8bAX8YnzgAVkYUtHneMDWL5CAt9aP4JJQQSSg/l 1vIzQEuv1J0UZKU1f9j9kGlPRBwgOAHn -----END CERTIFICATE-----Generated at Tue May 13 09:16:20 2025 by rpki-client