$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: 5dWtbAhADcewti2KAsJN8gSr2fV8IgaX/7apLqKSwSo= Subject key identifier: 53:A3:81:A6:1A:09:83:99:85:D4:83:A9:6A:1C:E1:80:CF:E2:03:55 Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: 43 Signing time: Tue 13 May 2025 06:43:31 +0000 Manifest this update: Tue 13 May 2025 06:43:30 +0000 Manifest next update: Tue 20 May 2025 06:43:30 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: W4kEv2nxYRpQNYdZeyplKPmeIDjHKa74yMVoxrNLJLE=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: May 13 06:43:30 2025 GMT Not After : May 20 06:43:30 2025 GMT Subject: CN=6822ea12-4566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:8d:1c:fc:77:ca:b5:c5:25:1e:a9:cd:db: 57:f9:36:78:e9:b1:aa:ee:f1:3e:a6:07:10:34:40: 57:ae:1f:86:8f:f3:dd:ea:45:b0:ed:79:6a:ac:c7: 40:42:94:74:2e:1a:6e:db:d3:79:e7:b7:a1:17:52: c9:de:9c:fb:8e:b4:7f:14:3b:e9:8f:82:6c:77:fa: 4b:bb:21:ba:60:a3:bc:9d:41:60:cd:9e:e0:cb:96: a5:a4:a2:72:63:c5:61:12:8a:6f:fe:52:c2:91:ad: 12:67:96:91:a7:eb:e0:7d:5c:2c:6c:18:5b:04:40: 65:a3:df:f6:9d:36:74:39:d7:b2:f3:dc:2e:af:3c: 00:68:cd:49:4a:97:54:b7:58:0b:e2:e9:cb:6b:ee: 51:72:7c:5e:c6:fb:54:4b:e0:31:4c:4a:00:f7:7e: a1:e2:ef:97:91:67:c8:cd:0c:2a:4c:99:f0:aa:1b: 10:ee:4a:b6:09:6b:ff:07:9b:8e:ae:c6:8b:3a:ca: 7b:98:19:58:84:99:31:03:70:95:69:d0:ae:3b:7d: 18:63:8d:0b:7a:4b:33:f6:48:8f:b6:dd:05:88:3b: 86:32:27:ce:f4:0b:7d:bf:7e:a8:2b:e5:2f:f4:c8: 9c:d2:1a:d2:e4:04:4f:9d:a4:c3:eb:18:94:9d:50: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:81:A6:1A:09:83:99:85:D4:83:A9:6A:1C:E1:80:CF:E2:03:55 X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6f:a4:d8:c3:a8:b6:78:4e:df:3c:58:94:e9:d2:ee:8e:50: 83:95:84:f8:7f:58:f2:8b:c0:db:3f:fc:89:9c:86:e3:44:88: dc:1e:22:38:83:c0:24:c3:4c:ca:0f:39:ba:ea:60:57:e7:15: 9b:44:b5:e7:14:ab:a8:8c:5c:bd:66:b6:24:ee:62:09:f7:33: a9:f6:aa:a6:a9:63:a2:2e:c5:5f:95:93:f0:6d:e6:80:7d:3e: 79:cb:c8:e4:be:e2:ee:f8:50:7a:38:eb:11:e9:44:e7:5c:94: 73:01:76:77:50:be:f6:3c:ac:52:4d:89:5f:75:06:43:35:ab: 97:9a:72:37:80:06:30:45:c7:8e:be:1e:04:61:39:3b:93:3b: 9d:01:51:d4:ba:1a:09:f0:56:e6:9d:0b:ca:f6:a7:0d:7f:04: 69:5f:9c:eb:4c:b6:f1:48:df:81:91:64:37:08:db:68:82:58: be:9f:98:b5:0c:c8:4d:31:81:94:cb:55:e3:0d:94:a0:9b:01: 78:6b:9c:c8:05:9f:eb:3d:76:38:b5:74:e8:a8:17:f4:ab:63: 22:4c:71:b2:cf:02:1e:7c:cf:17:35:c7:fe:ff:a2:a7:ab:3f: 2a:61:b9:f9:0b:34:58:a2:bb:e2:97:83:cf:b1:cf:9f:c7:b3: a9:a3:4c:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTA1MTMwNjQzMzBaFw0yNTA1MjAwNjQzMzBaMBgxFjAUBgNV BAMTDTY4MjJlYTEyLTQ1NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJPY0c/HfKtcUlHqnN21f5Nnjpsaru8T6mBxA0QFeuH4aP893qRbDteWqsx0BC lHQuGm7b03nnt6EXUsnenPuOtH8UO+mPgmx3+ku7Ibpgo7ydQWDNnuDLlqWkonJj xWESim/+UsKRrRJnlpGn6+B9XCxsGFsEQGWj3/adNnQ517Lz3C6vPABozUlKl1S3 WAvi6ctr7lFyfF7G+1RL4DFMSgD3fqHi75eRZ8jNDCpMmfCqGxDuSrYJa/8Hm46u xos6ynuYGViEmTEDcJVp0K47fRhjjQt6SzP2SI+23QWIO4YyJ870C32/fqgr5S/0 yJzSGtLkBE+dpMPrGJSdUP6/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU6OBphoJ g5mF1IOpahzhgM/iA1UwHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0JBMEYyREYyRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NR bVF4ZUFBb2ZyN3UtMHVtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpvpNjDqLZ4Tt88WJTp0u6OUIOVhPh/WPKLwNs//ImchuNEiNweIjiD wCTDTMoPObrqYFfnFZtEtecUq6iMXL1mtiTuYgn3M6n2qqapY6IuxV+Vk/Bt5oB9 PnnLyOS+4u74UHo46xHpROdclHMBdndQvvY8rFJNiV91BkM1q5eacjeABjBFx46+ HgRhOTuTO50BUdS6GgnwVuadC8r2pw1/BGlfnOtMtvFI34GRZDcI22iCWL6fmLUM yE0xgZTLVeMNlKCbAXhrnMgFn+s9dji1dOioF/SrYyJMcbLPAh58zxc1x/7/oqer PyphufkLNFiiu+KXg8+xz5/Hs6mjTI0= -----END CERTIFICATE-----Generated at Wed May 14 03:49:35 2025 by rpki-client