$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: P5/p4glQoZXNNaZJKUMakvHEII2EFlVBr5apDT6HD4A= Subject key identifier: EE:36:10:ED:3E:FC:44:A6:AD:EA:FF:80:ED:3C:CD:EE:EB:40:B2:34 Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 13 Signing time: Sun 27 Apr 2025 06:51:56 +0000 Manifest this update: Sun 27 Apr 2025 06:51:55 +0000 Manifest next update: Sun 04 May 2025 06:51:55 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: mwdwfI0AKYT6jV9XXsSD1mAgj+s+YNHrVmdR1ZnvOf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Apr 27 06:51:55 2025 GMT Not After : May 4 06:51:55 2025 GMT Subject: CN=680dd40c-77e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:e5:43:79:85:81:58:4b:b4:17:e2:a6:46: 3f:69:97:39:d5:61:dc:1e:43:0d:2d:5b:f2:b8:e0: 0b:b4:7d:fd:57:0e:5a:41:e4:5b:73:d4:29:a3:a6: db:70:51:4e:4a:f1:c4:22:49:2c:0c:5f:36:16:9b: e8:fa:a4:0f:a8:33:b7:82:e6:a9:12:a3:3c:57:48: 6f:39:04:94:b0:73:d3:ee:21:66:83:9a:d4:d5:58: 9c:4b:4c:7b:49:92:e9:0f:c2:1f:33:67:c6:e0:34: 61:bc:10:52:38:55:9d:3b:99:d9:f7:1b:31:fc:e4: f4:47:32:1d:b9:1f:24:43:b1:7b:d5:62:48:a1:da: e9:f3:56:8f:af:18:58:57:2f:ac:8e:04:19:a6:b0: a5:44:4c:69:10:7c:fb:d2:20:b9:13:1e:3f:9c:0b: ab:d1:a3:a8:68:5e:cf:71:f4:3d:f7:d3:85:28:ed: 73:1f:b5:76:98:81:e1:23:1c:26:25:37:b2:a5:23: 38:3d:7e:b9:16:08:a2:1e:e8:7b:04:f4:00:7d:71: bf:40:89:6e:d3:fc:a4:e7:58:76:5b:bc:ae:0a:df: c3:59:5d:24:1e:0c:4d:ee:69:8e:83:25:ec:01:64: f6:ab:12:ad:c8:c1:d3:de:79:80:fd:fb:bc:90:63: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:36:10:ED:3E:FC:44:A6:AD:EA:FF:80:ED:3C:CD:EE:EB:40:B2:34 X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6c:f3:3b:e4:51:5e:8d:40:da:62:8a:1b:43:6b:4f:3c:42: ca:68:ec:09:a0:5b:19:f2:26:41:a0:8a:df:e8:98:5f:71:c9: 28:0d:11:92:c6:bb:d1:75:48:48:f3:37:b0:18:8c:f3:f6:39: 60:69:82:88:e6:62:da:20:62:26:f8:d7:06:06:8a:02:20:ff: 50:5e:d3:a2:bb:3f:99:85:fe:39:71:03:27:b5:b7:f1:32:31: 4a:7d:77:18:da:6d:65:6c:b5:36:20:4e:b6:d1:dc:aa:01:86: af:d6:b1:f6:df:bb:5f:09:5f:81:bb:5e:13:80:d6:09:bf:e6: d2:51:6e:42:45:4f:65:3c:75:9b:5a:23:77:f7:cc:0d:06:45: 14:22:30:77:3a:7c:4a:80:1c:44:6b:50:43:47:db:d1:d3:e5: 5b:46:79:a3:16:91:7e:1d:c6:59:d7:61:24:17:64:07:93:43: 0e:f8:c7:35:6b:cb:17:ba:2d:b9:01:5b:c2:67:54:3b:f3:68: 40:92:46:15:3c:23:e5:0f:31:c7:2b:6c:e2:ea:90:73:fb:73: 27:38:a4:b4:37:e1:33:4a:76:3a:d6:e6:26:c8:fc:6f:47:ee: e0:76:0f:5c:51:25:c9:b5:79:b3:2a:c2:08:d9:cf:05:91:61: 92:73:80:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA0MjcwNjUxNTVaFw0yNTA1MDQwNjUxNTVaMBgxFjAUBgNV BAMTDTY4MGRkNDBjLTc3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIT+VDeYWBWEu0F+KmRj9plznVYdweQw0tW/K44Au0ff1XDlpB5Ftz1Cmjpttw UU5K8cQiSSwMXzYWm+j6pA+oM7eC5qkSozxXSG85BJSwc9PuIWaDmtTVWJxLTHtJ kukPwh8zZ8bgNGG8EFI4VZ07mdn3GzH85PRHMh25HyRDsXvVYkih2unzVo+vGFhX L6yOBBmmsKVETGkQfPvSILkTHj+cC6vRo6hoXs9x9D3304Uo7XMftXaYgeEjHCYl N7KlIzg9frkWCKIe6HsE9AB9cb9AiW7T/KTnWHZbvK4K38NZXSQeDE3uaY6DJewB ZParEq3IwdPeeYD9+7yQY9JpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7jYQ7T78 RKat6v+A7TzN7utAsjQwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHts8zvkUV6NQNpiihtDa088Qspo7AmgWxnyJkGgit/omF9xySgNEZLG u9F1SEjzN7AYjPP2OWBpgojmYtogYib41wYGigIg/1Be06K7P5mF/jlxAye1t/Ey MUp9dxjabWVstTYgTrbR3KoBhq/Wsfbfu18JX4G7XhOA1gm/5tJRbkJFT2U8dZta I3f3zA0GRRQiMHc6fEqAHERrUENH29HT5VtGeaMWkX4dxlnXYSQXZAeTQw74xzVr yxe6LbkBW8JnVDvzaECSRhU8I+UPMccrbOLqkHP7cyc4pLQ34TNKdjrW5ibI/G9H 7uB2D1xRJcm1ebMqwgjZzwWRYZJzgG0= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net