$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: EesLDfAsUJ+/AUbyr5BarbP+E/FDVbExSHXehj40wTo= Subject key identifier: 04:A1:9D:F8:09:BF:80:07:E1:D1:B0:E3:73:95:C2:C4:CC:3D:4F:44 Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 44 Signing time: Sun 27 Apr 2025 06:23:13 +0000 Manifest this update: Sun 27 Apr 2025 06:23:12 +0000 Manifest next update: Sun 04 May 2025 06:23:12 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: GoNUNGKmvhp0vv4KRBBOCUACX72Q4jHsW68xGCLH31I=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: Apr 27 06:23:12 2025 GMT Not After : May 4 06:23:12 2025 GMT Subject: CN=680dcd51-5686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:ae:f3:d4:71:b1:ae:d0:af:14:96:5b:c3: f1:88:73:11:73:a0:67:57:87:c0:c9:f4:41:33:b9: 83:d2:9d:0d:02:87:65:f5:b2:2f:c7:c5:eb:30:de: 39:bd:31:ec:48:66:21:2b:70:e6:3f:ec:47:df:88: 2c:93:27:dc:22:29:e4:07:b9:7c:78:f8:14:95:cf: 37:45:61:a1:11:f2:76:e1:e0:3f:db:8a:c8:a9:6c: 15:96:c8:5e:53:00:55:ef:2e:6f:ed:4b:0c:4a:d7: b9:b2:c4:de:d5:f7:1e:2f:32:ca:0e:92:01:cc:c3: 42:28:07:ee:33:ed:80:e7:3f:fc:9e:21:8f:73:43: 58:1d:38:66:1a:4f:66:bc:0a:68:91:19:c4:b3:3e: e2:78:aa:ff:1a:b7:6d:ef:50:23:d9:e0:33:ba:2a: e9:49:99:71:1b:08:0c:89:40:0e:aa:41:56:4f:a8: 8e:f2:78:80:c7:03:8b:50:bd:e1:ed:55:10:55:d1: 50:20:20:7e:02:ba:9d:25:72:6b:5c:a0:60:53:14: 3e:3d:79:8d:14:8b:00:cd:f6:27:6a:1d:dd:0c:fc: 16:cb:5a:5d:ca:a8:8c:bd:ae:0d:aa:17:4b:e1:c0: 72:5b:ee:bc:87:e6:64:07:46:07:72:ef:a3:fa:bf: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:9D:F8:09:BF:80:07:E1:D1:B0:E3:73:95:C2:C4:CC:3D:4F:44 X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:e0:de:0b:67:d6:ec:da:0c:02:a3:ee:d3:d7:87:36:28: 88:f0:e8:d1:59:50:ac:02:24:07:81:8f:d4:dd:01:0f:26:39: e1:07:97:7f:47:e0:9b:e3:fe:f1:1a:f4:72:9b:df:66:5c:18: 66:ad:6a:f9:23:d4:76:a7:67:11:6c:d7:a8:c8:7c:92:ce:1e: 38:ed:ad:5e:e6:b0:99:04:42:42:56:2d:56:80:92:6f:37:46: d9:b0:45:26:1a:8c:bd:dd:ca:7f:f7:50:4a:48:63:49:58:e7: 1c:1a:ac:66:b2:af:43:5f:ee:f3:0b:76:e0:3e:7e:8c:53:19: a7:05:40:7a:64:9a:dc:55:1d:06:ea:76:4f:4f:97:a7:dd:b2: 26:b2:09:27:f7:ac:75:1e:5d:8a:f6:71:41:19:76:27:89:2d: be:e4:38:81:41:73:05:63:5b:52:15:5f:d3:81:bc:c1:c9:b7: 99:ea:56:03:70:47:a4:63:7e:43:ab:d3:15:cc:5d:2f:1f:02: 1e:9b:bf:74:3f:c9:1b:8f:ed:c1:2d:c7:67:af:dc:ea:9b:47: 55:2b:9b:09:d3:61:03:78:fb:74:47:dd:0a:83:e7:86:b4:d1: df:83:6b:ae:da:77:3b:dc:6a:57:69:7a:af:35:84:c7:96:34: 85:f3:af:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA0MjcwNjIzMTJaFw0yNTA1MDQwNjIzMTJaMBgxFjAUBgNV BAMTDTY4MGRjZDUxLTU2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC76a7z1HGxrtCvFJZbw/GIcxFzoGdXh8DJ9EEzuYPSnQ0Ch2X1si/Hxesw3jm9 MexIZiErcOY/7EffiCyTJ9wiKeQHuXx4+BSVzzdFYaER8nbh4D/bisipbBWWyF5T AFXvLm/tSwxK17myxN7V9x4vMsoOkgHMw0IoB+4z7YDnP/yeIY9zQ1gdOGYaT2a8 CmiRGcSzPuJ4qv8at23vUCPZ4DO6KulJmXEbCAyJQA6qQVZPqI7yeIDHA4tQveHt VRBV0VAgIH4Cup0lcmtcoGBTFD49eY0UiwDN9idqHd0M/BbLWl3KqIy9rg2qF0vh wHJb7ryH5mQHRgdy76P6v64dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBKGd+Am/ gAfh0bDjc5XCxMw9T0QwHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVO4N4LZ9bs2gwCo+7T14c2KIjw6NFZUKwCJAeBj9TdAQ8mOeEHl39H 4Jvj/vEa9HKb32ZcGGatavkj1HanZxFs16jIfJLOHjjtrV7msJkEQkJWLVaAkm83 RtmwRSYajL3dyn/3UEpIY0lY5xwarGayr0Nf7vMLduA+foxTGacFQHpkmtxVHQbq dk9Pl6fdsiayCSf3rHUeXYr2cUEZdieJLb7kOIFBcwVjW1IVX9OBvMHJt5nqVgNw R6RjfkOr0xXMXS8fAh6bv3Q/yRuP7cEtx2ev3OqbR1UrmwnTYQN4+3RH3QqD54a0 0d+Da67adzvcaldpeq81hMeWNIXzr+M= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net