$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: qcCiqHb5yG/YljFyglZyGo6pcv85P7VYU89mdnf4gq4= Subject key identifier: 72:F3:14:87:AD:7A:78:0F:F5:F9:09:28:33:C7:4E:44:6E:61:C6:FF Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 77 Signing time: Thu 24 Apr 2025 14:22:50 +0000 Manifest this update: Thu 24 Apr 2025 14:22:50 +0000 Manifest next update: Thu 01 May 2025 14:22:50 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: +qMtNu8zODcev/QsRnwumgBj6EZciEDyNJ79ITomtAk=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: gkEBBlb5hiB7NcbdGZU3eHKvEG+IJP6u0ZkY2XHXvHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Apr 24 14:22:50 2025 GMT Not After : May 1 14:22:50 2025 GMT Subject: CN=680a493a-d576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:6e:6f:b8:16:ef:d7:61:dc:c4:13:99:f7: 16:f7:5d:af:72:e7:2d:3e:7f:e9:aa:ad:53:52:26: 95:eb:6b:8b:b5:dc:6b:bf:d3:c5:c3:59:9d:08:54: 2e:b4:70:d8:22:a9:e7:19:bd:36:11:84:73:a1:46: 6b:e9:fc:80:f5:64:9f:51:a2:b0:d7:c0:a5:f4:be: 09:a3:e3:9d:d9:c5:02:61:ee:7a:7c:8f:51:20:2b: 42:e7:46:57:2a:87:84:ff:00:52:1e:57:76:60:ff: d5:fe:fa:70:0b:00:02:22:88:a5:51:6a:91:23:d1: cd:c7:24:0a:d6:79:36:17:27:f1:89:3e:5e:43:19: 6b:f1:90:fb:f3:04:7b:0c:4b:eb:99:e4:41:52:07: 7a:aa:52:d4:92:23:10:8f:1e:81:38:8b:c5:73:6b: de:cd:ec:a8:9b:8d:90:e0:b4:87:a8:0d:16:7c:c6: 0a:1a:6a:f4:9a:6e:fb:53:55:d7:03:d6:e6:70:99: 93:0a:ae:b2:b7:90:dd:ab:b0:8c:9d:1c:a7:21:94: e8:7a:87:6b:a1:57:f6:58:d2:9b:88:f6:3a:01:b3: f0:57:bf:f2:6a:08:98:83:51:26:a4:fc:b2:70:9c: 29:9a:cf:e9:f7:54:76:28:ca:90:61:8d:22:29:92: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F3:14:87:AD:7A:78:0F:F5:F9:09:28:33:C7:4E:44:6E:61:C6:FF X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:06:20:84:4a:6a:5c:37:25:a0:e8:40:4e:aa:0f:3e:ce:05: 5d:e5:9c:5a:13:01:0c:1e:2f:15:e2:e7:e0:4c:f4:91:ba:19: 03:7f:90:26:4f:63:fb:c2:38:87:ad:1e:37:2d:32:da:8f:ce: ec:d2:7d:07:68:fe:1a:9f:db:73:94:67:82:5f:82:d6:1c:8e: e3:d3:4b:a1:4f:85:2a:5d:7c:36:f7:0b:47:0b:42:49:2b:93: 9b:96:35:9e:66:85:d1:10:1b:8a:da:62:59:c9:92:d0:5c:20: e9:b1:4a:a0:a8:b4:a1:dc:21:27:10:9f:15:c7:33:16:1d:8a: 56:2a:e1:be:ea:d6:b8:a2:3e:37:33:e5:cf:bc:fd:63:0b:0c: 8e:0f:74:e5:1f:6f:cb:61:b0:8e:85:e0:4c:30:9c:28:73:f2: 0a:cb:e6:c8:b4:61:d1:5b:e4:e3:71:61:0c:95:43:d8:75:9f: 23:15:27:83:13:bc:ae:11:00:53:a8:42:d9:46:40:30:c8:92: d4:2f:53:96:6f:ba:d3:f7:89:fb:73:1d:f1:f1:dc:5c:b1:e6: 37:f7:15:c0:01:fe:0b:df:c3:3b:7a:fe:f3:e6:20:63:06:be: 12:1f:07:16:26:2f:82:0c:f7:74:4a:ed:23:b0:43:fa:1e:eb: 73:d9:d0:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTExQzExMC8GA1UEBRMoRjFDOTQyNjMyRkE2RkM3NzEwODE2MDg4RjBDQjhDMTMz NTI1MUNERDAeFw0yNTA0MjQxNDIyNTBaFw0yNTA1MDExNDIyNTBaMBgxFjAUBgNV BAMTDTY4MGE0OTNhLWQ1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCefG5vuBbv12HcxBOZ9xb3Xa9y5y0+f+mqrVNSJpXra4u13Gu/08XDWZ0IVC60 cNgiqecZvTYRhHOhRmvp/ID1ZJ9RorDXwKX0vgmj453ZxQJh7np8j1EgK0LnRlcq h4T/AFIeV3Zg/9X++nALAAIiiKVRapEj0c3HJArWeTYXJ/GJPl5DGWvxkPvzBHsM S+uZ5EFSB3qqUtSSIxCPHoE4i8Vza97N7KibjZDgtIeoDRZ8xgoaavSabvtTVdcD 1uZwmZMKrrK3kN2rsIydHKchlOh6h2uhV/ZY0puI9joBs/BXv/JqCJiDUSak/LJw nCmaz+n3VHYoypBhjSIpkgvzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcvMUh616 eA/1+QkoM8dORG5hxv8wHwYDVR0jBBgwFoAU8clCYy+m/HcQgWCI8MuMEzUlHN0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MTFDLzgwN0RCQ0JDNkU0 MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhO MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGNsQ1l5LW1fSGNRZ1dDSThNdU1FelVsSE4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MTFDLzgwN0RCQ0JDNkU0MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hj UWdXQ0k4TXVNRXpVbEhOMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYGIIRKalw3JaDoQE6qDz7OBV3lnFoTAQweLxXi5+BM9JG6GQN/kCZP Y/vCOIetHjctMtqPzuzSfQdo/hqf23OUZ4JfgtYcjuPTS6FPhSpdfDb3C0cLQkkr k5uWNZ5mhdEQG4raYlnJktBcIOmxSqCotKHcIScQnxXHMxYdilYq4b7q1riiPjcz 5c+8/WMLDI4PdOUfb8thsI6F4EwwnChz8grL5si0YdFb5ONxYQyVQ9h1nyMVJ4MT vK4RAFOoQtlGQDDIktQvU5ZvutP3iftzHfHx3Fyx5jf3FcAB/gvfwzt6/vPmIGMG vhIfBxYmL4IM93RK7SOwQ/oe63PZ0Ms= -----END CERTIFICATE-----Generated at Thu Apr 24 15:52:11 2025 by rpki-client on console.sobornost.net