$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: 7POBTd1mZgmRepCJ0InEZmNkoSHIltdRer5EaupLfNo= Subject key identifier: A3:A8:D2:0A:58:C6:23:06:A3:03:FD:4D:98:AF:6D:37:C7:44:6F:8C Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 013E Signing time: Mon 05 May 2025 03:20:21 +0000 Manifest this update: Mon 05 May 2025 03:20:20 +0000 Manifest next update: Mon 12 May 2025 03:20:20 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: h3V1hjnXDKLnKIFXUCNrW+B3hYauF0HQWUJ0dTKcR7Y=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 5 03:20:20 2025 GMT Not After : May 12 03:20:20 2025 GMT Subject: CN=68182e75-819e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:b5:71:5d:9a:d2:4d:a7:81:b9:39:7b:7d: 72:5c:ca:f2:b3:a9:e3:cc:c2:ee:b6:82:51:63:b3: 35:8c:3c:f3:6d:9c:4a:1b:a1:52:c5:de:d5:70:7c: d5:e5:d4:ad:30:09:40:57:9a:d9:0f:f8:91:b2:37: 93:33:56:98:bd:dc:7f:7f:0e:eb:45:c0:8a:db:d1: 14:4f:c0:21:9f:07:22:07:0c:81:f9:ce:d0:a1:17: b3:8d:12:34:a4:17:63:56:57:a0:85:39:52:e6:81: 4a:65:70:91:43:ff:10:10:4c:3a:97:28:a0:83:b1: 16:a4:94:06:3a:cc:f4:02:00:24:6d:1b:8b:56:22: 48:09:b8:06:49:5c:4a:94:2c:e0:d4:d3:a6:33:21: 38:3c:0c:38:42:34:f6:f2:8b:58:db:bc:e0:8f:4a: 43:78:05:3f:98:29:1f:19:39:a2:c6:ee:41:67:38: 9f:0c:e6:90:e3:30:c7:17:17:59:81:d4:54:57:cf: 35:73:52:09:c1:a8:fe:5e:6a:47:c9:96:d4:9f:98: 9e:28:fd:73:29:69:7d:dd:3b:d1:31:6a:a6:8f:c3: 50:42:54:a7:37:92:5f:71:dc:02:25:3b:9a:d1:73: 51:63:61:41:1a:fc:1c:3b:ff:33:8a:5b:a0:3d:f4: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:D2:0A:58:C6:23:06:A3:03:FD:4D:98:AF:6D:37:C7:44:6F:8C X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9d:c3:0c:b1:0a:a2:26:03:0b:38:6f:ef:78:ee:26:12:9d: c3:e7:43:37:bf:00:4b:18:2b:46:b2:50:71:9c:65:96:df:3d: c5:d8:13:ea:3f:82:d3:fc:e9:ff:d3:6d:a6:6a:cd:f3:c1:0c: e5:51:86:f1:99:6e:c3:42:58:93:2e:e6:0c:8d:c7:33:0b:ee: 02:2e:f0:db:b1:1d:e9:04:e4:c4:9e:96:4e:6e:96:56:56:25: 9f:97:cb:a4:57:14:05:bc:97:7a:74:56:3e:fd:c3:2d:1d:20: 38:30:86:5b:48:0c:77:24:12:88:f6:d4:90:ca:f9:b3:36:b6: b0:80:e2:78:26:8b:cb:ee:18:9b:95:fa:0a:58:72:a5:fd:1c: 72:fd:48:7b:4c:66:f0:53:b8:04:0e:71:7b:c2:54:8a:63:2a: 77:16:27:4a:c4:db:be:9d:2b:bb:f8:f4:13:49:b2:64:26:8c: e1:bd:a4:08:a9:cc:e7:b8:ac:98:cd:d8:e3:b8:c1:a0:78:60: 65:77:f8:ff:8b:8e:e7:b5:0f:87:5b:51:10:f2:d8:8a:ba:e2: 20:74:ad:62:c9:19:45:d6:a2:23:01:b0:f2:00:de:6e:e5:ed: 10:88:e7:60:92:08:fc:c0:cb:72:4a:33:36:bb:9f:8c:95:7e: 5b:e8:fd:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwNTA1MDMyMDIwWhcNMjUwNTEyMDMyMDIwWjAYMRYwFAYD VQQDEw02ODE4MmU3NS04MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZy1cV2a0k2ngbk5e31yXMrys6njzMLutoJRY7M1jDzzbZxKG6FSxd7VcHzV 5dStMAlAV5rZD/iRsjeTM1aYvdx/fw7rRcCK29EUT8AhnwciBwyB+c7QoRezjRI0 pBdjVleghTlS5oFKZXCRQ/8QEEw6lyigg7EWpJQGOsz0AgAkbRuLViJICbgGSVxK lCzg1NOmMyE4PAw4QjT28otY27zgj0pDeAU/mCkfGTmixu5BZzifDOaQ4zDHFxdZ gdRUV881c1IJwaj+XmpHyZbUn5ieKP1zKWl93TvRMWqmj8NQQlSnN5JfcdwCJTua 0XNRY2FBGvwcO/8zilugPfS2uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOo0gpY xiMGowP9TZivbTfHRG+MMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1ncMMsQqiJgMLOG/veO4mEp3D50M3vwBLGCtGslBxnGWW3z3F2BPq P4LT/On/022mas3zwQzlUYbxmW7DQliTLuYMjcczC+4CLvDbsR3pBOTEnpZObpZW ViWfl8ukVxQFvJd6dFY+/cMtHSA4MIZbSAx3JBKI9tSQyvmzNrawgOJ4JovL7hib lfoKWHKl/Rxy/Uh7TGbwU7gEDnF7wlSKYyp3FidKxNu+nSu7+PQTSbJkJozhvaQI qcznuKyYzdjjuMGgeGBld/j/i47ntQ+HW1EQ8tiKuuIgdK1iyRlF1qIjAbDyAN5u 5e0QiOdgkgj8wMtySjM2u5+MlX5b6P0x -----END CERTIFICATE-----Generated at Mon May 5 09:45:37 2025 by rpki-client on console.sobornost.net