$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: dccy/7ArVfQfrEP8x2k2uq6wWN/S52pU2fqb+Skunqc= Subject key identifier: 15:C4:01:CF:7E:C0:C1:B2:AD:90:B4:92:CC:A4:FF:3A:54:32:6F:20 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0788 Signing time: Sat 26 Apr 2025 21:03:48 +0000 Manifest this update: Sat 26 Apr 2025 21:03:48 +0000 Manifest next update: Sat 03 May 2025 21:03:48 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: sIqmhZECXWvyvkfZsL3nEmya3DlIz7uZT8dXWvy1T+4=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Apr 26 21:03:48 2025 GMT Not After : May 3 21:03:48 2025 GMT Subject: CN=680d4a34-c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:66:15:86:98:1d:b3:f5:64:60:7f:34:19: 3f:93:12:bc:75:a0:90:e6:b8:3e:2f:2d:fd:2d:0a: 76:95:c2:7b:eb:cb:48:e3:05:5e:bf:05:c6:32:9c: d3:96:2c:0f:e3:81:b9:36:6b:ce:c7:9f:6c:e8:b2: 25:52:c9:ef:9f:ae:db:ed:62:54:96:43:5a:b1:2b: 2d:d3:6f:47:7a:e0:e1:ec:62:67:0e:8a:14:98:ea: 98:3d:75:59:49:1f:2f:e0:1c:40:10:63:07:00:eb: a6:99:69:f0:b9:5c:31:95:4e:b1:7b:58:b0:4c:b5: f4:6e:20:0f:40:a8:4a:e2:b2:92:44:ba:4d:a2:3b: 74:61:f9:ce:f1:01:41:80:ba:a0:6e:3f:4b:b9:be: 02:1c:3a:64:53:8a:4f:37:51:1e:6f:93:ec:2c:1c: 13:d1:00:ec:00:3f:7e:4c:e8:ca:4a:f0:b4:1f:de: f7:16:4f:23:bc:a4:72:b7:e7:72:99:87:fe:29:73: dd:ed:e8:30:aa:67:2c:f3:9b:e9:6f:e5:89:2f:31: d0:ad:81:0e:ef:83:c3:e0:d2:67:80:4c:66:0f:af: 4f:cb:55:67:ab:08:e3:d4:9d:74:70:1f:90:b4:07: 84:26:8d:31:95:00:85:16:76:34:93:71:0d:65:55: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C4:01:CF:7E:C0:C1:B2:AD:90:B4:92:CC:A4:FF:3A:54:32:6F:20 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:81:6d:ec:38:26:b9:f1:95:55:84:78:7f:c5:00:6f:cd:5f: 66:37:a6:05:44:35:46:ce:1b:bc:4e:c1:5d:e7:ec:00:03:b5: ec:7e:f0:c0:54:57:50:89:9d:32:3a:c9:33:f6:ec:bb:13:a3: 37:02:16:6a:0a:95:89:8a:e0:0b:59:69:f1:68:83:42:05:ab: 2f:3e:c0:6b:0d:14:e2:06:92:32:f2:e7:af:83:d3:99:fd:a7: 76:04:8e:a0:1d:e8:60:b0:86:6b:a8:70:d0:57:1a:54:c8:ba: 23:59:dd:2d:64:0f:96:7f:f1:6b:a9:24:7b:fb:d9:e9:9c:c4: fc:28:2a:d5:b3:b7:d7:7d:68:d3:f6:ef:49:72:20:50:1b:aa: 9d:29:4a:12:a0:c6:0a:3c:1c:bc:02:73:de:7b:3a:0a:9b:67: 1a:ed:29:53:a2:58:45:15:78:6d:2e:66:38:f5:f2:1a:23:cc: 4c:4f:d0:0a:7b:c6:4d:70:7e:7a:b3:8a:ae:60:9a:c0:ec:93: f8:52:84:7e:86:d7:de:e2:e3:82:db:7f:bf:7a:6a:48:63:6b: 92:0f:30:05:8e:23:d4:7e:10:8a:7a:d0:15:1a:98:e8:c2:f4: 9e:e6:c3:5c:2d:cd:6a:e8:69:52:80:70:1c:1d:ba:39:95:89: 23:71:e3:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUwNDI2MjEwMzQ4WhcNMjUwNTAzMjEwMzQ4WjAYMRYwFAYD VQQDEw02ODBkNGEzNC1jNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lVmFYaYHbP1ZGB/NBk/kxK8daCQ5rg+Ly39LQp2lcJ768tI4wVevwXGMpzT liwP44G5NmvOx59s6LIlUsnvn67b7WJUlkNasSst029HeuDh7GJnDooUmOqYPXVZ SR8v4BxAEGMHAOummWnwuVwxlU6xe1iwTLX0biAPQKhK4rKSRLpNojt0YfnO8QFB gLqgbj9Lub4CHDpkU4pPN1Eeb5PsLBwT0QDsAD9+TOjKSvC0H973Fk8jvKRyt+dy mYf+KXPd7egwqmcs85vpb+WJLzHQrYEO74PD4NJngExmD69Py1Vnqwjj1J10cB+Q tAeEJo0xlQCFFnY0k3ENZVU85QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXEAc9+ wMGyrZC0ksyk/zpUMm8gMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqgW3sOCa58ZVVhHh/xQBvzV9mN6YFRDVGzhu8TsFd5+wAA7XsfvDA VFdQiZ0yOskz9uy7E6M3AhZqCpWJiuALWWnxaINCBasvPsBrDRTiBpIy8uevg9OZ /ad2BI6gHehgsIZrqHDQVxpUyLojWd0tZA+Wf/FrqSR7+9npnMT8KCrVs7fXfWjT 9u9JciBQG6qdKUoSoMYKPBy8AnPeezoKm2ca7SlTolhFFXhtLmY49fIaI8xMT9AK e8ZNcH56s4quYJrA7JP4UoR+htfe4uOC23+/empIY2uSDzAFjiPUfhCKetAVGpjo wvSe5sNcLc1q6GlSgHAcHbo5lYkjcePi -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net