$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft File: xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json) Hash identifier: GuB91OqtNrdgxh99P+q1wMEWX5wadLRQ2ybdik4KubY= Subject key identifier: 17:F2:67:64:30:96:54:AC:2D:04:B4:20:CC:A5:54:33:8B:33:8A:24 Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft Manifest number: 0658 Signing time: Sat 26 Apr 2025 22:06:53 +0000 Manifest this update: Sat 26 Apr 2025 22:06:52 +0000 Manifest next update: Sat 03 May 2025 22:06:52 +0000 Files and hashes: 1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: 4SHpYP1xrMg2+FApnMCGnpjwGfivkHLiQ9tz1EkeWH8=) 2: 485D694A454911EEB8718378C4F9AE02.roa (hash: DpNVsF8S1R1VahxgyAnkQsdhv9Y/GOwsBJQM35rMSJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E Validity Not Before: Apr 26 22:06:52 2025 GMT Not After : May 3 22:06:52 2025 GMT Subject: CN=680d58fd-40bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:bb:2e:49:94:39:59:1c:eb:d9:3e:39:9e: 41:da:29:80:6a:6f:8f:6d:86:1e:33:a7:cb:fd:9c: a9:60:be:77:1a:90:cd:c6:aa:c9:66:96:9a:ee:77: 6a:8f:9d:a3:2d:5a:8a:74:a6:aa:b1:f6:68:a6:92: 0f:9c:39:6c:d4:97:b6:0d:9f:d7:62:33:5f:e9:0f: 36:d2:38:73:78:52:72:b6:58:96:a4:89:3d:f1:7c: 37:bf:9b:ef:56:b0:04:4f:e7:a7:3b:1f:d1:17:53: 44:9b:4f:38:6c:33:df:4c:4f:93:d6:69:8c:f7:37: 90:6c:6d:e8:f5:9c:e9:26:38:0b:5a:43:69:bd:85: 64:64:f3:59:26:1c:5d:34:dc:37:0c:38:b9:d1:99: 6a:a2:8a:46:d0:63:8d:ac:ff:60:c9:aa:62:25:4a: c9:be:aa:2f:09:1a:a2:3e:93:cd:8a:16:4b:63:d3: 4f:67:2b:51:b0:79:a1:68:26:2c:8d:0a:a6:c4:d3: e3:f2:51:62:b5:50:b7:46:2d:07:08:05:97:51:e1: cb:7a:db:15:15:23:6f:0b:bf:11:1b:fe:83:6f:a2: b7:c6:ad:5e:33:ca:99:81:e3:ae:36:69:d8:c1:8b: d6:99:1f:24:ce:c5:ea:8e:e7:72:d2:b2:81:02:0b: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F2:67:64:30:96:54:AC:2D:04:B4:20:CC:A5:54:33:8B:33:8A:24 X509v3 Authority Key Identifier: keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0b:55:48:55:ea:c5:c7:b1:72:5b:5d:32:69:99:b2:99:65: 04:4b:53:68:bb:9b:0b:bd:19:c7:36:95:d4:89:9d:a4:7b:76: fe:be:db:c6:30:15:4c:e1:29:a3:92:3e:2f:bb:88:bb:0d:fa: 15:d5:ba:1c:40:23:2d:08:64:05:74:a8:5c:dc:72:ac:40:85: 13:18:89:00:98:4f:b3:8d:e9:15:37:bc:71:18:13:14:f4:31: 28:a0:62:02:c7:37:16:6f:6a:fa:19:4f:46:eb:98:63:fc:34: 07:03:f0:e7:88:da:dd:42:46:30:af:9e:36:83:31:0a:28:36: 7d:1a:cb:0d:8e:3d:10:1c:b5:7f:59:b4:31:3c:7e:44:28:88: 7e:43:59:3c:31:3d:a8:fa:84:42:5f:d7:fc:bb:58:e9:c0:15: b2:ec:c0:12:2d:43:d1:ad:43:31:bc:a1:35:9c:20:54:86:2f: cf:03:82:47:26:dc:0c:30:cb:87:1e:50:99:9d:cf:c6:d7:7f: 14:4b:e4:00:e3:ae:d4:ba:49:00:37:47:36:04:8e:ce:a1:03: 1e:1d:61:79:a7:6c:0b:68:c9:94:bb:15:1e:f2:7c:8a:da:05: 4a:4e:fb:6f:18:a0:f4:0f:c2:d7:d1:5d:3e:d2:42:09:c5:1d: 10:49:a1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEM3MEI0RTA0N0NBQTczNzcyNEI4OUQ1ODREQjVDMEMx QTg1OEQyOEUwHhcNMjUwNDI2MjIwNjUyWhcNMjUwNTAzMjIwNjUyWjAYMRYwFAYD VQQDEw02ODBkNThmZC00MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HO7LkmUOVkc69k+OZ5B2imAam+PbYYeM6fL/ZypYL53GpDNxqrJZpaa7ndq j52jLVqKdKaqsfZoppIPnDls1Je2DZ/XYjNf6Q820jhzeFJytliWpIk98Xw3v5vv VrAET+enOx/RF1NEm084bDPfTE+T1mmM9zeQbG3o9ZzpJjgLWkNpvYVkZPNZJhxd NNw3DDi50ZlqoopG0GONrP9gyapiJUrJvqovCRqiPpPNihZLY9NPZytRsHmhaCYs jQqmxNPj8lFitVC3Ri0HCAWXUeHLetsVFSNvC78RG/6Db6K3xq1eM8qZgeOuNmnY wYvWmR8kzsXqjudy0rKBAgsE8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfyZ2Qw llSsLQS0IMylVDOLM4okMB8GA1UdIwQYMBaAFMcLTgR8qnN3JLidWE21wMGoWNKO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi9GQUNDQkM1QzdG QUQxMUVCOTc3QjUzMzVDNEY5QUUwMi94d3RPQkh5cWMzY2t1SjFZVGJYQXdhaFkw bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h3dE9CSHlxYzNja3VKMVlUYlhBd2FoWTBvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi9GQUNDQkM1QzdGQUQxMUVCOTc3QjUzMzVDNEY5QUUwMi94d3RPQkh5cWMz Y2t1SjFZVGJYQXdhaFkwbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLC1VIVerFx7FyW10yaZmymWUES1Nou5sLvRnHNpXUiZ2ke3b+vtvG MBVM4Smjkj4vu4i7DfoV1bocQCMtCGQFdKhc3HKsQIUTGIkAmE+zjekVN7xxGBMU 9DEooGICxzcWb2r6GU9G65hj/DQHA/DniNrdQkYwr542gzEKKDZ9GssNjj0QHLV/ WbQxPH5EKIh+Q1k8MT2o+oRCX9f8u1jpwBWy7MASLUPRrUMxvKE1nCBUhi/PA4JH JtwMMMuHHlCZnc/G138US+QA467UukkAN0c2BI7OoQMeHWF5p2wLaMmUuxUe8nyK 2gVKTvtvGKD0D8LX0V0+0kIJxR0QSaF9 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net