$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: fcEd/xaRb3qjn4a7JSkXLqJHtviyZ31x1LLZbwSrAI8= Subject key identifier: AE:AA:D8:F3:41:7B:FA:FD:68:3C:64:C9:7B:16:04:AB:AB:27:1E:E1 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 41 Signing time: Sun 27 Apr 2025 06:17:08 +0000 Manifest this update: Sun 27 Apr 2025 06:17:07 +0000 Manifest next update: Sun 04 May 2025 06:17:07 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: hZblaLqoaaPF6mvHKROtl8SyLVryNHSRZFTBK+wom0s=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Apr 27 06:17:07 2025 GMT Not After : May 4 06:17:07 2025 GMT Subject: CN=680dcbe3-8958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:ae:6e:65:ec:54:7d:39:e4:f2:f4:dc:5f: bf:a1:e9:19:e9:09:b5:c6:73:db:48:7b:10:0c:9f: f4:5a:c4:15:05:02:3d:44:ce:1e:06:81:cb:a4:d1: 38:35:53:b1:f7:9c:1b:1d:8c:53:04:97:c7:32:09: d0:d3:77:ba:b8:c8:7e:34:c3:00:28:da:64:37:78: 78:f4:65:ba:78:a6:87:45:27:07:b1:7b:d9:77:e5: 19:d3:cc:65:77:10:53:e0:df:07:d8:9a:2d:bc:e4: 11:fe:81:5a:97:58:98:ba:55:85:ce:89:51:95:d9: 70:4b:1e:1a:be:51:55:f0:98:5d:82:07:75:67:5a: d5:16:4f:64:85:2f:f0:dd:a3:27:f1:5e:46:bd:4c: 37:b6:2e:94:c3:83:09:f0:bd:49:31:18:4c:e0:0b: 37:32:76:f8:84:10:82:47:df:ca:17:18:02:7e:4b: be:69:43:95:42:26:76:53:7a:61:f0:1e:07:31:3c: ea:25:fb:d0:4d:de:ed:0e:45:77:df:ff:ed:89:79: b2:26:59:24:a5:21:d3:42:f6:fa:67:02:ee:59:4f: 8a:ac:ee:0f:67:e6:a6:8e:a3:b7:c5:d3:e7:51:12: 76:de:3f:2b:37:d9:25:ba:97:0c:15:4e:c0:ce:5c: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:D8:F3:41:7B:FA:FD:68:3C:64:C9:7B:16:04:AB:AB:27:1E:E1 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:7f:fa:36:da:73:ba:92:f5:c7:12:43:6c:43:47:9a:2d: 02:4e:a8:6f:4c:bb:2a:94:fd:78:a1:e3:bf:0d:34:b8:70:51: 57:23:4f:27:44:9f:19:4f:f5:3b:74:9f:af:67:f0:43:9b:b0: 0c:ae:1e:fa:17:bf:fb:83:e0:4c:ca:32:00:bc:d3:eb:86:be: 08:0a:6a:c5:14:25:5d:a8:7a:65:1b:39:03:28:b4:b9:62:ab: 11:4b:b4:82:7a:29:ab:e2:f6:ee:ac:49:f9:9d:3f:ec:91:ab: 05:21:7a:51:c0:68:fb:5c:b4:ce:c6:f1:56:35:a9:2f:8a:67: 68:48:3f:0c:19:c5:4d:be:d3:3e:02:43:17:df:e3:90:ec:03: 19:9c:94:f1:28:a3:d4:2d:f9:da:08:0e:7a:1f:56:19:50:28: 0c:91:a5:37:f6:e0:84:0e:89:8a:d5:b7:82:d8:04:4e:53:c0: 0a:67:f5:b5:27:1b:6f:71:05:85:87:6c:fb:14:be:2b:d1:ae: 10:64:17:3a:64:f1:af:ec:96:81:d7:47:7a:c4:21:03:14:f8: 31:a5:f5:1b:22:c9:f0:45:be:99:9b:fa:3b:f4:dd:67:20:d7: 07:f4:b3:50:66:61:06:ea:b5:46:6b:c1:6d:08:b2:28:91:4c: 20:57:6e:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA0MjcwNjE3MDdaFw0yNTA1MDQwNjE3MDdaMBgxFjAUBgNV BAMTDTY4MGRjYmUzLTg5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJN65uZexUfTnk8vTcX7+h6RnpCbXGc9tIexAMn/RaxBUFAj1Ezh4Ggcuk0Tg1 U7H3nBsdjFMEl8cyCdDTd7q4yH40wwAo2mQ3eHj0Zbp4podFJwexe9l35RnTzGV3 EFPg3wfYmi285BH+gVqXWJi6VYXOiVGV2XBLHhq+UVXwmF2CB3VnWtUWT2SFL/Dd oyfxXka9TDe2LpTDgwnwvUkxGEzgCzcydviEEIJH38oXGAJ+S75pQ5VCJnZTemHw HgcxPOol+9BN3u0ORXff/+2JebImWSSlIdNC9vpnAu5ZT4qs7g9n5qaOo7fF0+dR EnbePys32SW6lwwVTsDOXCenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrqrY80F7 +v1oPGTJexYEq6snHuEwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2+f/o22nO6kvXHEkNsQ0eaLQJOqG9MuyqU/Xih478NNLhwUVcjTydE nxlP9Tt0n69n8EObsAyuHvoXv/uD4EzKMgC80+uGvggKasUUJV2oemUbOQMotLli qxFLtIJ6Kavi9u6sSfmdP+yRqwUhelHAaPtctM7G8VY1qS+KZ2hIPwwZxU2+0z4C Qxff45DsAxmclPEoo9Qt+doIDnofVhlQKAyRpTf24IQOiYrVt4LYBE5TwApn9bUn G29xBYWHbPsUvivRrhBkFzpk8a/sloHXR3rEIQMU+DGl9RsiyfBFvpmb+jv03Wcg 1wf0s1BmYQbqtUZrwW0IsiiRTCBXbg4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net