$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: NhAuYe5kQI+4kaie7mGQ0Kakg7C/ccR6+2ZpVBq6Dwg= Subject key identifier: A8:21:89:F3:0D:87:12:21:24:F2:6D:80:41:A0:65:04:27:7E:23:67 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: A7 Signing time: Sun 27 Apr 2025 04:58:32 +0000 Manifest this update: Sun 27 Apr 2025 04:58:31 +0000 Manifest next update: Sun 04 May 2025 04:58:31 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: KOfe2v4X5vSWQIbXjtpjDBwOA0qZnWVi7dO8HRJrhTM=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: +BYuc5eNV9QVdOv8+l4kTKaLYQnJEvaUX1OVi3Uj8pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Apr 27 04:58:31 2025 GMT Not After : May 4 04:58:31 2025 GMT Subject: CN=680db977-89bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:f0:02:10:39:bd:64:94:c3:d6:18:26:a5: 70:cf:7a:24:97:42:f4:35:80:f8:6b:13:c7:57:8d: e5:2f:a3:49:f6:44:3b:14:b7:48:01:8f:35:19:38: 59:40:79:6e:a0:eb:32:27:5e:3c:6d:12:79:a0:40: 5c:51:bf:62:f7:55:12:75:20:ff:19:0e:aa:21:21: 2c:7d:95:e4:b7:26:40:70:97:6a:2b:71:82:5c:d5: 2e:72:c6:95:68:02:a1:9f:45:42:ea:6e:db:25:c2: 73:3d:ca:f0:9b:2f:df:bc:a3:6b:23:e2:c4:7e:4b: fc:7c:ba:90:7f:65:3d:72:e7:90:c9:ce:95:bc:8c: 6f:d3:5c:9a:a7:ea:c7:72:8d:f5:f0:4d:bd:b5:12: 05:f0:5d:6e:13:92:bc:47:fe:67:2e:cc:23:72:80: 2c:69:f7:2f:f6:e7:ac:b2:da:44:6d:fc:43:e0:aa: 8e:ac:59:a9:9a:67:bd:90:60:fb:08:92:36:e9:a3: 14:3c:14:b6:8c:f3:30:56:bb:7d:0a:af:12:6b:78: ce:d6:ca:fc:6e:68:48:d1:16:ca:df:8c:60:0d:6b: 48:7f:6e:5f:b2:7c:05:bc:20:35:87:c9:72:b4:2d: a8:13:5b:c4:5d:cc:e9:f8:cb:63:72:b8:f6:74:09: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:89:F3:0D:87:12:21:24:F2:6D:80:41:A0:65:04:27:7E:23:67 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:66:16:8b:d0:af:12:6a:a9:9f:81:f7:75:d6:58:de:65:d5: 65:d7:dd:cb:8b:b8:81:40:ea:bf:5b:31:85:0e:fd:0e:b4:f3: 89:d0:5e:5c:71:b9:21:26:0c:3b:30:40:c8:98:a2:6f:de:e9: a0:a2:5a:e3:50:8c:29:55:4b:33:5c:ae:7b:1f:0d:e9:1c:37: 4e:9d:98:06:96:35:b3:bd:b0:22:db:bb:6f:3a:b6:ec:3a:76: bc:ad:a1:56:86:76:ce:fe:5d:49:28:ca:04:89:ef:db:4c:a1: a5:94:65:db:47:3f:8a:58:ab:72:6c:b3:2d:e8:40:f9:d7:20: b2:09:5d:16:3a:9d:78:07:5f:aa:0f:f9:b8:fa:14:75:1b:fc: 5a:a1:5a:49:a8:c8:94:1c:e9:ad:e6:aa:4b:39:63:de:4d:f2: 10:6c:ae:01:76:83:a9:96:86:41:d3:eb:42:17:6c:8e:55:4b: a2:cc:a3:0f:11:1c:4c:d3:09:a1:11:b6:20:04:d0:f2:21:3c: a3:55:5e:1c:e7:b4:ea:93:43:d4:4f:c1:69:0a:39:a3:0f:4e: 50:05:a8:4b:f7:b2:bd:8b:c0:3f:57:66:7b:0c:c7:81:9d:5b: 8c:83:32:01:a4:b2:47:b1:6b:64:a6:2c:7c:9b:90:8a:8a:88: eb:f2:2d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwNDI3MDQ1ODMxWhcNMjUwNTA0MDQ1ODMxWjAYMRYwFAYD VQQDEw02ODBkYjk3Ny04OWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AnwAhA5vWSUw9YYJqVwz3okl0L0NYD4axPHV43lL6NJ9kQ7FLdIAY81GThZ QHluoOsyJ148bRJ5oEBcUb9i91USdSD/GQ6qISEsfZXktyZAcJdqK3GCXNUucsaV aAKhn0VC6m7bJcJzPcrwmy/fvKNrI+LEfkv8fLqQf2U9cueQyc6VvIxv01yap+rH co318E29tRIF8F1uE5K8R/5nLswjcoAsafcv9uesstpEbfxD4KqOrFmpmme9kGD7 CJI26aMUPBS2jPMwVrt9Cq8Sa3jO1sr8bmhI0RbK34xgDWtIf25fsnwFvCA1h8ly tC2oE1vEXczp+Mtjcrj2dAlhzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKghifMN hxIhJPJtgEGgZQQnfiNnMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOZhaL0K8Saqmfgfd11ljeZdVl193Li7iBQOq/WzGFDv0OtPOJ0F5c cbkhJgw7MEDImKJv3umgolrjUIwpVUszXK57Hw3pHDdOnZgGljWzvbAi27tvOrbs Ona8raFWhnbO/l1JKMoEie/bTKGllGXbRz+KWKtybLMt6ED51yCyCV0WOp14B1+q D/m4+hR1G/xaoVpJqMiUHOmt5qpLOWPeTfIQbK4BdoOploZB0+tCF2yOVUuizKMP ERxM0wmhEbYgBNDyITyjVV4c57Tqk0PUT8FpCjmjD05QBahL97K9i8A/V2Z7DMeB nVuMgzIBpLJHsWtkpix8m5CKiojr8i2Q -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net