$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: lW0lMvDeRDuDYynNSS+gZEfU1nbVPvQjdv+eVFBmRmU= Subject key identifier: D4:A5:B2:70:86:22:2C:9E:81:25:16:42:43:B3:51:D1:38:54:91:ED Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 10E9 Signing time: Mon 28 Apr 2025 17:32:44 +0000 Manifest this update: Mon 28 Apr 2025 17:32:44 +0000 Manifest next update: Mon 05 May 2025 17:32:44 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: Gb6pih3Dpl9dkZ33AI3/HZKEI/m2yzQlqUU3rt+aehk=) 2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) 4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 5: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4358 (0x1106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Apr 28 17:32:44 2025 GMT Not After : May 5 17:32:44 2025 GMT Subject: CN=680fbbbc-8fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:81:f6:62:0e:11:08:da:e9:35:56:82:9a: fe:18:3d:fb:70:9f:eb:3a:ff:3f:11:d4:24:67:c5: fa:31:54:f2:38:a1:fc:46:0b:de:e7:df:fb:a0:ff: 04:dc:20:a7:7d:ff:7a:ba:50:75:b7:16:54:eb:65: 92:6d:c6:82:aa:81:e0:2c:7d:0c:69:78:9a:e7:17: e1:78:04:6d:5a:c3:52:d0:06:9f:41:8e:7f:67:9a: 10:1a:42:13:91:e8:41:ba:5b:bf:08:1f:bf:40:25: 20:c5:36:96:be:3e:0a:3e:3d:21:b4:43:98:b5:ac: 92:d6:90:d4:33:86:a3:f7:d4:d4:51:f8:90:b7:7b: a8:4c:dd:17:dc:bb:ed:f7:e8:91:d7:f7:15:c6:f6: ff:5d:d2:13:af:e1:82:cf:d8:5f:d6:6c:96:4f:7a: c3:a3:9f:9c:5f:ad:d3:b0:9a:5d:2e:df:95:81:5f: 9b:a8:ad:0d:2c:59:4b:1a:15:7c:01:43:e8:02:c2: 14:b7:7c:30:45:b6:80:27:de:da:dc:8c:85:cc:cd: 61:47:68:95:42:09:1a:12:8a:61:74:70:64:3b:04: 13:cd:02:7e:26:ac:99:88:ca:2e:e5:3e:7c:a8:06: 6f:02:53:d7:9d:a9:ad:19:de:3f:09:a1:41:ea:41: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A5:B2:70:86:22:2C:9E:81:25:16:42:43:B3:51:D1:38:54:91:ED X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2f:d4:5b:1f:76:25:04:40:13:b9:a0:fc:53:98:39:26:b2: 51:dc:9b:6d:f1:eb:92:ef:01:d5:23:f5:6c:3d:9a:8f:fc:08: 86:58:83:46:a0:b0:2b:a8:d5:6e:bb:40:8c:2a:fa:d0:9d:8c: e3:01:8c:76:1d:a1:c5:52:bd:de:46:65:f3:c4:da:56:bf:d8: 4b:35:d0:c4:c0:af:04:3a:82:5f:f6:75:eb:22:de:7f:13:7b: 08:8e:29:9c:9e:36:17:64:ed:cc:7f:72:74:08:54:27:aa:ed: 4f:3b:d8:07:6c:6c:bf:22:d4:9b:61:7e:80:cb:58:0a:06:30: 6e:1f:6e:e5:15:d0:03:75:42:94:2d:8d:ee:a5:2e:a5:b5:1f: f7:95:e8:36:52:99:69:f2:fc:24:61:c1:24:1d:d6:65:b0:38: 8f:f1:cf:cb:3b:c6:7d:6f:54:17:fd:0d:a9:24:31:5c:f7:08: 0a:46:9f:8e:13:39:27:cf:67:aa:36:dd:27:e7:e8:9a:25:64: e9:3f:b7:6f:a1:66:8a:7f:ec:b3:10:21:cb:c0:f4:56:ea:5a: 1e:90:0f:73:32:05:87:51:be:6f:17:e6:fc:74:26:e8:fb:7f: 3c:30:7f:59:8c:1e:df:05:67:69:35:be:70:2d:7d:81:4d:01: 61:dc:ae:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUwNDI4MTczMjQ0WhcNMjUwNTA1MTczMjQ0WjAYMRYwFAYD VQQDEw02ODBmYmJiYy04ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09iB9mIOEQja6TVWgpr+GD37cJ/rOv8/EdQkZ8X6MVTyOKH8Rgve59/7oP8E 3CCnff96ulB1txZU62WSbcaCqoHgLH0MaXia5xfheARtWsNS0AafQY5/Z5oQGkIT kehBulu/CB+/QCUgxTaWvj4KPj0htEOYtayS1pDUM4aj99TUUfiQt3uoTN0X3Lvt 9+iR1/cVxvb/XdITr+GCz9hf1myWT3rDo5+cX63TsJpdLt+VgV+bqK0NLFlLGhV8 AUPoAsIUt3wwRbaAJ97a3IyFzM1hR2iVQgkaEophdHBkOwQTzQJ+JqyZiMou5T58 qAZvAlPXnamtGd4/CaFB6kHAawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSlsnCG IiyegSUWQkOzUdE4VJHtMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4L9RbH3YlBEATuaD8U5g5JrJR3Jtt8euS7wHVI/VsPZqP/AiGWING oLArqNVuu0CMKvrQnYzjAYx2HaHFUr3eRmXzxNpWv9hLNdDEwK8EOoJf9nXrIt5/ E3sIjimcnjYXZO3Mf3J0CFQnqu1PO9gHbGy/ItSbYX6Ay1gKBjBuH27lFdADdUKU LY3upS6ltR/3leg2Uplp8vwkYcEkHdZlsDiP8c/LO8Z9b1QX/Q2pJDFc9wgKRp+O Ezknz2eqNt0n5+iaJWTpP7dvoWaKf+yzECHLwPRW6loekA9zMgWHUb5vF+b8dCbo +388MH9ZjB7fBWdpNb5wLX2BTQFh3K7K -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:25 2025 by rpki-client on console.sobornost.net