$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: WMpdAs+UfWeieBSD+9UKIil28xNhjymwP+T7UxHzTrI= Subject key identifier: 89:78:54:E4:70:59:2C:66:FE:07:CC:F4:36:9F:03:2F:11:7B:D7:6D Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 78 Signing time: Sat 26 Apr 2025 23:32:44 +0000 Manifest this update: Sat 26 Apr 2025 23:32:43 +0000 Manifest next update: Sat 03 May 2025 23:32:43 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: UN6d1qiDpHzlK47Egt5LIUguA4B+w8HBKPWIg4lwCMc=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Apr 26 23:32:43 2025 GMT Not After : May 3 23:32:43 2025 GMT Subject: CN=680d6d1b-7197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:e9:84:11:fa:57:c1:fe:95:11:56:9a:2e: 19:10:c5:90:b2:8a:b4:b6:6b:dc:99:4d:ee:13:ce: 56:cd:79:d6:2b:c4:28:14:f2:f6:aa:d0:94:82:69: e3:98:38:1b:36:fe:7b:76:d0:b0:97:0c:de:fd:e8: bf:4c:83:be:15:05:85:b0:60:0b:c3:f1:7f:48:98: 97:98:d8:9d:8d:17:6d:9c:35:fe:93:1b:55:8d:ad: 73:40:f9:64:f5:34:e1:7a:7d:dd:ad:67:75:c3:d9: 08:b2:25:50:76:92:64:51:5a:73:ae:65:36:5e:6a: 1a:88:7e:88:1e:85:19:aa:22:bf:f5:f3:e4:2f:4b: 58:6f:aa:fa:64:04:4d:e2:5f:24:be:db:84:1c:09: 72:30:a7:96:d4:76:da:2b:ad:ca:67:92:c7:7c:b6: 31:dc:34:a6:62:44:6a:91:a7:a5:5a:6e:5d:b1:c0: 3a:4a:40:87:d6:fa:ae:a5:82:91:e1:a7:ab:c0:11: a1:60:5a:e1:2a:8a:e0:fa:64:8e:c3:67:14:e3:d2: a9:c2:81:6c:25:a2:d3:6a:6a:3a:49:a7:c6:94:01: ae:ce:a0:15:03:9c:6a:66:91:9c:98:9d:66:9c:83: d6:c7:bc:13:a9:07:a6:aa:15:38:09:a4:c6:ae:41: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:54:E4:70:59:2C:66:FE:07:CC:F4:36:9F:03:2F:11:7B:D7:6D X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:42:6a:cd:9d:e1:83:b6:b2:f7:8e:38:4d:88:0d:6c:59:22: 78:96:1e:18:06:b4:97:df:ce:f3:0a:0b:95:a6:76:be:60:ff: 3b:37:52:e5:a0:12:74:f8:38:d7:19:49:d8:b3:86:68:c7:67: 20:b7:b7:99:e1:40:52:4c:ec:61:54:9b:72:03:58:54:e7:a7: 98:18:4b:55:b7:73:b5:1d:39:50:4b:b7:50:02:09:1f:d3:09: 2a:56:5e:ea:a4:1e:4d:56:15:b0:26:25:37:82:2c:9e:bb:1b: 8b:a8:38:1f:85:8a:57:83:41:09:9d:f0:56:c1:c5:cd:c1:95: e6:9c:ed:07:0a:5d:dd:03:4e:a5:af:9d:84:9b:44:ad:0e:d5: ca:a8:c5:31:f6:74:fb:c7:11:87:b3:4f:68:90:10:e7:a4:fc: bd:d0:6e:11:1d:0b:7d:f8:08:5e:f9:93:00:15:a5:d4:50:41: 9f:c6:67:4a:ef:6e:f4:f9:7d:1b:ed:e6:20:7d:b2:68:ec:49: a1:bf:6d:80:a5:da:03:bf:39:3c:70:f9:94:60:1c:a3:9f:3b: 1f:1d:25:bb:45:09:41:65:d8:d2:bc:3c:65:29:e5:47:37:d4: 26:c6:f3:a9:32:ec:58:4a:f3:4d:b0:fd:9a:6c:4e:2b:64:25: 1b:3d:d5:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTNCRTExMC8GA1UEBRMoNEIyQzc3QkMyREY0M0M3Mjg0RDAxRTQ1QjEyREIzQkRG MDA5MTZEMTAeFw0yNTA0MjYyMzMyNDNaFw0yNTA1MDMyMzMyNDNaMBgxFjAUBgNV BAMTDTY4MGQ2ZDFiLTcxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBuOmEEfpXwf6VEVaaLhkQxZCyirS2a9yZTe4TzlbNedYrxCgU8vaq0JSCaeOY OBs2/nt20LCXDN796L9Mg74VBYWwYAvD8X9ImJeY2J2NF22cNf6TG1WNrXNA+WT1 NOF6fd2tZ3XD2QiyJVB2kmRRWnOuZTZeahqIfogehRmqIr/18+QvS1hvqvpkBE3i XyS+24QcCXIwp5bUdtorrcpnksd8tjHcNKZiRGqRp6Vabl2xwDpKQIfW+q6lgpHh p6vAEaFgWuEqiuD6ZI7DZxTj0qnCgWwlotNqajpJp8aUAa7OoBUDnGpmkZyYnWac g9bHvBOpB6aqFTgJpMauQYZ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiXhU5HBZ LGb+B8z0Np8DLxF7120wHwYDVR0jBBgwFoAUSyx3vC30PHKE0B5FsS2zvfAJFtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBM0JFLzY3OEUxNkIwNkZD RTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3l4M3ZDMzBQSEtFMEI1RnNTMnp2ZkFKRnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB M0JFLzY3OEUxNkIwNkZDRTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhL RTBCNUZzUzJ6dmZBSkZ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANVCas2d4YO2sveOOE2IDWxZIniWHhgGtJffzvMKC5Wmdr5g/zs3UuWg EnT4ONcZSdizhmjHZyC3t5nhQFJM7GFUm3IDWFTnp5gYS1W3c7UdOVBLt1ACCR/T CSpWXuqkHk1WFbAmJTeCLJ67G4uoOB+FileDQQmd8FbBxc3Bleac7QcKXd0DTqWv nYSbRK0O1cqoxTH2dPvHEYezT2iQEOek/L3QbhEdC334CF75kwAVpdRQQZ/GZ0rv bvT5fRvt5iB9smjsSaG/bYCl2gO/OTxw+ZRgHKOfOx8dJbtFCUFl2NK8PGUp5Uc3 1CbG86ky7FhK802w/ZpsTitkJRs91aY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net