$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: HAKdGFm/6ZOB0uEa55BvvWMtTuvtGUUWZQnKnuj6ALc= Subject key identifier: 96:3D:4F:82:47:8B:77:32:40:C6:3D:35:90:B9:F1:C5:7F:5B:B7:20 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 0433 Signing time: Sat 26 Apr 2025 23:57:52 +0000 Manifest this update: Sat 26 Apr 2025 23:57:51 +0000 Manifest next update: Sat 03 May 2025 23:57:51 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: QHr77GpZcrf9sLIhUybUjXfBnri+8KFDLzCEKUV1rlc=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Apr 26 23:57:51 2025 GMT Not After : May 3 23:57:51 2025 GMT Subject: CN=680d72ff-34f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:92:44:6f:e5:b7:b7:36:7c:68:a1:9f:bd: 98:f4:47:45:9e:64:d3:48:84:4a:9a:67:72:5a:71: b2:59:0b:14:89:91:82:de:1d:df:84:1c:ec:8c:dc: d2:20:63:a6:a5:83:66:bd:96:30:68:47:88:24:98: 5e:d5:70:e9:60:5f:13:07:79:01:cb:df:55:cf:57: 87:50:48:6b:24:ce:16:ce:b1:fd:ee:5f:39:65:4e: 5f:0e:ba:2a:75:72:e4:27:42:a3:9c:f9:bf:9f:bf: 90:30:df:18:62:44:3e:ac:e5:79:8b:b6:26:d2:7d: 3d:6b:f3:7d:25:69:0b:ad:d1:e6:62:e1:05:7e:0f: cd:a5:9d:06:ce:1c:c0:28:14:e9:75:43:55:e0:4b: b1:66:41:33:57:5a:0b:07:64:a9:c7:51:7d:08:b7: d2:bb:d4:83:29:7b:cd:a2:87:05:a3:c6:8e:7b:61: b2:ad:87:c5:3d:f2:22:6a:73:1a:12:0b:50:cf:7f: 09:9d:de:a5:2b:d4:68:e4:45:b0:b4:6a:ef:f0:85: 40:83:14:e7:86:35:4f:66:e7:13:21:fb:67:10:c5: 3f:6c:88:24:39:47:3f:3a:00:b4:08:25:71:6b:24: ae:9c:c2:f5:0f:f0:eb:f4:6c:93:28:55:a3:7f:91: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:4F:82:47:8B:77:32:40:C6:3D:35:90:B9:F1:C5:7F:5B:B7:20 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:47:de:9e:fc:c6:ea:ec:f7:4a:c6:bf:9b:b4:b9:17:43:f1: af:e4:d0:38:64:aa:29:f0:63:06:df:62:d7:a3:7b:db:c2:42: 30:14:ba:a7:d7:e3:67:71:c9:c4:1d:c0:fd:c5:e3:a1:80:2a: 38:11:05:bb:37:ae:b8:90:38:c5:51:dc:d3:5e:ac:6f:d2:85: e2:f6:54:ef:0e:52:48:8b:b9:24:21:e7:d4:2a:0c:8d:b9:bd: a0:0a:53:2c:d7:65:de:42:5a:2f:4f:0a:4c:9a:08:1b:a7:f3: 5c:dd:f8:ca:c0:c4:41:82:a8:36:07:9f:7b:7e:bf:6e:34:45: 4d:ed:70:e0:ad:35:d1:81:65:27:8f:5e:8c:84:69:fa:ba:46: ef:88:cb:c9:0f:d5:04:e1:11:4b:8c:ff:6a:1f:d3:74:e0:6b: 4a:61:36:c0:91:32:95:65:f0:25:04:6e:88:fe:98:11:f2:3f: b1:6f:21:c5:b5:aa:f2:da:2e:d5:0e:3c:7b:a0:2d:17:bf:cf: d8:53:e5:99:9e:f4:d2:71:5a:bd:dd:22:b8:d9:9d:ad:2a:92: 51:6b:91:bd:16:48:7a:1b:18:27:be:1b:a7:55:4b:3d:5b:df: 09:35:19:5b:65:3e:c6:de:5a:30:92:52:5b:ab:73:2e:b2:bd: 3b:a7:38:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUwNDI2MjM1NzUxWhcNMjUwNTAzMjM1NzUxWjAYMRYwFAYD VQQDEw02ODBkNzJmZi0zNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55mSRG/lt7c2fGihn72Y9EdFnmTTSIRKmmdyWnGyWQsUiZGC3h3fhBzsjNzS IGOmpYNmvZYwaEeIJJhe1XDpYF8TB3kBy99Vz1eHUEhrJM4WzrH97l85ZU5fDroq dXLkJ0KjnPm/n7+QMN8YYkQ+rOV5i7Ym0n09a/N9JWkLrdHmYuEFfg/NpZ0GzhzA KBTpdUNV4EuxZkEzV1oLB2Spx1F9CLfSu9SDKXvNoocFo8aOe2GyrYfFPfIianMa EgtQz38Jnd6lK9Ro5EWwtGrv8IVAgxTnhjVPZucTIftnEMU/bIgkOUc/OgC0CCVx aySunML1D/Dr9GyTKFWjf5EVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY9T4JH i3cyQMY9NZC58cV/W7cgMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtR96e/Mbq7PdKxr+btLkXQ/Gv5NA4ZKop8GMG32LXo3vbwkIwFLqn 1+NnccnEHcD9xeOhgCo4EQW7N664kDjFUdzTXqxv0oXi9lTvDlJIi7kkIefUKgyN ub2gClMs12XeQlovTwpMmggbp/Nc3fjKwMRBgqg2B597fr9uNEVN7XDgrTXRgWUn j16MhGn6ukbviMvJD9UE4RFLjP9qH9N04GtKYTbAkTKVZfAlBG6I/pgR8j+xbyHF tary2i7VDjx7oC0Xv8/YU+WZnvTScVq93SK42Z2tKpJRa5G9Fkh6GxgnvhunVUs9 W98JNRlbZT7G3lowklJbq3Musr07pzgh -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net