$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: xBguczL8pZG0tlcKiW0O6DHvnnroAMvHMSm/pjYG8pI= Subject key identifier: 89:6D:E9:AE:41:3B:64:01:D2:BD:A8:1A:FB:78:9C:2D:F5:36:FE:10 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 099D Signing time: Mon 28 Apr 2025 20:43:01 +0000 Manifest this update: Mon 28 Apr 2025 20:43:01 +0000 Manifest next update: Mon 05 May 2025 20:43:01 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: 1oba9xo2T9P7zUT5IWy+UbB8bv6nNXHiUsbTueGP1B4=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=) 4: 6D837614007411F08E85EE81C4F9AE02.roa (hash: kFXr8e5pcdp/i+j6e7pj9hF5FfLGoTzFnroKR0rI+y8=) 5: 19C59818FFD911EF998B5E3DC4F9AE02.roa (hash: b6EElxK46XK+P+krS4+kYExCj7YPLPhqmEi+uys0viM=) 6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=) 7: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=) 8: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 28 20:43:01 2025 GMT Not After : May 5 20:43:01 2025 GMT Subject: CN=680fe855-92ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:ad:08:3e:b7:1a:8d:a5:42:85:fd:6d:81: 5a:fb:d9:0b:36:96:5f:b1:e3:0e:77:cb:04:26:04: 4f:ce:98:42:5d:75:25:c8:72:d9:92:1e:70:d8:e4: ff:01:ca:b9:97:58:8b:1c:23:81:a7:06:7a:9f:ec: 49:3f:91:26:a9:f1:94:8c:8e:56:79:4c:23:b2:cc: 19:28:11:1b:3c:d6:bd:89:5b:c6:09:bb:91:d0:b0: 85:a7:96:6c:21:8e:1e:c1:d9:40:e0:a0:9a:5c:4d: 7e:36:27:2b:86:0d:73:62:51:fb:07:fa:20:d1:b7: 2e:96:f9:2f:68:6d:81:9e:c7:50:b8:82:d6:98:93: 95:cd:85:b9:fc:28:11:d6:60:25:a6:4d:7d:03:a5: a4:bf:ea:f3:5e:3c:2c:ee:b3:67:58:ca:b3:85:54: 9b:01:2c:5f:89:23:9e:db:e2:01:17:eb:a6:28:c4: fb:45:16:ad:2b:89:b2:24:1a:c1:25:aa:ae:26:28: 5f:f7:0b:81:cf:c7:e5:a9:7b:e0:e5:8d:b5:21:5b: 73:b2:36:4e:23:09:a6:6a:a9:4c:49:c2:1c:6b:c0: bf:79:95:6d:12:25:82:34:a6:fc:23:e6:f6:f0:d0: 5c:7d:3e:25:6c:7a:5b:2f:7a:8d:75:9d:e2:65:a0: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:E9:AE:41:3B:64:01:D2:BD:A8:1A:FB:78:9C:2D:F5:36:FE:10 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:13:47:fe:bb:6b:7d:6b:a6:d6:92:63:e0:9a:af:56:96:41: e3:fa:61:5e:c6:a8:7d:8c:d2:83:8c:d7:65:ba:1d:f5:68:58: a9:4a:b6:6b:af:db:a1:2c:fd:36:78:88:ef:76:6b:c0:e8:ba: 08:b0:42:30:85:24:47:96:22:83:4e:38:fb:98:3a:6a:2b:e1: 11:0e:75:3b:49:17:36:6a:e1:a4:4b:d4:bf:1a:f2:34:fd:b0: d7:4c:1d:41:d9:67:f2:f4:dd:2f:ec:87:35:ea:ae:ff:aa:96: 81:ea:24:de:08:f0:cc:62:76:91:d6:19:ba:7d:d7:e6:8a:3a: 74:0c:12:16:4c:c9:fb:d7:b5:84:d3:9f:c5:7a:40:8b:64:34: 43:68:d2:08:de:ab:92:a8:64:3f:c1:4b:cc:04:a5:25:de:84: 1d:83:31:f7:a0:2d:9f:0b:da:d9:e8:6d:98:0a:91:5f:83:09: a0:48:99:4e:7a:d0:f6:6b:1c:3f:78:23:14:e3:2e:3a:b5:9b: 9b:08:8d:b2:0c:cc:2d:ef:7b:18:8a:9c:b1:18:42:ce:e7:14: d7:9a:dd:c8:49:e3:bc:47:d2:59:b5:ff:e9:ed:a9:b9:78:cd: 4f:9d:6a:0f:d3:bd:4b:01:e4:31:4c:3e:f6:0f:db:eb:55:cd: 55:1f:d2:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNDI4MjA0MzAxWhcNMjUwNTA1MjA0MzAxWjAYMRYwFAYD VQQDEw02ODBmZTg1NS05MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmWtCD63Go2lQoX9bYFa+9kLNpZfseMOd8sEJgRPzphCXXUlyHLZkh5w2OT/ Acq5l1iLHCOBpwZ6n+xJP5EmqfGUjI5WeUwjsswZKBEbPNa9iVvGCbuR0LCFp5Zs IY4ewdlA4KCaXE1+Nicrhg1zYlH7B/og0bculvkvaG2BnsdQuILWmJOVzYW5/CgR 1mAlpk19A6Wkv+rzXjws7rNnWMqzhVSbASxfiSOe2+IBF+umKMT7RRatK4myJBrB JaquJihf9wuBz8flqXvg5Y21IVtzsjZOIwmmaqlMScIca8C/eZVtEiWCNKb8I+b2 8NBcfT4lbHpbL3qNdZ3iZaBsTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlt6a5B O2QB0r2oGvt4nC31Nv4QMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8E0f+u2t9a6bWkmPgmq9WlkHj+mFexqh9jNKDjNdluh31aFipSrZr r9uhLP02eIjvdmvA6LoIsEIwhSRHliKDTjj7mDpqK+ERDnU7SRc2auGkS9S/GvI0 /bDXTB1B2Wfy9N0v7Ic16q7/qpaB6iTeCPDMYnaR1hm6fdfmijp0DBIWTMn717WE 05/FekCLZDRDaNII3quSqGQ/wUvMBKUl3oQdgzH3oC2fC9rZ6G2YCpFfgwmgSJlO etD2axw/eCMU4y46tZubCI2yDMwt73sYipyxGELO5xTXmt3ISeO8R9JZtf/p7am5 eM1PnWoP071LAeQxTD72D9vrVc1VH9LL -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:01 2025 by rpki-client on console.sobornost.net