$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: hWOM70r1XASMr+5xcgkz/6NzChkeiLLqczr/EKlkpU8= Subject key identifier: 74:9F:18:8D:45:83:9B:C6:C8:05:17:DB:50:D5:18:CC:4B:1F:4A:FE Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2AC9 Signing time: Mon 28 Apr 2025 15:38:45 +0000 Manifest this update: Mon 28 Apr 2025 15:38:45 +0000 Manifest next update: Mon 05 May 2025 15:38:45 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: ywJpwd5JEd7/r65u5r0DaEKBTf8f6TbBVtctJP21cJ4=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11021 (0x2b0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Apr 28 15:38:45 2025 GMT Not After : May 5 15:38:45 2025 GMT Subject: CN=680fa105-cb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:fd:32:12:28:be:3f:4b:0b:0e:d0:70:4a: 53:e4:0d:0f:a7:e6:f5:cb:88:ca:e7:5d:8e:9d:22: 51:9a:dd:7d:4a:bd:1d:84:48:f5:05:4a:64:5b:a3: c8:83:37:0e:82:82:2d:57:8c:14:07:11:4b:27:40: 8b:9f:22:ff:d7:5e:fb:88:31:21:b9:bc:0a:80:70: b9:1e:e0:56:a2:d2:88:b7:8e:5f:93:2e:57:42:dd: 34:33:b7:8e:33:15:5c:6e:20:a6:df:a8:ac:1e:0c: 31:81:dd:bd:fa:1b:8f:d7:b1:76:76:da:1b:83:f8: 2d:db:a7:b9:c2:b2:5b:2c:0a:a2:02:32:b8:c8:4f: fd:25:cc:1f:83:3d:c0:0f:0d:a4:8c:e3:cd:5e:04: 20:0d:3c:c4:9a:62:45:e9:60:18:bc:4f:45:6b:db: 1c:8c:b0:b0:ce:b5:67:e2:5f:7b:36:93:d7:b9:21: 8d:c9:b3:ca:1b:3f:6d:4c:3f:5a:bd:76:53:6b:40: db:31:a6:6d:55:1f:9e:ed:ac:37:36:65:5a:51:a8: c8:ae:63:e1:4b:05:e6:e1:8b:5f:10:bd:7d:73:14: e6:df:0e:72:f4:07:00:0f:99:72:f2:12:4e:94:79: 80:02:5e:cf:b1:25:55:f6:70:2f:72:79:5c:c4:9c: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9F:18:8D:45:83:9B:C6:C8:05:17:DB:50:D5:18:CC:4B:1F:4A:FE X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:75:9d:c4:f6:bc:ee:a9:62:5a:71:8f:48:84:9b:42:f0:e8: c0:9e:5d:c8:b6:91:82:30:46:a0:1b:9f:ab:55:73:90:ff:88: 3c:ac:cf:0c:3c:0c:42:29:0e:8a:cc:aa:88:c4:b4:24:2c:05: c4:bc:64:f0:03:91:35:8b:5e:17:4e:25:cd:9d:f1:cb:69:a7: 64:ed:51:73:5b:4e:b2:40:68:eb:96:14:81:a8:4b:25:fe:9a: b3:27:59:bc:c9:51:b6:de:e0:77:d2:b5:48:42:71:8b:ef:dd: eb:6c:23:33:c0:bd:02:c0:3f:aa:14:27:59:bb:67:0b:fd:96: b8:ed:9e:48:5e:51:4a:4a:e1:cb:8e:f2:4c:b7:dc:96:03:1c: d1:51:0f:e5:85:89:de:b4:83:d9:ca:fc:c8:2a:23:0e:0c:b8: 6b:b0:d9:28:cb:e5:18:cb:f7:c8:2b:65:54:9d:19:ae:ca:eb: 18:02:76:a8:5d:9a:34:ad:f8:0c:75:4b:d4:62:20:89:33:8f: 87:55:6b:a7:e3:59:df:e1:f1:26:c3:00:6f:88:59:26:a5:43: af:55:d4:6e:f7:0e:90:12:ea:71:03:5f:ef:ab:c8:af:c7:54: 0b:2d:ff:8c:d8:b8:c1:75:a4:2c:bc:d3:3d:c9:8c:09:b8:ef: 0f:c1:6f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwNDI4MTUzODQ1WhcNMjUwNTA1MTUzODQ1WjAYMRYwFAYD VQQDEw02ODBmYTEwNS1jYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtof9MhIovj9LCw7QcEpT5A0Pp+b1y4jK512OnSJRmt19Sr0dhEj1BUpkW6PI gzcOgoItV4wUBxFLJ0CLnyL/1177iDEhubwKgHC5HuBWotKIt45fky5XQt00M7eO MxVcbiCm36isHgwxgd29+huP17F2dtobg/gt26e5wrJbLAqiAjK4yE/9Jcwfgz3A Dw2kjOPNXgQgDTzEmmJF6WAYvE9Fa9scjLCwzrVn4l97NpPXuSGNybPKGz9tTD9a vXZTa0DbMaZtVR+e7aw3NmVaUajIrmPhSwXm4YtfEL19cxTm3w5y9AcAD5ly8hJO lHmAAl7PsSVV9nAvcnlcxJzSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSfGI1F g5vGyAUX21DVGMxLH0r+MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNdZ3E9rzuqWJacY9IhJtC8OjAnl3ItpGCMEagG5+rVXOQ/4g8rM8M PAxCKQ6KzKqIxLQkLAXEvGTwA5E1i14XTiXNnfHLaadk7VFzW06yQGjrlhSBqEsl /pqzJ1m8yVG23uB30rVIQnGL793rbCMzwL0CwD+qFCdZu2cL/Za47Z5IXlFKSuHL jvJMt9yWAxzRUQ/lhYnetIPZyvzIKiMODLhrsNkoy+UYy/fIK2VUnRmuyusYAnao XZo0rfgMdUvUYiCJM4+HVWun41nf4fEmwwBviFkmpUOvVdRu9w6QEupxA1/vq8iv x1QLLf+M2LjBdaQsvNM9yYwJuO8PwW9T -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:47 2025 by rpki-client on console.sobornost.net