$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: SBfmsENs3twF/vWK0MAAmeOPsGMgY0fDYjNe3o5R1d0= Subject key identifier: BD:80:06:F5:2C:3D:DE:AB:03:D0:CE:02:D3:09:AF:BB:3D:4F:E4:71 Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 032B Signing time: Sun 27 Apr 2025 00:45:11 +0000 Manifest this update: Sun 27 Apr 2025 00:45:10 +0000 Manifest next update: Sun 04 May 2025 00:45:10 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: qXfZAea1Y/fu47Ap4GM+cLwe+bDAVlxIoYtYTWwN9fI=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: 1WkNyyyiFt1FW+4vq2oaXotjB9v8sAKNGelCyY+t8Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: Apr 27 00:45:10 2025 GMT Not After : May 4 00:45:10 2025 GMT Subject: CN=680d7e16-2ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:5a:9a:2e:5a:33:8c:7f:c6:b0:6b:59:eb: 6b:cf:d3:45:f9:1e:0a:46:d0:ed:c5:e5:aa:3d:23: 5a:da:3e:53:5c:4e:89:b8:e1:ae:8e:b4:66:a8:70: b6:c7:6c:ec:20:d0:1c:13:c3:22:35:96:4a:35:d3: 9b:39:a1:46:ae:8c:a1:18:ce:70:71:17:fd:9d:a7: a8:88:25:b4:03:9d:0c:bd:7a:21:48:20:de:a8:a5: 60:cf:7e:70:5b:45:fe:da:cf:5e:11:44:36:22:21: f0:f1:d0:da:e8:12:9d:25:ae:78:42:72:a2:bd:ce: 94:69:a1:19:44:bf:e6:74:cd:86:91:ed:45:20:bd: f3:bc:15:11:22:9f:e4:f6:15:8b:bb:7c:4a:d8:59: 30:ed:27:fc:29:b6:32:86:7e:7a:1a:8f:dd:4e:c1: 34:57:85:48:72:1d:d2:b8:55:71:63:08:8d:e7:53: 05:71:07:4d:03:75:d7:56:b7:a5:5f:8d:b7:64:ef: 2d:42:89:23:0d:50:ee:04:d3:fa:49:b4:c4:86:50: e5:b8:b0:f0:7c:52:ab:59:9b:07:82:35:23:88:89: 03:15:52:90:0d:19:0d:70:cf:70:89:2e:ba:e8:0d: c2:92:54:23:ca:4a:1b:cc:09:e5:fa:fa:a2:34:f6: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:80:06:F5:2C:3D:DE:AB:03:D0:CE:02:D3:09:AF:BB:3D:4F:E4:71 X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3b:4b:ac:19:0c:15:29:97:9d:7e:0f:da:bc:38:f5:b7:c8: 79:c5:55:3f:3f:48:ec:05:33:15:eb:e6:ca:32:69:d5:d6:52: 96:b4:1e:56:7b:c2:91:f5:8e:ca:75:35:d2:40:8f:2f:91:6d: c6:fd:26:57:f9:a5:d5:af:ab:bd:4b:d1:0b:30:b7:0f:c8:c4: 25:79:2f:b3:30:9b:3c:75:0f:d8:fb:ae:e9:48:a8:87:c1:8e: aa:d1:a5:20:54:51:93:a2:ec:87:b3:92:7c:94:22:81:85:c1: f0:23:ad:c7:6c:49:39:77:a8:95:11:06:93:51:c6:f0:e1:4a: b4:17:f0:07:e9:68:e3:c8:29:0b:f7:52:a4:3f:18:69:be:1b: 3c:04:7d:f6:53:20:88:a3:e3:3f:0b:d1:47:0f:e8:68:30:14: 5b:b3:10:e6:47:92:2e:55:22:47:56:11:ae:08:e4:cf:c1:84: 73:b5:88:b7:79:ff:0d:77:76:ad:bb:78:3a:64:07:da:e2:ea: c3:43:a3:ff:8e:f2:ce:01:92:ce:4f:85:64:aa:fe:70:2e:c9: 35:e0:e6:38:28:8c:a3:61:2f:22:71:08:64:32:57:0c:92:53: 0f:44:c8:20:75:ac:2b:95:6e:44:79:b6:61:66:92:21:72:8d: c3:06:57:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjUwNDI3MDA0NTEwWhcNMjUwNTA0MDA0NTEwWjAYMRYwFAYD VQQDEw02ODBkN2UxNi0yY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMBami5aM4x/xrBrWetrz9NF+R4KRtDtxeWqPSNa2j5TXE6JuOGujrRmqHC2 x2zsINAcE8MiNZZKNdObOaFGroyhGM5wcRf9naeoiCW0A50MvXohSCDeqKVgz35w W0X+2s9eEUQ2IiHw8dDa6BKdJa54QnKivc6UaaEZRL/mdM2Gke1FIL3zvBURIp/k 9hWLu3xK2Fkw7Sf8KbYyhn56Go/dTsE0V4VIch3SuFVxYwiN51MFcQdNA3XXVrel X423ZO8tQokjDVDuBNP6SbTEhlDluLDwfFKrWZsHgjUjiIkDFVKQDRkNcM9wiS66 6A3CklQjykobzAnl+vqiNPYTqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2ABvUs Pd6rA9DOAtMJr7s9T+RxMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiO0usGQwVKZedfg/avDj1t8h5xVU/P0jsBTMV6+bKMmnV1lKWtB5W e8KR9Y7KdTXSQI8vkW3G/SZX+aXVr6u9S9ELMLcPyMQleS+zMJs8dQ/Y+67pSKiH wY6q0aUgVFGTouyHs5J8lCKBhcHwI63HbEk5d6iVEQaTUcbw4Uq0F/AH6WjjyCkL 91KkPxhpvhs8BH32UyCIo+M/C9FHD+hoMBRbsxDmR5IuVSJHVhGuCOTPwYRztYi3 ef8Nd3atu3g6ZAfa4urDQ6P/jvLOAZLOT4Vkqv5wLsk14OY4KIyjYS8icQhkMlcM klMPRMggdawrlW5EebZhZpIhco3DBleZ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:33 2025 by rpki-client on console.sobornost.net