$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: 926tqKkDZ8F6YK97CfR2kqis7025GX4GwkCLcaXNHVQ= Subject key identifier: 2F:15:BA:30:D2:73:B1:54:50:45:02:2E:EA:AC:02:BC:26:C6:FB:69 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 083D Signing time: Sat 26 Apr 2025 20:30:16 +0000 Manifest this update: Sat 26 Apr 2025 20:30:15 +0000 Manifest next update: Sat 03 May 2025 20:30:15 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: obNYzstVEcsXpeq2kbaG5USFU5tWSuDtft05LzQaU+4=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Apr 26 20:30:15 2025 GMT Not After : May 3 20:30:15 2025 GMT Subject: CN=680d4257-aa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:6c:cd:3f:f4:ae:28:b8:79:70:5a:b5:e2: 84:4b:1e:c8:a5:b2:d4:fc:fa:fd:ba:33:8e:37:6b: bf:7c:aa:b4:51:51:02:69:7b:9b:55:60:e3:84:c0: a9:f5:9b:64:38:79:38:88:d5:f7:30:3c:4a:04:32: 1e:4b:18:ee:db:69:8d:ef:f8:6a:04:50:e2:0e:19: 9e:d4:88:0f:1d:01:ae:22:6e:ff:b3:61:9e:4b:09: ce:26:fa:51:b8:6a:d7:9d:09:4b:94:92:3d:e3:38: a1:27:0e:c9:d4:33:20:a2:e2:9f:50:28:e9:0a:dd: f2:16:87:14:6c:1c:dc:25:1b:5f:e3:7e:cd:92:b1: 6d:7f:6f:d0:6f:eb:c5:22:b0:6f:a3:dd:6a:06:ed: 08:9f:26:68:6b:a2:6e:1d:31:e1:96:c6:ef:f3:f4: 2b:24:83:60:68:e8:25:6f:b0:94:68:53:0e:94:26: 11:13:34:72:92:77:d1:fb:3c:b0:e7:64:20:15:2c: ef:02:5b:87:8f:94:a8:eb:24:57:50:95:bb:e3:4f: df:32:81:8a:1b:e4:b3:e2:ed:02:4a:db:d3:64:8c: 91:1c:58:b7:23:3d:78:30:f6:56:41:b6:cc:6b:f7: 22:17:c9:89:a4:e4:31:7d:0f:be:fd:39:c1:07:b8: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:BA:30:D2:73:B1:54:50:45:02:2E:EA:AC:02:BC:26:C6:FB:69 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:99:bf:e5:f6:b4:4e:9b:2d:c8:1c:b5:b5:5d:2c:14:77:83: 45:d5:81:3e:17:30:14:c2:72:ca:5f:37:5c:71:50:33:1b:02: 66:ae:5d:05:f2:3a:c9:eb:39:1e:9a:fc:ea:bf:86:31:6d:ad: 56:c7:c3:75:51:da:0e:b8:d8:cc:01:c2:55:cc:03:de:d1:0c: 48:ad:62:88:b7:ad:e9:1f:b9:7f:31:a7:0a:6a:cd:9b:4b:96: 89:d9:91:e9:1a:57:5e:45:e2:5f:c2:4f:db:58:63:13:76:f7: 71:7a:17:ef:8e:da:2c:5c:67:d0:75:fd:44:5d:8d:17:87:4b: 6d:3a:c3:ff:1f:ef:05:24:d7:4b:81:f1:42:e6:3c:27:93:d0: 9f:1e:96:92:df:5c:99:dc:ff:72:00:ce:30:5a:69:a8:c1:3a: da:ce:ca:a4:2c:c3:d5:fc:64:46:d1:a1:b3:6a:08:78:c3:df: ee:f7:c8:ae:a3:1a:57:cf:0c:00:fb:8b:85:94:12:e0:0c:58: 94:f6:16:bb:39:86:f0:a5:7e:d3:01:89:a0:e5:69:9d:24:09: 18:0c:57:de:00:b9:74:f9:99:9a:58:a4:a7:46:83:d8:26:04: dc:74:b2:2e:78:d2:f4:70:46:11:38:45:d5:9c:f7:1c:fd:ad: e6:dc:ae:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNDI2MjAzMDE1WhcNMjUwNTAzMjAzMDE1WjAYMRYwFAYD VQQDEw02ODBkNDI1Ny1hYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXxszT/0rii4eXBateKESx7IpbLU/Pr9ujOON2u/fKq0UVECaXubVWDjhMCp 9ZtkOHk4iNX3MDxKBDIeSxju22mN7/hqBFDiDhme1IgPHQGuIm7/s2GeSwnOJvpR uGrXnQlLlJI94zihJw7J1DMgouKfUCjpCt3yFocUbBzcJRtf437NkrFtf2/Qb+vF IrBvo91qBu0InyZoa6JuHTHhlsbv8/QrJINgaOglb7CUaFMOlCYREzRyknfR+zyw 52QgFSzvAluHj5So6yRXUJW740/fMoGKG+Sz4u0CStvTZIyRHFi3Iz14MPZWQbbM a/ciF8mJpOQxfQ++/TnBB7gqYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8VujDS c7FUUEUCLuqsArwmxvtpMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjmb/l9rROmy3IHLW1XSwUd4NF1YE+FzAUwnLKXzdccVAzGwJmrl0F 8jrJ6zkemvzqv4Yxba1Wx8N1UdoOuNjMAcJVzAPe0QxIrWKIt63pH7l/MacKas2b S5aJ2ZHpGldeReJfwk/bWGMTdvdxehfvjtosXGfQdf1EXY0Xh0ttOsP/H+8FJNdL gfFC5jwnk9CfHpaS31yZ3P9yAM4wWmmowTrazsqkLMPV/GRG0aGzagh4w9/u98iu oxpXzwwA+4uFlBLgDFiU9ha7OYbwpX7TAYmg5WmdJAkYDFfeALl0+ZmaWKSnRoPY JgTcdLIueNL0cEYROEXVnPcc/a3m3K6U -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net