$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: ML4EFfPMhvZKG/oXiOtVZkmCPh0UUf/zG4t6w4RtUs4= Subject key identifier: 81:72:83:11:AF:79:AB:EE:32:BE:10:AC:EC:42:76:10:5F:F5:97:66 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FC6 Signing time: Mon 28 Apr 2025 17:45:12 +0000 Manifest this update: Mon 28 Apr 2025 17:45:12 +0000 Manifest next update: Mon 05 May 2025 17:45:12 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: OkrKBvqO3XkQC1hFPWSYWlUqCY0Hsxj9E2P3CAoVMgY=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Apr 28 17:45:12 2025 GMT Not After : May 5 17:45:12 2025 GMT Subject: CN=680fbea8-d687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:ed:cf:82:70:ec:1d:dd:42:03:69:56:f0: 58:86:f4:39:54:8b:d8:61:60:f4:0a:40:6d:2c:6c: 59:91:ba:23:1a:aa:13:01:d1:1c:38:95:56:ab:69: db:09:26:2a:f9:02:f9:06:5c:0e:84:77:e6:bd:2f: 14:ab:b9:bd:62:0f:16:2c:8d:8b:3d:1e:b1:da:00: 49:f6:53:3b:6f:6e:23:9c:9d:89:00:20:70:82:43: f1:1a:42:f8:8c:a5:1d:36:de:a9:1b:8d:fa:df:24: 9e:03:ef:dc:84:d3:ad:95:86:21:ca:a6:2f:68:ed: 5f:6d:c7:1e:cd:aa:ff:79:17:a2:d6:b2:5c:25:e6: ea:6f:20:ce:5e:77:d6:63:e4:d2:e6:9a:ef:57:ab: d5:c0:a2:eb:48:48:1c:99:21:7d:cb:20:cc:af:8e: 8a:41:ec:e8:dc:90:c0:89:4e:6b:3c:1b:7b:12:76: 3b:77:d3:49:e6:ea:78:a1:b8:61:c0:99:09:f7:30: be:b8:52:36:c5:d3:77:0a:d3:4a:85:9e:61:80:fb: ac:39:23:36:28:71:d0:73:36:0a:35:b1:c4:84:b1: fb:bf:c6:fe:57:7b:e6:a1:1d:da:ef:85:2a:dc:d6: 87:8c:48:b3:19:c2:13:57:0a:e7:d4:fb:52:f8:10: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:72:83:11:AF:79:AB:EE:32:BE:10:AC:EC:42:76:10:5F:F5:97:66 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5d:53:9e:57:3b:de:5d:26:5a:de:7c:11:55:de:c2:f6:7b: f5:6b:f0:72:57:ee:f6:bf:7e:f7:22:be:27:13:db:7f:0b:29: 54:1f:4b:19:ab:f6:53:b3:a2:80:59:a4:86:bf:17:dd:08:e3: fc:55:fa:bc:52:12:4c:f9:8b:89:e8:87:b2:39:23:e0:e1:93: 13:4e:40:fb:2f:11:6e:9f:70:57:ea:17:4e:92:88:21:a0:5b: 81:b2:fe:b5:fc:8b:2e:8d:32:0d:e8:1a:28:3e:10:56:fa:e8: 73:6c:4c:e3:98:3b:82:1a:f4:e4:ca:b8:a1:ce:6c:4b:14:aa: ce:4a:f5:ba:80:b4:09:27:02:7f:a1:31:8c:d7:d6:b9:9f:0a: 58:35:7b:ae:c8:bc:26:7f:d0:90:09:f7:d6:99:07:29:0d:26: f2:73:40:56:1a:bc:74:8d:15:23:4b:56:52:47:66:e9:1d:a1: 03:51:6b:cd:ec:84:43:27:fd:68:bc:78:19:60:df:8b:be:9b: e2:6b:4a:29:52:9e:a0:b7:2d:0b:6b:19:2a:9d:b3:4e:21:d9: ec:0e:cd:c5:53:01:4e:6a:de:50:bc:19:29:53:9c:61:a6:fc: cb:c7:56:c7:ae:41:ee:48:06:3a:9e:87:f6:3d:6d:d5:92:c2: 5d:db:f3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNDI4MTc0NTEyWhcNMjUwNTA1MTc0NTEyWjAYMRYwFAYD VQQDEw02ODBmYmVhOC1kNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyXtz4Jw7B3dQgNpVvBYhvQ5VIvYYWD0CkBtLGxZkbojGqoTAdEcOJVWq2nb CSYq+QL5BlwOhHfmvS8Uq7m9Yg8WLI2LPR6x2gBJ9lM7b24jnJ2JACBwgkPxGkL4 jKUdNt6pG4363ySeA+/chNOtlYYhyqYvaO1fbccezar/eRei1rJcJebqbyDOXnfW Y+TS5prvV6vVwKLrSEgcmSF9yyDMr46KQezo3JDAiU5rPBt7EnY7d9NJ5up4obhh wJkJ9zC+uFI2xdN3CtNKhZ5hgPusOSM2KHHQczYKNbHEhLH7v8b+V3vmoR3a74Uq 3NaHjEizGcITVwrn1PtS+BBzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFygxGv eavuMr4QrOxCdhBf9ZdmMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOXVOeVzveXSZa3nwRVd7C9nv1a/ByV+72v373Ir4nE9t/CylUH0sZ q/ZTs6KAWaSGvxfdCOP8Vfq8UhJM+YuJ6IeyOSPg4ZMTTkD7LxFun3BX6hdOkogh oFuBsv61/IsujTIN6BooPhBW+uhzbEzjmDuCGvTkyrihzmxLFKrOSvW6gLQJJwJ/ oTGM19a5nwpYNXuuyLwmf9CQCffWmQcpDSbyc0BWGrx0jRUjS1ZSR2bpHaEDUWvN 7IRDJ/1ovHgZYN+Lvpvia0opUp6gty0LaxkqnbNOIdnsDs3FUwFOat5QvBkpU5xh pvzLx1bHrkHuSAY6nof2PW3VksJd2/N8 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:30 2025 by rpki-client on console.sobornost.net