$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: UdcdJ502nyMRc/LWLKTW4lVYlwk53EhD/vTxDAvlfCY= Subject key identifier: B3:D8:83:A1:E5:C5:7A:AE:FA:FC:C3:0A:66:5C:2D:C5:C8:1F:0A:97 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0858 Signing time: Sat 26 Apr 2025 20:28:34 +0000 Manifest this update: Sat 26 Apr 2025 20:28:33 +0000 Manifest next update: Sat 03 May 2025 20:28:33 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: dR+mAoEFdhrbWebRKpsc4EIWCcPL8uxz/xHY8paq0oM=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Apr 26 20:28:33 2025 GMT Not After : May 3 20:28:33 2025 GMT Subject: CN=680d41f2-96e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:fe:ef:68:c3:74:25:56:c5:32:fb:bf:2f: a6:3e:8c:79:b7:89:a4:08:f5:41:62:e9:29:2b:74: 22:08:bb:41:a0:52:34:51:7c:0c:14:98:06:7a:1b: a3:79:47:29:aa:48:ed:96:a9:70:0a:ba:43:b7:0b: 61:ac:18:fa:4c:f5:7e:15:65:83:66:28:fb:f3:14: 60:a4:bc:16:25:89:92:29:be:b3:58:b7:1c:86:35: 18:07:76:66:65:34:39:9e:0c:08:f1:72:4d:7b:a0: 04:cf:99:0b:55:94:b7:23:75:da:08:60:87:b1:00: d6:05:c7:f8:e7:5f:62:76:55:71:cf:b8:54:99:49: 3f:56:b6:b4:2f:03:2e:ae:3d:b3:e0:b0:17:2c:c0: 80:30:c1:e2:d4:43:07:33:ec:b7:22:5b:24:a7:cc: 74:1b:af:b7:07:d7:40:42:90:1f:35:25:5e:da:a3: c3:00:62:95:19:94:53:be:f5:8c:a9:dc:df:8d:7f: 3a:41:fc:b5:fb:84:94:b6:bd:14:8a:e3:62:20:ec: a1:2f:3a:de:9d:98:0f:5b:1a:8d:5a:35:19:87:4d: aa:a8:15:3f:26:af:e5:08:89:d8:4c:6e:e8:92:8d: 27:df:2c:92:0e:9e:29:f2:0d:29:44:17:bf:c5:60: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:83:A1:E5:C5:7A:AE:FA:FC:C3:0A:66:5C:2D:C5:C8:1F:0A:97 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:b1:6e:af:26:73:85:65:46:17:a3:ea:fb:31:f7:8d:8b: aa:75:2d:7d:b3:24:f7:a0:c5:56:09:42:a1:fa:e3:99:b1:1a: 70:b8:ed:95:38:cd:ad:53:c2:d1:ef:bc:a4:cb:df:dd:b4:c7: 1e:a5:36:af:74:4f:24:53:5f:96:f0:79:64:f1:75:54:d3:fd: e8:c9:b3:88:78:8a:a7:40:77:57:0c:10:e7:bf:30:85:ec:9f: d7:b8:e5:97:10:b3:1a:b2:98:2e:f1:f3:0b:66:61:4a:b5:12: 83:72:14:d0:aa:fc:e4:40:04:b9:f3:89:fd:9c:cb:7a:93:d6: 4b:ea:d1:bd:e9:e4:a6:c3:11:07:a3:3c:d2:b5:15:1d:1f:2e: c0:fe:d7:f4:6c:ad:91:57:53:38:ed:dd:af:1b:69:f7:ab:70: 2b:15:e2:05:3e:c2:e1:29:94:fd:c8:51:ae:c1:78:b0:e3:7f: 6c:12:1c:f2:27:62:c0:39:d6:1a:38:a6:0d:e1:8b:86:bd:d6: 73:31:04:6c:06:80:f3:57:30:7a:05:38:a7:da:00:4d:0c:4f: 1d:3a:96:e9:3f:b2:bc:85:77:38:8f:b8:4b:02:1d:71:6c:b7: f5:b2:d2:eb:6a:db:5c:8b:e7:1b:ae:5f:52:31:da:16:5d:15: 92:a2:92:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwNDI2MjAyODMzWhcNMjUwNTAzMjAyODMzWjAYMRYwFAYD VQQDEw02ODBkNDFmMi05NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrD+72jDdCVWxTL7vy+mPox5t4mkCPVBYukpK3QiCLtBoFI0UXwMFJgGehuj eUcpqkjtlqlwCrpDtwthrBj6TPV+FWWDZij78xRgpLwWJYmSKb6zWLcchjUYB3Zm ZTQ5ngwI8XJNe6AEz5kLVZS3I3XaCGCHsQDWBcf4519idlVxz7hUmUk/Vra0LwMu rj2z4LAXLMCAMMHi1EMHM+y3Ilskp8x0G6+3B9dAQpAfNSVe2qPDAGKVGZRTvvWM qdzfjX86Qfy1+4SUtr0UiuNiIOyhLzrenZgPWxqNWjUZh02qqBU/Jq/lCInYTG7o ko0n3yySDp4p8g0pRBe/xWA/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPYg6Hl xXqu+vzDCmZcLcXIHwqXMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQAbFuryZzhWVGF6Pq+zH3jYuqdS19syT3oMVWCUKh+uOZsRpwuO2V OM2tU8LR77yky9/dtMcepTavdE8kU1+W8Hlk8XVU0/3oybOIeIqnQHdXDBDnvzCF 7J/XuOWXELMaspgu8fMLZmFKtRKDchTQqvzkQAS584n9nMt6k9ZL6tG96eSmwxEH ozzStRUdHy7A/tf0bK2RV1M47d2vG2n3q3ArFeIFPsLhKZT9yFGuwXiw439sEhzy J2LAOdYaOKYN4YuGvdZzMQRsBoDzVzB6BTin2gBNDE8dOpbpP7K8hXc4j7hLAh1x bLf1stLrattci+cbrl9SMdoWXRWSopJ6 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net