$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json) Hash identifier: IRdWiDuSIu28WoBIYbrhZ+FLK8tJxmDsiPLK9W4oOsk= Subject key identifier: 3D:43:D4:B3:6A:57:5C:B1:42:F5:E3:47:0D:C7:A5:85:A6:58:D9:85 Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft Manifest number: 1C2B Signing time: Mon 28 Apr 2025 16:18:33 +0000 Manifest this update: Mon 28 Apr 2025 16:18:32 +0000 Manifest next update: Mon 05 May 2025 16:18:32 +0000 Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: qBJnOCQ6PE+vJDzs+CNLJrrJqHKGSKsybgO3T6dx1pw=) 2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7228 (0x1c3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Apr 28 16:18:32 2025 GMT Not After : May 5 16:18:32 2025 GMT Subject: CN=680faa59-1869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:c5:4e:73:81:00:32:7e:09:c9:ec:ec:2a: e0:a8:c8:47:34:9a:5d:b5:65:96:e2:55:8e:56:eb: 50:0a:13:b5:51:5a:b9:f9:bf:fd:fa:d1:a5:58:60: 6f:c3:2e:58:4a:cc:27:82:92:e0:67:ab:94:ff:e4: 51:3f:da:ab:1f:77:7b:7c:03:c0:70:f4:16:f5:e0: 61:2b:2a:af:34:b1:7b:0a:d2:35:3e:8c:06:36:b4: c0:89:9b:8a:ec:15:9d:e1:e8:97:5e:c7:d7:e3:10: 28:b9:40:48:79:9c:33:fa:4f:33:fb:20:55:01:fc: 2e:79:98:16:4a:db:48:16:ea:43:75:65:37:ff:d2: e3:8c:a2:39:78:21:2b:df:35:ba:95:c6:d3:14:cf: 61:2f:6e:6e:f6:77:4f:c5:30:9e:18:0f:5b:10:61: 68:0b:81:78:68:81:e5:6f:3b:f2:49:38:34:07:23: d0:1a:cf:c4:68:32:9d:f3:1b:d7:75:a8:ae:60:d1: 72:85:21:fa:55:a9:da:95:e4:5a:57:8c:04:82:11: 15:c5:fb:d7:68:aa:11:a3:91:ac:a8:52:fc:b5:a9: fe:0a:a6:63:23:bd:de:b0:1d:89:c7:65:de:b5:e9: 52:6e:5a:4d:52:f2:4e:66:08:66:93:9d:4a:77:70: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:D4:B3:6A:57:5C:B1:42:F5:E3:47:0D:C7:A5:85:A6:58:D9:85 X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1d:e4:a6:1b:69:bd:19:a2:fe:dc:cd:d3:b0:41:72:d9:53: e1:60:56:43:f8:48:0e:7f:ba:ff:d6:3b:78:32:91:f2:e4:0c: e8:09:71:67:c0:e4:04:43:36:e5:07:bf:f8:85:c1:7b:01:a9: f2:01:f0:15:93:5a:60:39:48:e8:af:4c:06:a5:cb:3e:8d:1c: 37:86:1b:58:01:f0:27:5c:92:7d:c0:9e:64:fe:25:18:ef:c6: 69:b5:0d:52:20:c9:01:17:05:d7:94:df:d4:5a:2f:68:d9:d9: 43:72:14:6d:e5:8d:eb:b4:00:c2:28:83:66:fc:70:a1:9e:61: 48:29:e4:8b:9f:5e:8f:3f:ca:59:28:15:ef:e3:e5:19:17:68: 99:1e:9f:df:58:3b:1b:c7:b5:e8:8d:36:6d:9c:1b:a9:ab:c8: 6a:83:7b:d0:2a:87:ed:53:18:8a:17:9e:cf:cf:86:0a:54:51: 39:d5:e9:07:7d:28:68:17:6f:64:83:27:74:17:76:d8:e6:78: 39:bf:56:5a:72:ae:bb:f7:1a:a5:e6:93:b1:29:f5:45:41:3d: a3:2e:4b:4c:c0:a2:36:33:11:03:f1:43:b6:fd:e4:a9:be:fd: 67:ed:b5:c9:56:87:67:09:cf:5c:34:95:d0:13:5b:85:89:99: 3d:bd:5b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUwNDI4MTYxODMyWhcNMjUwNTA1MTYxODMyWjAYMRYwFAYD VQQDEw02ODBmYWE1OS0xODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCjFTnOBADJ+Ccns7CrgqMhHNJpdtWWW4lWOVutQChO1UVq5+b/9+tGlWGBv wy5YSswngpLgZ6uU/+RRP9qrH3d7fAPAcPQW9eBhKyqvNLF7CtI1PowGNrTAiZuK 7BWd4eiXXsfX4xAouUBIeZwz+k8z+yBVAfwueZgWSttIFupDdWU3/9LjjKI5eCEr 3zW6lcbTFM9hL25u9ndPxTCeGA9bEGFoC4F4aIHlbzvySTg0ByPQGs/EaDKd8xvX daiuYNFyhSH6VanaleRaV4wEghEVxfvXaKoRo5GsqFL8tan+CqZjI73esB2Jx2Xe telSblpNUvJOZghmk51Kd3DemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1D1LNq V1yxQvXjRw3HpYWmWNmFMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK UW54X3lkM2R6MHFDaDJDd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEHeSmG2m9GaL+3M3TsEFy2VPhYFZD+EgOf7r/1jt4MpHy5AzoCXFn wOQEQzblB7/4hcF7AanyAfAVk1pgOUjor0wGpcs+jRw3hhtYAfAnXJJ9wJ5k/iUY 78ZptQ1SIMkBFwXXlN/UWi9o2dlDchRt5Y3rtADCKINm/HChnmFIKeSLn16PP8pZ KBXv4+UZF2iZHp/fWDsbx7XojTZtnBupq8hqg3vQKoftUxiKF57Pz4YKVFE51ekH fShoF29kgyd0F3bY5ng5v1Zacq679xql5pOxKfVFQT2jLktMwKI2MxED8UO2/eSp vv1n7bXJVodnCc9cNJXQE1uFiZk9vVv3 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:31 2025 by rpki-client on console.sobornost.net