$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json) Hash identifier: 98Ojwc8hxsoaHkdyvWyKMRRlhz+14h97WdDAMbCjyiY= Subject key identifier: B9:32:0B:FF:16:3B:2D:1D:5D:67:89:CA:12:4D:5A:78:4F:ED:00:2F Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft Manifest number: 39 Signing time: Sun 27 Apr 2025 06:21:12 +0000 Manifest this update: Sun 27 Apr 2025 06:21:12 +0000 Manifest next update: Sun 04 May 2025 06:21:12 +0000 Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: piwWPQGmVcyUSdvPB7hKqUu+QNtgQh7vhkeGjC/sU+o=) 2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: RT6SuMf0BP9mEoih1q3sWdCSwYY5wltwWfZ09bJ/sp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Validity Not Before: Apr 27 06:21:12 2025 GMT Not After : May 4 06:21:12 2025 GMT Subject: CN=680dccd8-eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:8c:b1:e0:b1:1d:69:6b:4e:74:23:47:87: 20:de:8d:df:48:f0:48:41:01:e4:0d:7a:7a:4e:34: 5b:73:3b:93:19:6c:8c:67:db:4d:5f:c1:c9:82:e7: ff:62:04:3a:4c:d2:2d:68:1a:7a:94:b4:02:57:87: 0d:1f:3d:a5:94:a3:fa:c0:6e:90:55:83:61:4a:fe: 47:a9:d6:19:04:18:10:0c:54:7a:55:d3:fd:ea:f2: 2c:46:29:06:6d:8b:46:3c:95:62:47:55:01:78:c5: 0e:c7:7f:76:9c:c1:e0:7f:1f:65:13:19:fc:b1:e0: 24:f3:78:95:3e:b2:38:90:91:6a:d5:24:44:b8:28: 3e:47:12:7b:a3:ba:76:5e:ba:83:fd:79:b0:ae:54: e8:a8:d3:17:ed:59:b3:a4:a3:bc:0f:f6:18:62:ec: 7c:30:26:d8:5e:60:40:b2:97:fa:4d:28:7e:64:81: 5f:00:06:db:89:19:36:29:c2:30:de:65:11:18:a5: 4e:5b:4d:78:12:50:2e:26:70:fb:55:7b:0a:38:aa: 7f:3c:b3:57:a0:5e:e7:58:85:c8:dc:0a:15:b8:6e: 15:2b:3d:f2:df:03:4a:8a:33:a5:b3:a3:b5:eb:0d: 34:ea:64:48:39:6d:6b:d8:26:17:87:99:4b:64:78: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:0B:FF:16:3B:2D:1D:5D:67:89:CA:12:4D:5A:78:4F:ED:00:2F X509v3 Authority Key Identifier: keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:05:5a:67:78:47:72:4f:ed:d9:fa:1f:65:9f:b5:9b:19:9d: a3:a3:f4:79:db:c8:3b:d4:e0:8b:87:30:66:03:7b:7a:cf:6b: 0e:63:80:e1:42:65:5b:82:14:66:bb:f9:d2:35:0a:d7:69:51: 26:63:4b:87:fd:75:ad:3f:6d:1f:ab:54:21:1e:71:38:37:89: 0a:21:cc:7e:98:53:ef:66:f3:c8:81:2b:64:c1:33:c9:a7:7a: 04:a8:47:f9:d4:e0:8e:d1:93:94:f7:5b:73:25:21:fb:c4:2b: 09:5b:64:c2:13:37:24:e8:3a:45:7a:fd:8b:57:32:31:c2:20: e6:9c:46:da:fa:fc:0c:f7:5b:ba:48:16:98:5b:69:99:ec:95: 4d:d7:2c:07:1a:89:c3:f0:3c:1f:90:46:c7:99:e9:da:d4:78: 7c:02:a1:2f:b3:b5:be:06:90:52:68:38:64:e4:4b:86:2c:58: 61:9b:1e:18:4b:91:c6:97:f7:8d:f6:7b:fb:85:3a:72:38:ac: 82:cc:f5:83:30:4f:a3:6a:10:e0:99:c2:19:37:dc:c5:70:99: 05:40:e5:3b:10:0c:b2:26:50:11:9a:23:e2:74:b5:6a:28:1d: 44:64:37:80:45:09:1b:04:d1:ed:11:19:82:88:44:db:00:81: f0:77:d0:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTg4NDExMC8GA1UEBRMoQkUzQkZCMjc4REI5QTAzREVBMzg1NkQ3RkUyMjkyMTgz NzREOEZDMDAeFw0yNTA0MjcwNjIxMTJaFw0yNTA1MDQwNjIxMTJaMBgxFjAUBgNV BAMTDTY4MGRjY2Q4LWVmZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAYoyx4LEdaWtOdCNHhyDejd9I8EhBAeQNenpONFtzO5MZbIxn201fwcmC5/9i BDpM0i1oGnqUtAJXhw0fPaWUo/rAbpBVg2FK/kep1hkEGBAMVHpV0/3q8ixGKQZt i0Y8lWJHVQF4xQ7Hf3acweB/H2UTGfyx4CTzeJU+sjiQkWrVJES4KD5HEnujunZe uoP9ebCuVOio0xftWbOko7wP9hhi7HwwJtheYECyl/pNKH5kgV8ABtuJGTYpwjDe ZREYpU5bTXgSUC4mcPtVewo4qn88s1egXudYhcjcChW4bhUrPfLfA0qKM6Wzo7Xr DTTqZEg5bWvYJheHmUtkeG4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuTIL/xY7 LR1dZ4nKEk1aeE/tAC8wHwYDVR0jBBgwFoAUvjv7J425oD3qOFbX/iKSGDdNj8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1ODg0LzYxQjA3MDVBQ0RF QjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmp2N0o0MjVvRDNxT0ZiWF9pS1NHRGROajhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 ODg0LzYxQjA3MDVBQ0RFQjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0Qz cU9GYlhfaUtTR0RkTmo4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcFWmd4R3JP7dn6H2WftZsZnaOj9HnbyDvU4IuHMGYDe3rPaw5jgOFC ZVuCFGa7+dI1CtdpUSZjS4f9da0/bR+rVCEecTg3iQohzH6YU+9m88iBK2TBM8mn egSoR/nU4I7Rk5T3W3MlIfvEKwlbZMITNyToOkV6/YtXMjHCIOacRtr6/Az3W7pI FphbaZnslU3XLAcaicPwPB+QRseZ6drUeHwCoS+ztb4GkFJoOGTkS4YsWGGbHhhL kcaX9432e/uFOnI4rILM9YMwT6NqEOCZwhk33MVwmQVA5TsQDLImUBGaI+J0tWoo HURkN4BFCRsE0e0RGYKIRNsAgfB30F4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net