$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json) Hash identifier: Ta/khaPNhZF9e7lq8P5Mk5bcBySgpyoYS8F2As69Akw= Subject key identifier: AE:FF:C8:3F:46:51:83:57:9C:40:D9:70:1B:A4:FA:56:FF:AD:E0:B4 Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft Manifest number: 50 Signing time: Sun 27 Apr 2025 06:05:29 +0000 Manifest this update: Sun 27 Apr 2025 06:05:29 +0000 Manifest next update: Sun 04 May 2025 06:05:29 +0000 Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: mTU3gRBwZL9PIOj1K+lwbiVR1p4X+IIMzIFPhgNQFoA=) 2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704 Validity Not Before: Apr 27 06:05:29 2025 GMT Not After : May 4 06:05:29 2025 GMT Subject: CN=680dc929-668b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:b0:6d:49:44:f8:13:f5:af:a5:9e:5d:a4: b6:be:cb:f2:85:d6:94:5a:6c:72:47:7c:2a:fb:3e: 3c:61:88:24:b8:c3:0b:20:db:e0:5f:da:09:09:a7: a2:02:53:25:36:fb:32:14:27:97:6b:52:48:80:d7: f7:1f:13:27:6d:6d:c7:fa:04:d4:dd:bc:e5:d2:1b: 8c:ad:6a:cb:e2:4b:c8:56:aa:63:1b:ad:2b:75:04: 1c:ba:36:db:e9:52:ce:33:a9:bb:7f:43:b6:cc:17: 2b:9f:f4:d1:a6:c3:1a:88:fe:a3:b1:61:86:55:47: 64:89:b6:f2:0d:f3:7a:86:c6:5d:37:b6:42:a3:69: 0d:00:62:1f:c7:e6:38:59:88:7b:64:50:da:52:8b: 27:8a:1a:a2:4c:9f:bc:80:ab:9d:9b:e5:4a:ec:de: a8:1b:50:b7:b0:2d:56:4f:a3:4b:48:ba:3e:5d:ce: 58:58:28:f7:fb:a9:1e:e3:f4:25:bf:de:2e:95:47: 0f:7e:e3:04:cf:f0:d1:22:13:a9:3d:79:9d:c4:a5: 7e:66:f0:50:9b:16:1f:c3:8f:50:c2:38:fb:7b:68: 0e:5e:d7:d7:69:b2:be:2b:2d:ff:c8:1e:e3:51:d9: 73:98:7a:43:76:2e:d9:2d:dc:cb:88:cc:7a:21:b9: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:C8:3F:46:51:83:57:9C:40:D9:70:1B:A4:FA:56:FF:AD:E0:B4 X509v3 Authority Key Identifier: keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:5f:10:c1:14:46:23:4f:55:21:ed:31:06:e9:2c:5d:da:c0: f2:43:45:57:43:c3:a5:af:d1:5f:2a:05:41:ff:3c:4a:6b:c4: 54:ff:49:1b:c1:9f:ee:26:70:e6:9f:b5:e9:39:cf:6a:a6:a5: 1d:67:e9:79:90:a7:0e:4e:39:32:ba:a6:cc:01:77:ab:e1:bd: 85:8b:7d:a5:4e:e6:9e:8e:aa:d8:6b:39:ff:a7:91:54:34:cd: 9a:a1:bf:a7:39:16:8d:35:b3:50:92:b6:03:45:cd:7e:35:42: 8b:f1:ca:7e:5d:08:84:5e:27:b2:b3:86:45:ee:7c:3a:55:6f: 57:78:cd:61:08:1b:ef:0c:84:de:0c:28:db:d7:40:b5:a8:30: 94:f9:d4:7f:09:3e:23:90:ce:9a:f3:3d:23:4a:d9:0c:c4:45: d7:48:82:46:16:50:87:50:36:c0:1e:53:d1:f2:c7:30:dd:be: 84:0e:fb:c8:71:b1:30:49:56:b4:c9:12:d6:fa:f2:70:70:b6: 39:a9:fd:87:1e:91:02:ef:ea:7d:26:0d:a6:fc:06:50:24:d3: 7a:21:d2:a9:a0:05:ed:c4:a3:9c:3e:69:7c:d7:f9:46:47:4d: 4c:45:fa:84:34:6e:34:f6:9b:6e:5e:af:4a:d8:17:89:9f:2e: 46:b2:db:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoQTYyM0RDMDVFRTdDMjM3MENBNDQ0MzEwODRERTUxMzIx RjM3QTcwNDAeFw0yNTA0MjcwNjA1MjlaFw0yNTA1MDQwNjA1MjlaMBgxFjAUBgNV BAMTDTY4MGRjOTI5LTY2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48rBtSUT4E/WvpZ5dpLa+y/KF1pRabHJHfCr7PjxhiCS4wwsg2+Bf2gkJp6IC UyU2+zIUJ5drUkiA1/cfEydtbcf6BNTdvOXSG4ytasviS8hWqmMbrSt1BBy6Ntvp Us4zqbt/Q7bMFyuf9NGmwxqI/qOxYYZVR2SJtvIN83qGxl03tkKjaQ0AYh/H5jhZ iHtkUNpSiyeKGqJMn7yAq52b5Urs3qgbULewLVZPo0tIuj5dzlhYKPf7qR7j9CW/ 3i6VRw9+4wTP8NEiE6k9eZ3EpX5m8FCbFh/Dj1DCOPt7aA5e19dpsr4rLf/IHuNR 2XOYekN2Ltkt3MuIzHohufBtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrv/IP0ZR g1ecQNlwG6T6Vv+t4LQwHwYDVR0jBBgwFoAUpiPcBe58I3DKREMQhN5RMh83pwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzRCRkQ5QkJDQUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNES1JFTVFoTjVSTWg4M3B3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGlQY0JlNThJM0RLUkVNUWhONVJNaDgzcHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzRCRkQ5QkJDQUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL3BpUGNCZTU4STNE S1JFTVFoTjVSTWg4M3B3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFfEMEURiNPVSHtMQbpLF3awPJDRVdDw6Wv0V8qBUH/PEprxFT/SRvB n+4mcOaftek5z2qmpR1n6XmQpw5OOTK6pswBd6vhvYWLfaVO5p6OqthrOf+nkVQ0 zZqhv6c5Fo01s1CStgNFzX41Qovxyn5dCIReJ7KzhkXufDpVb1d4zWEIG+8MhN4M KNvXQLWoMJT51H8JPiOQzprzPSNK2QzERddIgkYWUIdQNsAeU9HyxzDdvoQO+8hx sTBJVrTJEtb68nBwtjmp/YcekQLv6n0mDab8BlAk03oh0qmgBe3Eo5w+aXzX+UZH TUxF+oQ0bjT2m25er0rYF4mfLkay26k= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net