$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: xxagKhBL4NsXBv6Agwj4TpvHWw3+SLqNZ6qn8dU1Vjw= Subject key identifier: C9:49:76:9F:62:B9:6A:D2:82:7F:80:39:2B:64:53:7D:50:11:D7:B3 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 07D6 Signing time: Thu 24 Apr 2025 15:58:51 +0000 Manifest this update: Thu 24 Apr 2025 15:58:50 +0000 Manifest next update: Thu 01 May 2025 15:58:50 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: vXfOsyVmgYR1cp51LQGxVzuO2oM7sNfWNhGAX8pYIBQ=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: 8D5ksmfc3aXF/CCypLFYWvFyrGXF0UBfGXqLK0BT+9c=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: p/AuYRiNnSg4t0PmmsqbbQiBX6hKVTQkj6NVyO5NMng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Apr 24 15:58:50 2025 GMT Not After : May 1 15:58:50 2025 GMT Subject: CN=680a5fba-1f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:ea:75:c3:98:d7:a2:28:be:3a:ed:2c:03: 5b:d6:48:71:cc:a9:88:ac:c9:a3:25:29:b2:5f:11: 01:7f:db:ac:1f:02:3b:5f:eb:b7:e4:82:58:d4:e3: 0a:65:ca:19:3c:e6:38:f2:82:c7:bb:5e:54:30:d0: 32:4c:b8:eb:e4:12:82:dc:c2:36:1e:b5:dd:66:28: 37:92:57:1f:94:f3:86:bf:97:77:35:e8:04:b0:71: 46:91:b2:6c:7e:6f:ea:1b:27:fb:af:83:76:2d:8c: 5e:38:39:48:2e:a8:20:81:81:f6:9f:05:8e:7b:33: 9e:c7:d9:35:b0:53:b7:b5:78:a8:5d:97:b6:21:62: e1:b2:ea:36:53:a5:5f:69:c2:b4:b0:c4:9c:77:e1: 8e:a3:4b:86:6f:65:c8:c9:df:33:ef:bb:ea:87:18: 29:54:af:f8:11:4d:b8:d2:b7:b1:e3:28:9a:e2:61: 2b:f5:51:25:2d:dd:92:ea:9a:98:20:70:44:70:8d: 4e:29:f6:4d:56:a2:fc:55:f8:be:8a:15:d7:4b:ae: 3f:7e:c1:85:fc:c1:6f:1b:1c:37:53:43:96:61:84: 77:d5:bf:ad:94:0c:e5:92:01:04:6c:a8:88:6e:f8: 58:8d:9e:24:95:e0:4a:0a:6e:b9:44:e5:7c:76:82: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:76:9F:62:B9:6A:D2:82:7F:80:39:2B:64:53:7D:50:11:D7:B3 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:89:f1:48:c3:c1:6a:82:85:89:ef:e0:be:56:0a:e3:ce:52: 5e:50:a7:55:9d:dd:73:24:45:46:43:e6:94:4d:13:03:12:f2: bb:da:0f:71:17:88:51:d9:b7:c1:d5:26:37:c3:6c:a3:91:79: 7e:b2:80:b0:23:54:50:35:7b:f1:ba:c4:90:88:b9:3e:bb:28: a4:79:05:44:17:d8:09:2c:54:b5:d4:dc:27:4a:fa:d0:43:c4: c5:07:18:2e:97:20:30:9d:c4:bd:a2:93:d2:1c:aa:6b:c1:0a: 0f:57:85:40:1f:da:07:f9:db:a7:4e:4d:f1:d3:e3:78:a4:42: 7d:dd:29:48:d9:b4:ab:64:42:e6:b0:f6:e9:96:55:e9:02:4d: 0b:ea:9b:cd:81:57:a5:ff:e5:a2:40:00:79:fb:53:ca:e8:60: b8:6e:ac:45:f1:c5:a4:00:59:2b:23:3e:d2:3b:e3:9d:50:d4: 86:5e:ba:17:e4:e8:b6:97:16:71:1e:d9:ac:d0:71:9b:9c:47: 31:32:eb:83:f9:a1:44:4f:5f:d8:73:21:35:d3:a2:fa:a5:c2: 36:b1:a0:35:e6:cb:72:57:69:a1:16:af:a2:d4:c6:af:05:47: ea:4f:f8:e6:91:32:46:95:d9:35:93:50:5b:43:9c:26:33:01: 2c:3e:25:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUwNDI0MTU1ODUwWhcNMjUwNTAxMTU1ODUwWjAYMRYwFAYD VQQDEw02ODBhNWZiYS0xZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wXqdcOY16IovjrtLANb1khxzKmIrMmjJSmyXxEBf9usHwI7X+u35IJY1OMK ZcoZPOY48oLHu15UMNAyTLjr5BKC3MI2HrXdZig3klcflPOGv5d3NegEsHFGkbJs fm/qGyf7r4N2LYxeODlILqgggYH2nwWOezOex9k1sFO3tXioXZe2IWLhsuo2U6Vf acK0sMScd+GOo0uGb2XIyd8z77vqhxgpVK/4EU240rex4yia4mEr9VElLd2S6pqY IHBEcI1OKfZNVqL8Vfi+ihXXS64/fsGF/MFvGxw3U0OWYYR31b+tlAzlkgEEbKiI bvhYjZ4kleBKCm65ROV8doLpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlJdp9i uWrSgn+AOStkU31QEdezMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ifFIw8FqgoWJ7+C+VgrjzlJeUKdVnd1zJEVGQ+aUTRMDEvK72g9x F4hR2bfB1SY3w2yjkXl+soCwI1RQNXvxusSQiLk+uyikeQVEF9gJLFS11NwnSvrQ Q8TFBxgulyAwncS9opPSHKprwQoPV4VAH9oH+dunTk3x0+N4pEJ93SlI2bSrZELm sPbpllXpAk0L6pvNgVel/+WiQAB5+1PK6GC4bqxF8cWkAFkrIz7SO+OdUNSGXroX 5Oi2lxZxHtms0HGbnEcxMuuD+aFET1/YcyE106L6pcI2saA15styV2mhFq+i1Mav BUfqT/jmkTJGldk1k1BbQ5wmMwEsPiXQ -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:04 2025 by rpki-client on console.sobornost.net