$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: U+zd7wB1ajUieBlXhqrKc5drKctH8d250Gzg2QYOpwk= Subject key identifier: 5C:48:9E:0E:C3:9F:7F:11:25:60:27:D7:63:45:B2:A6:EC:4B:18:79 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 25FE Signing time: Mon 28 Apr 2025 15:47:54 +0000 Manifest this update: Mon 28 Apr 2025 15:47:54 +0000 Manifest next update: Mon 05 May 2025 15:47:54 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: QMP21lH5lKUWFetV+lWhOflfTSj0i2C+t06w1mPIJic=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9750 (0x2616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Apr 28 15:47:54 2025 GMT Not After : May 5 15:47:54 2025 GMT Subject: CN=680fa32a-9b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:0d:16:78:9b:41:e9:8d:76:ce:62:54:3d: 0e:4b:1c:db:dc:c3:9e:81:9b:a3:69:99:78:fa:9a: 43:f1:f3:e2:b5:ca:4f:3f:c4:d1:76:18:1f:6c:f2: 65:1f:ae:57:54:36:42:cb:3e:23:48:f7:c2:fb:6f: 1a:0f:c0:68:b2:10:9e:c2:15:ce:25:be:2a:3c:e9: e0:88:aa:59:b8:ec:67:f2:cf:57:ea:e0:8c:d6:e5: d7:78:0b:9e:1f:26:6a:3b:9b:b5:66:65:6b:c5:18: 7b:31:6e:91:6e:47:31:2c:49:02:1f:8b:45:c6:44: 47:91:bf:e6:73:5f:28:9b:93:b4:ce:b8:fe:85:c1: ad:4a:32:76:d9:de:ce:ed:1e:d5:6c:8b:86:1d:82: a9:2e:5b:9f:02:ad:56:37:08:5e:02:d1:a1:41:12: 5c:e1:59:c7:4e:25:d8:63:13:78:a5:a9:b0:61:a0: d3:24:ae:96:30:52:04:c7:b7:b0:a8:14:3a:90:11: fb:e4:88:d1:0e:a1:a5:c6:6b:95:d0:d7:3f:42:e8: 7a:df:25:03:35:f9:a6:11:bb:4d:ba:f7:39:10:d9: 05:4f:3a:ae:ec:55:68:5a:50:2a:7c:4e:8d:72:7a: dd:d0:59:cb:dc:a8:f7:e2:a7:7e:61:c1:be:95:53: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:48:9E:0E:C3:9F:7F:11:25:60:27:D7:63:45:B2:A6:EC:4B:18:79 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:65:dd:4f:fb:21:ec:2a:1a:0a:d3:6d:95:8d:d3:bd:2c:e8: ce:c0:a5:23:54:42:d3:c7:8d:75:3e:52:e0:af:93:ee:22:19: 51:f5:bd:25:bb:fc:f1:fc:52:26:91:d0:4f:01:24:77:d0:fd: f0:cb:b2:6b:a1:74:4e:e6:d5:68:ec:77:7e:c1:4b:0e:b3:ca: 10:98:32:15:2c:f6:24:5e:fa:b8:ba:6c:70:a2:27:c2:10:fe: 5f:b9:18:f0:29:ce:ea:9c:a8:6d:ff:8c:5f:66:e7:4a:d7:1c: 7d:92:78:f7:3d:61:39:e2:84:f3:c5:e3:bb:3b:df:b8:ec:7b: ff:69:f5:4e:2c:3c:1d:7c:d2:ad:13:37:42:db:08:b6:3e:29: ac:00:40:1e:8c:61:60:6f:4d:16:6d:d8:5f:42:f5:cb:28:30: 3d:50:86:19:69:21:1f:b7:bd:cf:fa:70:8f:10:d5:26:e6:ef: d9:9a:b4:4d:84:ed:d0:3f:e2:5c:cc:49:62:e5:5d:1d:c5:43: 0c:06:1c:3a:8d:47:1a:62:21:98:cd:e1:49:f2:ac:84:59:a5: a9:e8:ab:2f:77:81:6a:cc:1c:a5:d2:b6:6b:17:35:17:c9:27: 75:c0:c9:79:40:4c:2d:b8:45:a4:6f:12:68:11:68:37:ad:4d: dd:a5:40:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNDI4MTU0NzU0WhcNMjUwNTA1MTU0NzU0WjAYMRYwFAYD VQQDEw02ODBmYTMyYS05YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRsNFnibQemNds5iVD0OSxzb3MOegZujaZl4+ppD8fPitcpPP8TRdhgfbPJl H65XVDZCyz4jSPfC+28aD8BoshCewhXOJb4qPOngiKpZuOxn8s9X6uCM1uXXeAue HyZqO5u1ZmVrxRh7MW6RbkcxLEkCH4tFxkRHkb/mc18om5O0zrj+hcGtSjJ22d7O 7R7VbIuGHYKpLlufAq1WNwheAtGhQRJc4VnHTiXYYxN4pamwYaDTJK6WMFIEx7ew qBQ6kBH75IjRDqGlxmuV0Nc/Quh63yUDNfmmEbtNuvc5ENkFTzqu7FVoWlAqfE6N cnrd0FnL3Kj34qd+YcG+lVM8UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxIng7D n38RJWAn12NFsqbsSxh5MB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUZd1P+yHsKhoK022VjdO9LOjOwKUjVELTx411PlLgr5PuIhlR9b0l u/zx/FImkdBPASR30P3wy7JroXRO5tVo7Hd+wUsOs8oQmDIVLPYkXvq4umxwoifC EP5fuRjwKc7qnKht/4xfZudK1xx9knj3PWE54oTzxeO7O9+47Hv/afVOLDwdfNKt EzdC2wi2PimsAEAejGFgb00WbdhfQvXLKDA9UIYZaSEft73P+nCPENUm5u/ZmrRN hO3QP+JczEli5V0dxUMMBhw6jUcaYiGYzeFJ8qyEWaWp6Ksvd4FqzByl0rZrFzUX ySd1wMl5QEwtuEWkbxJoEWg3rU3dpUBD -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:50 2025 by rpki-client on console.sobornost.net