$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: 4ZmzKSvdHJDD8PUnqDF4MRmTyuqWxrHN29tgPdoydKk= Subject key identifier: 3C:5E:84:86:7E:EA:00:DC:EC:6A:DE:36:30:23:10:E6:92:A7:E0:54 Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 05BE Signing time: Sat 26 Apr 2025 22:46:24 +0000 Manifest this update: Sat 26 Apr 2025 22:46:24 +0000 Manifest next update: Sat 03 May 2025 22:46:24 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: f+tBWqjXh5/qTBqccc3KFqU1tisiRe7oU3m0fUYfQ+o=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: 4bTC2UNunl8WmbthP7AksvyRIOAjMvhZ4haA1p6DOkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A, serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: Apr 26 22:46:24 2025 GMT Not After : May 3 22:46:24 2025 GMT Subject: CN=680d6240-53d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:d6:2c:b1:62:f6:d1:94:8f:55:73:d1:0e: e1:4a:1b:0b:5e:50:b1:fd:d4:70:32:a6:5c:ec:2a: 3b:97:70:9b:58:2f:23:7a:57:ff:ad:e3:ec:60:84: b9:6c:23:e1:79:e3:8d:54:ea:2f:d8:fb:23:59:23: 61:38:20:31:66:0a:40:28:71:d6:de:9b:ec:0d:d6: 23:1e:fd:d8:5a:99:64:fa:f7:c1:24:aa:86:f6:40: e1:5c:bd:f1:6b:27:fc:96:85:f0:67:9e:a4:05:be: 7c:5a:f0:ae:3b:02:4d:c4:bf:85:34:4f:39:62:31: 7a:9a:ec:f8:91:29:9b:9d:74:7f:85:8e:3c:32:fd: 94:02:b4:cd:57:7e:d9:f8:b3:30:ec:34:f9:aa:f5: e2:70:12:1b:66:61:eb:55:34:cb:a7:48:c6:33:c5: d2:c3:1d:a6:7c:02:12:26:31:8f:1a:71:7f:c0:73: b2:47:1d:ce:09:9c:1c:4d:93:d3:9b:af:ac:4c:b2: 60:d2:76:3a:32:72:17:22:77:26:86:bf:d3:49:55: 81:92:81:05:dc:85:cb:1a:ee:a1:4a:22:2f:b0:d5: 5f:40:46:c5:51:00:f0:9c:d2:dd:58:26:ee:68:de: 81:5c:18:35:cd:ea:82:20:32:c5:8e:de:7b:8a:49: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:84:86:7E:EA:00:DC:EC:6A:DE:36:30:23:10:E6:92:A7:E0:54 X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0d:66:a3:ca:2a:21:84:c9:ce:20:6e:23:7a:90:c1:be:c6: 58:9f:5f:30:28:07:c2:fe:56:63:e7:40:69:53:32:08:ee:d2: 9c:93:40:26:46:b7:02:bf:49:70:dc:4f:29:81:d1:84:ab:8b: 5a:8b:f5:d2:78:c1:3f:3e:01:53:1d:a2:dd:11:1a:d1:b9:c4: 90:0f:72:92:5b:4a:9c:3b:68:7b:fa:d6:ea:02:d9:88:b0:8a: d5:39:72:ff:41:d1:f4:04:dc:c6:15:8b:cf:31:ae:2c:88:69: 90:f4:66:3b:2b:60:95:12:a7:92:48:67:3b:92:8a:d2:f7:ce: 9e:6c:c3:03:0f:cc:e3:93:fa:15:9d:96:57:60:dd:c5:09:bc: cf:32:e8:56:1b:67:11:b8:a5:f3:53:a3:08:ac:71:92:91:5d: a7:f0:9a:c5:6a:06:23:cc:82:71:62:99:e2:dd:e1:02:6c:98: 9d:43:5d:de:f5:57:dd:6d:57:93:c0:8a:96:17:e4:74:46:6c: c8:7b:eb:a6:04:79:3f:f3:76:6f:e6:e7:63:a6:9c:12:10:3e: 5c:ec:12:24:91:6c:64:93:82:ec:b3:ba:b3:db:b8:48:6c:a1: 78:ee:bc:55:83:ee:09:c4:cd:4b:be:09:5b:67:22:9b:0e:c6: fe:8c:e8:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjUwNDI2MjI0NjI0WhcNMjUwNTAzMjI0NjI0WjAYMRYwFAYD VQQDEw02ODBkNjI0MC01M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmLWLLFi9tGUj1Vz0Q7hShsLXlCx/dRwMqZc7Co7l3CbWC8jelf/rePsYIS5 bCPheeONVOov2PsjWSNhOCAxZgpAKHHW3pvsDdYjHv3YWplk+vfBJKqG9kDhXL3x ayf8loXwZ56kBb58WvCuOwJNxL+FNE85YjF6muz4kSmbnXR/hY48Mv2UArTNV37Z +LMw7DT5qvXicBIbZmHrVTTLp0jGM8XSwx2mfAISJjGPGnF/wHOyRx3OCZwcTZPT m6+sTLJg0nY6MnIXIncmhr/TSVWBkoEF3IXLGu6hSiIvsNVfQEbFUQDwnNLdWCbu aN6BXBg1zeqCIDLFjt57iknbOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxehIZ+ 6gDc7GreNjAjEOaSp+BUMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwDWajyiohhMnOIG4jepDBvsZYn18wKAfC/lZj50BpUzII7tKck0Am RrcCv0lw3E8pgdGEq4tai/XSeME/PgFTHaLdERrRucSQD3KSW0qcO2h7+tbqAtmI sIrVOXL/QdH0BNzGFYvPMa4siGmQ9GY7K2CVEqeSSGc7korS986ebMMDD8zjk/oV nZZXYN3FCbzPMuhWG2cRuKXzU6MIrHGSkV2n8JrFagYjzIJxYpni3eECbJidQ13e 9VfdbVeTwIqWF+R0RmzIe+umBHk/83Zv5udjppwSED5c7BIkkWxkk4Lss7qz27hI bKF47rxVg+4JxM1LvglbZyKbDsb+jOhT -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:40 2025 by rpki-client on console.sobornost.net