$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: i/GgKpz2FQ37759hRGxtdN8dtTi4kOGczYA2CFFcpEs= Subject key identifier: 62:1D:CC:30:A1:30:93:9F:42:8B:1F:4B:E3:E7:3C:63:87:6A:8A:0E Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 012D Signing time: Sun 27 Apr 2025 03:30:58 +0000 Manifest this update: Sun 27 Apr 2025 03:30:58 +0000 Manifest next update: Sun 04 May 2025 03:30:58 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: 6GMz6kXsJZCKd32cyFk14BEvY/rvTlIP6OSCT2Seck4=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Apr 27 03:30:58 2025 GMT Not After : May 4 03:30:58 2025 GMT Subject: CN=680da4f2-5a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:70:7e:00:9d:8a:bc:e5:11:83:7f:e2:d5: 8e:77:2c:6f:9e:f8:3d:c4:6e:63:41:25:be:82:e2: 62:52:c3:c4:56:51:b8:b2:bf:83:92:be:bf:59:a9: 2c:56:17:e1:02:15:95:31:aa:0a:a1:29:f5:34:79: 18:ea:8f:71:13:56:96:eb:6c:9d:65:e0:72:5a:89: 5a:36:e9:55:85:55:a5:3f:f8:f2:56:63:dd:05:b7: 7d:06:6a:1b:fb:df:13:08:14:1b:87:55:4c:df:26: 13:96:4f:9b:26:2a:9e:99:fb:39:8e:8e:35:79:26: c8:46:5a:be:bc:87:5b:26:07:5e:e2:6f:16:54:71: f5:75:71:6a:07:7d:73:9a:8f:5b:91:11:5c:2b:16: b9:e8:c3:d5:dc:ec:10:86:38:7c:53:a8:48:ce:5d: a2:f0:91:b1:4f:c2:25:59:c0:5a:19:b8:06:53:6c: 8d:b8:1e:46:53:5e:de:de:ac:7f:0b:b6:e9:05:6a: a9:3f:6a:35:b8:9a:7e:b3:a3:11:10:67:20:59:97: 5e:2e:83:92:d9:8e:7c:cd:cc:10:71:8f:b2:b6:a0: a5:81:60:af:53:6e:28:61:4b:fe:fc:1f:d4:3b:a4: 59:ca:b0:fb:ba:8a:c8:8e:76:5f:91:34:ac:de:96: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:CC:30:A1:30:93:9F:42:8B:1F:4B:E3:E7:3C:63:87:6A:8A:0E X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:75:01:c9:c4:62:bd:97:21:c8:03:61:8f:59:98:a3:b6: c3:f2:ed:ac:d1:84:54:0e:f2:03:59:f3:87:93:82:40:cf:26: db:87:9a:54:f7:a4:f9:75:8f:67:85:ce:11:f7:7b:ba:1e:94: b8:ba:9b:bd:6c:06:d9:8a:2d:3c:6c:09:29:7e:c0:8a:c8:d7: fd:de:1b:76:e2:d4:89:41:2d:df:b2:0b:08:56:4c:0d:ec:63: 89:cd:d7:a4:4c:77:99:c0:03:3d:08:f4:86:4a:db:ba:cb:d0: 9a:54:22:c8:7b:03:cb:05:cc:ca:cd:7a:10:bf:84:5c:c0:2d: 6d:9b:f2:31:2b:36:c6:f8:94:92:de:30:1e:f4:48:d1:93:27: 44:89:23:51:7b:b3:fb:7e:5b:e7:24:cf:73:cd:f3:3d:f2:71: af:56:f0:ad:24:cc:9c:35:27:6b:aa:5b:ad:ca:2a:26:fc:f5: 62:c8:ab:e5:e9:1a:58:81:02:e9:f0:2b:b2:9d:04:95:b8:0b: e9:09:de:70:f1:26:7a:9f:8f:ba:a6:ac:18:f1:7a:78:e4:34: 6a:13:2e:01:38:d7:80:60:ce:22:73:30:90:de:cb:e8:20:8e: d9:67:e3:65:01:6c:ef:45:11:3b:e5:5c:7e:f8:a0:ae:f0:98: dd:da:e3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwNDI3MDMzMDU4WhcNMjUwNTA0MDMzMDU4WjAYMRYwFAYD VQQDEw02ODBkYTRmMi01YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMRwfgCdirzlEYN/4tWOdyxvnvg9xG5jQSW+guJiUsPEVlG4sr+Dkr6/Waks VhfhAhWVMaoKoSn1NHkY6o9xE1aW62ydZeByWolaNulVhVWlP/jyVmPdBbd9Bmob +98TCBQbh1VM3yYTlk+bJiqemfs5jo41eSbIRlq+vIdbJgde4m8WVHH1dXFqB31z mo9bkRFcKxa56MPV3OwQhjh8U6hIzl2i8JGxT8IlWcBaGbgGU2yNuB5GU17e3qx/ C7bpBWqpP2o1uJp+s6MREGcgWZdeLoOS2Y58zcwQcY+ytqClgWCvU24oYUv+/B/U O6RZyrD7uorIjnZfkTSs3pbHCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIdzDCh MJOfQosfS+PnPGOHaooOMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJS3UBycRivZchyANhj1mYo7bD8u2s0YRUDvIDWfOHk4JAzybbh5pU 96T5dY9nhc4R93u6HpS4upu9bAbZii08bAkpfsCKyNf93ht24tSJQS3fsgsIVkwN 7GOJzdekTHeZwAM9CPSGStu6y9CaVCLIewPLBczKzXoQv4RcwC1tm/IxKzbG+JSS 3jAe9EjRkydEiSNRe7P7flvnJM9zzfM98nGvVvCtJMycNSdrqlutyiom/PViyKvl 6RpYgQLp8CuynQSVuAvpCd5w8SZ6n4+6pqwY8Xp45DRqEy4BONeAYM4iczCQ3svo II7ZZ+NlAWzvRRE75Vx++KCu8Jjd2uMU -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:44 2025 by rpki-client on console.sobornost.net