$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json) Hash identifier: ydfzdMSxSlCUvXeYtK/Hmekt++Jn4b3W1Z9jAIX0VjQ= Subject key identifier: 1C:40:24:CB:79:F7:DF:EB:A0:05:F1:00:EA:9F:D1:D7:D3:E1:A2:72 Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC Certificate serial: 1CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft Manifest number: 1CA4 Signing time: Mon 28 Apr 2025 16:17:08 +0000 Manifest this update: Mon 28 Apr 2025 16:17:07 +0000 Manifest next update: Mon 05 May 2025 16:17:07 +0000 Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: poZeGWE0KZNckzI3e0aGvnWODJzpn4je9NLzScmPA6w=) 2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=) 3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=) 4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7403 (0x1ceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC Validity Not Before: Apr 28 16:17:07 2025 GMT Not After : May 5 16:17:07 2025 GMT Subject: CN=680faa03-44ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:6b:90:50:f6:3b:eb:1d:5e:1e:cd:58:f0: 5f:6c:39:c6:4d:ed:03:92:da:3d:38:b7:57:e5:34: 01:d3:73:30:3c:11:7d:ec:8a:92:ee:1d:8b:6b:c5: 13:c7:ba:b2:59:4f:52:5b:a4:3a:9c:33:09:95:a2: 3b:1b:00:fc:5b:f2:40:ec:fd:5c:99:ee:db:fa:fb: 1e:7c:24:a3:50:16:df:fd:29:c6:36:77:14:7f:ea: 2d:93:26:67:02:af:b2:62:d7:2b:c9:35:10:95:de: fe:34:5e:1f:d3:b1:b8:d1:63:a7:e0:84:5a:8b:94: 5e:b4:c8:c3:cc:d5:99:8f:c7:39:b7:e9:73:e5:c1: 88:e9:55:b6:6c:14:4a:c7:6f:1c:5b:33:30:54:d8: 26:d9:54:35:b6:af:f4:0d:6c:e5:29:1f:52:0a:0c: cb:03:c1:e1:bc:0e:0d:a5:1e:bd:a1:8e:c8:bb:28: ab:19:30:df:66:1c:67:ae:15:6a:2f:f0:a0:90:a6: 07:9c:08:9f:c1:cd:23:a1:26:ed:c3:e1:b3:75:f5: 88:a6:60:ce:47:40:13:97:cf:26:da:f3:ba:2a:11: f3:b6:18:bc:bf:46:6c:fd:25:36:38:e6:19:f4:4a: 83:34:09:d5:75:11:af:62:8c:eb:bd:18:fd:f9:73: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:24:CB:79:F7:DF:EB:A0:05:F1:00:EA:9F:D1:D7:D3:E1:A2:72 X509v3 Authority Key Identifier: keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d2:db:9b:c4:2b:61:ca:6e:31:64:ad:63:4b:08:b4:50:cf: 89:f5:05:d0:a5:6f:79:85:a0:55:d2:1f:cb:a4:68:44:25:ab: b1:cd:ff:83:92:f2:9a:87:6c:66:aa:ff:ea:aa:87:63:31:08: 1c:93:8e:00:ce:8f:b6:62:09:70:4b:0e:f8:70:ac:d0:ff:e6: 06:8d:74:ce:62:43:cd:e8:e2:e9:a7:35:3b:e0:d4:d9:67:52: 16:a6:a8:df:e1:e6:d0:4a:0f:bf:f0:35:1b:99:a8:50:28:30: d7:2d:d1:a9:b9:52:3a:05:11:8f:54:ba:56:e9:d2:de:f3:8a: b2:23:01:b4:3c:4a:35:38:e5:63:27:62:c4:a0:a2:ec:b5:aa: 86:20:6c:f1:c4:ed:a8:e4:f6:d1:cb:02:08:b4:e5:35:c0:42: 4a:0d:95:f1:93:f3:dc:ed:ec:23:ae:66:c4:bb:6b:86:44:d1: 85:34:73:1e:17:c4:23:8a:61:dc:a2:d8:bb:ae:ac:25:5e:e3: d2:29:d4:8b:6e:3e:f5:78:96:c8:49:03:65:ef:28:71:a3:7d: a4:32:fc:9f:e3:1b:80:6a:77:19:8a:eb:56:48:3e:25:f8:d4: b2:47:f2:53:38:2c:5f:8c:f1:c9:b9:c0:57:60:5d:32:df:5f: af:b3:96:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBEMjcxMTAvBgNVBAUTKEZGQ0QyMERDQTY4REU0MzJGMjE5MUI3QjYzMzI4NkJD OTg3RTQyRUMwHhcNMjUwNDI4MTYxNzA3WhcNMjUwNTA1MTYxNzA3WjAYMRYwFAYD VQQDEw02ODBmYWEwMy00NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ntrkFD2O+sdXh7NWPBfbDnGTe0Dkto9OLdX5TQB03MwPBF97IqS7h2La8UT x7qyWU9SW6Q6nDMJlaI7GwD8W/JA7P1cme7b+vsefCSjUBbf/SnGNncUf+otkyZn Aq+yYtcryTUQld7+NF4f07G40WOn4IRai5RetMjDzNWZj8c5t+lz5cGI6VW2bBRK x28cWzMwVNgm2VQ1tq/0DWzlKR9SCgzLA8HhvA4NpR69oY7IuyirGTDfZhxnrhVq L/CgkKYHnAifwc0joSbtw+GzdfWIpmDOR0ATl88m2vO6KhHzthi8v0Zs/SU2OOYZ 9EqDNAnVdRGvYozrvRj9+XOFMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxAJMt5 99/roAXxAOqf0dfT4aJyMB8GA1UdIwQYMBaAFP/NINymjeQy8hkbe2MyhryYfkLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQyNy8yQTYxQ0E4QUQz NTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVETHlHUnQ3WXpLR3ZKaC1R dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184MGczS2FONURMeUdSdDdZektHdkpoLVF1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQyNy8yQTYxQ0E4QUQzNTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVE THlHUnQ3WXpLR3ZKaC1RdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0tubxCthym4xZK1jSwi0UM+J9QXQpW95haBV0h/LpGhEJauxzf+D kvKah2xmqv/qqodjMQgck44Azo+2YglwSw74cKzQ/+YGjXTOYkPN6OLppzU74NTZ Z1IWpqjf4ebQSg+/8DUbmahQKDDXLdGpuVI6BRGPVLpW6dLe84qyIwG0PEo1OOVj J2LEoKLstaqGIGzxxO2o5PbRywIItOU1wEJKDZXxk/Pc7ewjrmbEu2uGRNGFNHMe F8QjimHcoti7rqwlXuPSKdSLbj71eJbISQNl7yhxo32kMvyf4xuAancZiutWSD4l +NSyR/JTOCxfjPHJucBXYF0y31+vs5ZX -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:34 2025 by rpki-client on console.sobornost.net