$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: Bg13L/rIy03QcUdMl3bJkNpCU5xNJGOgC4UdxTMyh5c= Subject key identifier: ED:35:E4:1A:55:39:08:81:21:F4:C3:DD:E2:B0:86:DC:55:D6:8F:9B Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 09F7 Signing time: Mon 28 Apr 2025 20:17:25 +0000 Manifest this update: Mon 28 Apr 2025 20:17:24 +0000 Manifest next update: Mon 05 May 2025 20:17:24 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: aU/gxU6nDBE95beC4ymMwGmDRvVn0kTAN/SxKVHrCss=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Apr 28 20:17:24 2025 GMT Not After : May 5 20:17:24 2025 GMT Subject: CN=680fe254-172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a5:b4:59:7b:77:4e:fc:5b:d9:76:03:73:06: d5:2a:b0:c5:84:ed:18:fa:5b:15:c7:f6:61:01:b4: 99:8a:9c:75:76:23:c3:77:26:87:2e:77:07:60:1e: f4:b1:fd:59:0f:bb:e2:8e:59:ab:40:9c:52:c8:11: fa:c5:35:8b:a8:4f:a0:73:0d:fc:7d:86:b7:cf:19: dd:db:ff:1d:69:bc:f4:a9:ef:f7:b2:43:7e:31:c4: 9d:be:22:da:06:99:e3:e7:56:af:15:14:34:0f:21: a1:0f:0b:96:b2:97:c8:ef:1e:00:a2:e0:48:8a:c4: 63:c8:55:b9:57:d6:3f:13:b5:c7:7e:8c:8d:7d:ac: 5f:1f:ae:2b:a4:93:1c:f5:49:ee:11:21:b7:79:b9: 63:1d:2f:cd:c2:d5:d1:7e:7f:e2:b6:32:ea:b2:dd: 4c:01:b0:9d:9c:12:e9:6a:35:ac:0a:78:66:63:ab: bf:24:17:e6:e3:9e:de:7d:50:64:bf:a5:95:e4:42: b1:f3:44:21:65:7e:aa:80:0c:84:9f:aa:88:69:30: f4:9e:a0:07:48:27:01:bb:4c:03:51:f9:06:6f:66: 7d:0e:9d:8c:f7:d4:6a:3a:f6:ef:1b:5f:db:8d:31: ad:a9:cc:58:ab:4c:4f:48:2c:63:d6:56:16:4d:e6: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:35:E4:1A:55:39:08:81:21:F4:C3:DD:E2:B0:86:DC:55:D6:8F:9B X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:26:90:fa:1e:ee:19:63:24:ea:c3:3f:a3:dd:6a:16:dd:92: 37:7e:00:d9:71:04:16:10:62:22:86:b8:42:70:89:14:0a:1d: 0c:09:08:52:36:99:e2:16:c7:74:63:6f:ab:90:ff:fb:0b:6e: b4:b5:4c:cd:dd:50:85:90:ce:0d:09:89:bb:72:49:5a:28:2e: e6:3d:28:09:ab:d5:b4:53:13:49:28:3f:a9:c2:ed:e4:35:45: 6b:dc:1f:ed:d0:27:04:a2:37:e8:3d:c5:dc:19:2f:26:04:1f: e8:75:d4:21:89:bb:04:fd:20:88:c1:c6:d3:0f:c3:db:1f:b0: ed:bc:ac:46:52:42:e3:cc:5e:04:cd:fc:c5:79:1e:33:c0:cf: 1d:34:70:f3:1a:4b:4f:6c:c2:f9:0a:3f:3b:fd:84:63:c6:f1: 32:70:fe:53:1b:df:a4:59:97:e4:6c:d3:68:87:b5:f0:87:2d: a3:76:7a:ea:56:14:5d:94:56:66:bd:11:57:86:78:37:ed:4b: 8c:34:be:c8:55:3a:d6:10:00:bf:05:0e:90:b2:ec:d6:2b:f3: c0:4c:22:b9:57:a6:54:83:0b:3b:b2:1e:01:62:1f:60:f9:1d: cf:98:17:d9:77:cc:15:31:46:c0:ed:cd:30:fa:ea:4c:81:81: 1e:d0:98:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjUwNDI4MjAxNzI0WhcNMjUwNTA1MjAxNzI0WjAYMRYwFAYD VQQDEw02ODBmZTI1NC0xNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KW0WXt3Tvxb2XYDcwbVKrDFhO0Y+lsVx/ZhAbSZipx1diPDdyaHLncHYB70 sf1ZD7vijlmrQJxSyBH6xTWLqE+gcw38fYa3zxnd2/8dabz0qe/3skN+McSdviLa Bpnj51avFRQ0DyGhDwuWspfI7x4AouBIisRjyFW5V9Y/E7XHfoyNfaxfH64rpJMc 9UnuESG3ebljHS/NwtXRfn/itjLqst1MAbCdnBLpajWsCnhmY6u/JBfm457efVBk v6WV5EKx80QhZX6qgAyEn6qIaTD0nqAHSCcBu0wDUfkGb2Z9Dp2M99RqOvbvG1/b jTGtqcxYq0xPSCxj1lYWTebqUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO015BpV OQiBIfTD3eKwhtxV1o+bMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZJpD6Hu4ZYyTqwz+j3WoW3ZI3fgDZcQQWEGIihrhCcIkUCh0MCQhS NpniFsd0Y2+rkP/7C260tUzN3VCFkM4NCYm7cklaKC7mPSgJq9W0UxNJKD+pwu3k NUVr3B/t0CcEojfoPcXcGS8mBB/oddQhibsE/SCIwcbTD8PbH7DtvKxGUkLjzF4E zfzFeR4zwM8dNHDzGktPbML5Cj87/YRjxvEycP5TG9+kWZfkbNNoh7Xwhy2jdnrq VhRdlFZmvRFXhng37UuMNL7IVTrWEAC/BQ6QsuzWK/PATCK5V6ZUgws7sh4BYh9g +R3PmBfZd8wVMUbA7c0w+upMgYEe0JjL -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:10 2025 by rpki-client on console.sobornost.net