$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: 65hOKKnetDl4tqSfTPAl2X8zH9ua+rTTeY3MzTjnisU= Subject key identifier: AA:61:BC:D7:A2:6B:99:07:37:CC:46:2C:B4:DD:20:0F:01:D0:64:30 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 3490 Signing time: Mon 28 Apr 2025 14:19:44 +0000 Manifest this update: Mon 28 Apr 2025 14:19:43 +0000 Manifest next update: Mon 05 May 2025 14:19:43 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: 2QLKnCAEim8eDOapmpOJSehccKEqXAqYLEbOHK5z3Bs=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Apr 28 14:19:43 2025 GMT Not After : May 5 14:19:43 2025 GMT Subject: CN=680f8e80-b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:6e:0c:22:b2:d7:65:a2:d1:a5:06:9f:df: bf:ca:9d:f4:78:3e:36:f5:d7:d2:73:dd:99:9d:03: 3b:e3:03:de:05:f4:c6:09:28:54:35:ea:bf:bc:13: 79:15:c6:ee:b2:f0:3d:31:5b:ca:ee:de:96:9b:1a: 5c:b2:83:8d:28:90:85:73:55:1c:57:79:d9:78:90: b6:e3:fc:0b:15:a5:41:82:80:9f:77:cc:84:95:7e: 14:00:18:cf:6e:0c:49:59:59:2b:c5:4c:dd:3f:9d: 51:55:15:d5:06:dc:b9:71:84:ca:cc:ba:c5:5c:9b: 06:d2:fd:14:82:f0:f1:50:7a:21:90:84:f8:8a:2b: 51:4c:f0:6a:1d:39:82:45:da:c2:cd:6d:88:aa:6b: a3:41:37:6c:c8:e8:7f:28:37:b9:6c:dc:04:ac:e4: ab:dd:dc:4c:f6:0a:8b:67:8d:c9:18:8a:a9:22:55: f9:55:0c:95:e2:e3:bc:10:42:57:7a:8e:7c:b4:0c: 7d:81:66:36:79:53:e1:a1:df:96:41:c1:b6:f9:7b: f7:6f:6d:84:c4:b4:9c:36:22:29:21:62:f7:87:91: ef:ea:98:95:79:56:77:62:46:33:05:4d:27:dd:97: 1c:f3:b6:19:2b:1a:64:70:34:8a:1c:93:f3:0c:a5: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:BC:D7:A2:6B:99:07:37:CC:46:2C:B4:DD:20:0F:01:D0:64:30 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:04:1e:0c:6b:db:8a:67:04:85:ec:ea:a8:c5:3e:89:98:d2: 9b:95:b0:59:54:f1:14:fa:88:66:3e:3a:ac:80:80:61:0d:81: d2:27:af:42:75:10:df:e8:aa:4c:4a:10:c2:da:35:22:20:34: 26:14:d3:e5:77:cd:53:06:15:4d:d9:ff:3b:48:80:5d:68:3c: d5:dd:10:ef:27:f7:c2:55:e8:83:3f:84:57:a8:b2:76:8e:01: 7d:b9:e3:d2:24:6a:0c:46:80:fd:49:86:c5:43:f2:30:25:1e: da:5a:fe:ad:a2:d1:f2:14:5f:99:b0:37:5e:ca:4e:cb:02:e4: 3b:8e:da:8f:63:01:f8:c1:78:03:c2:49:da:04:9b:10:1a:44: 81:c1:61:e4:f9:5b:dc:75:c7:fa:3d:df:73:45:e3:bd:e8:3c: 6a:ab:ab:27:3a:b3:e7:e8:af:b8:51:f0:02:a7:ad:f9:7d:44: aa:05:ac:69:fd:e4:01:51:5c:f9:6e:10:56:9d:43:99:40:78: da:f2:b7:d0:d7:7e:66:78:e0:32:33:09:16:de:00:9d:e0:d7: 43:4b:b0:72:bc:45:a6:6a:df:d5:c8:29:17:c3:58:89:d5:57: 13:8a:75:b5:4c:ca:fd:2e:b6:a5:ac:1f:40:aa:db:bf:52:5f: 77:f2:da:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUwNDI4MTQxOTQzWhcNMjUwNTA1MTQxOTQzWjAYMRYwFAYD VQQDEw02ODBmOGU4MC1iMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0FuDCKy12Wi0aUGn9+/yp30eD429dfSc92ZnQM74wPeBfTGCShUNeq/vBN5 FcbusvA9MVvK7t6WmxpcsoONKJCFc1UcV3nZeJC24/wLFaVBgoCfd8yElX4UABjP bgxJWVkrxUzdP51RVRXVBty5cYTKzLrFXJsG0v0UgvDxUHohkIT4iitRTPBqHTmC RdrCzW2IqmujQTdsyOh/KDe5bNwErOSr3dxM9gqLZ43JGIqpIlX5VQyV4uO8EEJX eo58tAx9gWY2eVPhod+WQcG2+Xv3b22ExLScNiIpIWL3h5Hv6piVeVZ3YkYzBU0n 3Zcc87YZKxpkcDSKHJPzDKXYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKphvNei a5kHN8xGLLTdIA8B0GQwMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvBB4Ma9uKZwSF7OqoxT6JmNKblbBZVPEU+ohmPjqsgIBhDYHSJ69C dRDf6KpMShDC2jUiIDQmFNPld81TBhVN2f87SIBdaDzV3RDvJ/fCVeiDP4RXqLJ2 jgF9uePSJGoMRoD9SYbFQ/IwJR7aWv6totHyFF+ZsDdeyk7LAuQ7jtqPYwH4wXgD wknaBJsQGkSBwWHk+Vvcdcf6Pd9zReO96Dxqq6snOrPn6K+4UfACp635fUSqBaxp /eQBUVz5bhBWnUOZQHja8rfQ135meOAyMwkW3gCd4NdDS7ByvEWmat/VyCkXw1iJ 1VcTinW1TMr9LralrB9Aqtu/Ul938tp5 -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:53 2025 by rpki-client on console.sobornost.net