$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: C8rRVCgKL2tG3raN6XPHCZb0FhrtPtMMqnotkMw9J74= Subject key identifier: B3:26:C2:F8:F1:C6:F4:60:EA:5B:F5:9C:E9:DF:1C:85:DC:C0:34:0C Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0A89 Signing time: Mon 28 Apr 2025 19:59:31 +0000 Manifest this update: Mon 28 Apr 2025 19:59:31 +0000 Manifest next update: Mon 05 May 2025 19:59:31 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: dQp4s5wvR8M/1dOEI/otq7Hj3NhMoO+G7fdklls4LAk=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Apr 28 19:59:31 2025 GMT Not After : May 5 19:59:31 2025 GMT Subject: CN=680fde23-1baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:2b:e1:00:f7:b1:0c:cf:90:43:c7:5c:8d: 68:25:91:6d:03:c0:3b:30:4a:ad:7f:92:a6:ac:ed: 14:22:25:6d:12:58:52:f0:7d:8a:84:70:fc:dd:ae: 01:f6:db:db:e8:a9:05:d6:99:5c:fe:8b:c0:c3:63: 90:98:0b:38:c2:be:84:ef:7c:08:89:f4:7c:b4:8b: 6c:56:ae:85:12:cd:ac:29:06:7d:95:fa:1a:eb:1a: 5c:93:83:5f:49:b8:67:c7:76:e4:e8:24:5f:e9:4b: 04:1e:9b:de:0b:b4:40:95:39:53:ce:a3:1b:9d:99: b8:2d:52:a6:7c:6f:95:e7:47:f1:fc:fe:aa:d8:0d: ad:4c:3c:44:b7:cf:d1:4d:a7:96:ea:01:1f:57:f2: 8c:5f:70:63:f7:72:d7:78:9c:b2:ca:cc:28:61:27: 7f:8b:ef:bf:52:5c:e9:cc:4b:1b:0e:92:c5:ea:c5: 8a:af:4d:e4:3f:ed:6e:9c:69:6c:b4:ec:f1:0f:43: 50:4d:7d:10:ac:4f:55:22:c7:c6:d6:0e:35:23:62: 0f:46:bf:e1:0c:7a:bc:8b:c7:57:93:86:21:4c:bc: 00:72:b2:5a:44:a5:c9:54:9d:c7:eb:85:7a:84:9e: 75:9a:05:25:f8:f6:08:f0:a9:8d:3e:e0:97:64:cf: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:26:C2:F8:F1:C6:F4:60:EA:5B:F5:9C:E9:DF:1C:85:DC:C0:34:0C X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:47:c2:6b:97:4c:9f:1a:87:c5:c8:ef:46:28:8c:16:f7:29: f8:9c:26:37:fd:70:72:ec:18:69:56:35:b0:a4:68:f9:26:0e: 02:9f:b1:01:e1:2f:da:cb:b0:e3:40:62:0e:8b:be:4d:72:d9: 2b:bf:72:e0:42:59:15:92:80:78:61:0d:77:20:79:c3:46:d0: fe:c8:d3:dd:77:ad:83:ea:9e:3e:86:97:c7:92:16:c8:77:a9: d5:f0:4e:13:eb:88:36:70:91:1b:1a:8a:14:6b:59:e4:a3:64: 55:d1:a2:fb:f2:80:eb:50:06:06:af:75:69:78:a2:6f:5b:f6: d5:34:4d:b2:50:3a:1a:ab:07:0e:19:49:b5:90:d8:07:41:b5: c8:f6:e0:8c:74:36:e5:10:47:df:aa:63:0c:78:bf:dd:aa:e7: d8:3a:59:aa:e4:93:b8:40:fd:54:ac:13:29:3a:6f:45:c2:cf: d5:4d:25:df:7a:46:26:59:14:ca:0d:27:b9:2b:60:b1:75:6e: bc:30:91:a6:cc:7a:07:c7:f2:a7:60:cb:5c:e8:30:b8:d4:42: 92:e5:72:df:b5:66:ae:ac:c8:3f:18:8b:c8:bd:f1:3e:a7:ba: 05:b0:1b:57:9d:40:2a:5b:be:24:fb:c9:46:1e:f6:c1:54:76: df:39:3c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwNDI4MTk1OTMxWhcNMjUwNTA1MTk1OTMxWjAYMRYwFAYD VQQDEw02ODBmZGUyMy0xYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGQr4QD3sQzPkEPHXI1oJZFtA8A7MEqtf5KmrO0UIiVtElhS8H2KhHD83a4B 9tvb6KkF1plc/ovAw2OQmAs4wr6E73wIifR8tItsVq6FEs2sKQZ9lfoa6xpck4Nf Sbhnx3bk6CRf6UsEHpveC7RAlTlTzqMbnZm4LVKmfG+V50fx/P6q2A2tTDxEt8/R TaeW6gEfV/KMX3Bj93LXeJyyyswoYSd/i++/UlzpzEsbDpLF6sWKr03kP+1unGls tOzxD0NQTX0QrE9VIsfG1g41I2IPRr/hDHq8i8dXk4YhTLwAcrJaRKXJVJ3H64V6 hJ51mgUl+PYI8KmNPuCXZM9PsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMmwvjx xvRg6lv1nOnfHIXcwDQMMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARR8Jrl0yfGofFyO9GKIwW9yn4nCY3/XBy7BhpVjWwpGj5Jg4Cn7EB 4S/ay7DjQGIOi75Nctkrv3LgQlkVkoB4YQ13IHnDRtD+yNPdd62D6p4+hpfHkhbI d6nV8E4T64g2cJEbGooUa1nko2RV0aL78oDrUAYGr3VpeKJvW/bVNE2yUDoaqwcO GUm1kNgHQbXI9uCMdDblEEffqmMMeL/dqufYOlmq5JO4QP1UrBMpOm9Fws/VTSXf ekYmWRTKDSe5K2CxdW68MJGmzHoHx/KnYMtc6DC41EKS5XLftWaurMg/GIvIvfE+ p7oFsBtXnUAqW74k+8lGHvbBVHbfOTx6 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:11 2025 by rpki-client on console.sobornost.net