$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: gEoO+udOJFFPUt0YA6luEIQMJF6b6ldKKy7XpCxUG8g= Subject key identifier: EB:9C:C2:DC:9C:59:94:5C:63:8F:32:94:7C:DA:C0:DA:78:99:44:BA Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 010E Signing time: Sun 27 Apr 2025 04:39:24 +0000 Manifest this update: Sun 27 Apr 2025 04:39:23 +0000 Manifest next update: Sun 04 May 2025 04:39:23 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: N/WibNbwRTizjd4ZbwKYFZVSsoH99v7t+k4q6yFx7B0=) 2: 65B83800104811F0B4EB540DC4F9AE02.roa (hash: gPeEj7TbdMJkFsvZpQ/te6RCgN+nHiYNDmZuf4HaJ1I=) 3: A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa (hash: F8tsV1hsbNpvD5dlCFkpq9+9IzGp4Qja71ybiyu42xE=) 4: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 5: 6C8DB570FE1911EEBC22905DC4F9AE02.roa (hash: 0/PgZhJMPtuUV72W5EZ3Gk832EONO2sWkya6qd/hdw4=) 6: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 7: 3D61340AEC3111EF94115E39C4F9AE02.roa (hash: S2pENibd54UpYO4v1LoAYPxHu0n6YcOTc24e+gioHfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Apr 27 04:39:23 2025 GMT Not After : May 4 04:39:23 2025 GMT Subject: CN=680db4fc-7cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:95:8d:1f:2d:64:ba:37:99:eb:d1:36:07: 2c:1b:b7:a0:ed:25:04:9c:be:3c:98:57:19:c5:b6: d1:d0:ae:d2:37:4c:fa:5b:88:12:2b:8a:bd:7d:b3: 25:58:19:c7:c1:bc:c9:56:a9:da:e2:88:15:86:7f: 2b:4b:92:6b:09:84:de:62:f1:5e:d6:23:a2:31:5d: fb:6d:87:0a:bd:76:d0:f5:b4:06:1b:bd:6e:b4:fd: f2:2f:2d:0e:37:94:9d:e6:6d:a4:c8:cf:56:8a:e8: 25:78:e9:4d:0b:f1:c7:68:0c:8f:94:ed:d7:18:24: 4e:00:39:52:52:11:7f:c9:7c:e1:32:03:bc:86:65: e6:b8:a6:21:ef:88:fd:39:a1:d9:36:6a:83:4a:61: 40:18:04:1d:53:ae:6b:a6:65:4b:4f:5f:54:b9:03: f7:76:59:bb:92:e7:49:2d:e5:31:aa:88:48:4e:db: b0:5e:df:43:67:dc:2b:1e:14:42:14:77:ac:fc:5b: b9:e8:d7:43:b0:2d:e1:9f:36:e3:1f:d4:aa:94:3a: 9e:b1:e2:c0:bc:3f:7f:29:43:44:e2:5a:a5:18:13: bd:1b:43:c7:d0:41:47:e5:b5:06:ae:2c:38:e9:0c: e5:60:a1:96:cb:bb:44:00:bc:15:2b:c4:28:b0:b0: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9C:C2:DC:9C:59:94:5C:63:8F:32:94:7C:DA:C0:DA:78:99:44:BA X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d3:bb:23:a1:a8:26:4f:ef:ab:13:e8:f6:fc:b0:7d:46:2e: c8:4a:ee:5b:64:df:5c:9a:58:38:57:fb:22:1f:63:81:46:39: 4e:bd:3a:56:a6:18:59:74:f4:f8:47:2a:03:1e:8a:0d:73:56: 40:70:60:26:7a:89:f4:d3:ba:54:cc:d7:94:f0:82:8f:28:9e: c8:75:2d:63:d6:d4:ff:ee:ce:13:1a:c3:64:ff:a2:23:68:f2: be:b3:89:ba:d0:df:dc:d7:80:b4:da:02:32:66:21:11:0c:82: 14:ee:da:51:ae:aa:75:25:7e:99:b7:13:b2:dc:76:9e:28:9c: 15:e8:26:f4:8b:0c:04:5b:79:02:1b:a4:50:92:b1:ed:6b:a3: 6b:12:df:f5:ce:51:fe:77:e6:8b:2b:2d:27:3b:a9:9e:ae:eb: 42:8e:95:ae:65:d9:b0:b7:68:e8:dc:c8:41:9d:fa:97:43:9a: 3d:0e:df:bb:35:8c:4d:27:a7:85:88:49:2d:8d:00:02:11:7e: fc:58:e0:0d:50:a1:1c:f8:04:fa:1a:6e:2e:3d:9d:a4:37:33: 05:c1:fa:3e:de:cf:a4:38:31:48:28:32:5d:68:a9:df:db:f7: 23:9a:9f:5d:21:42:d9:9a:5b:72:3f:12:7f:b5:a8:44:4c:cb: b7:c4:65:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNDI3MDQzOTIzWhcNMjUwNTA0MDQzOTIzWjAYMRYwFAYD VQQDEw02ODBkYjRmYy03Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aiVjR8tZLo3mevRNgcsG7eg7SUEnL48mFcZxbbR0K7SN0z6W4gSK4q9fbMl WBnHwbzJVqna4ogVhn8rS5JrCYTeYvFe1iOiMV37bYcKvXbQ9bQGG71utP3yLy0O N5Sd5m2kyM9WiugleOlNC/HHaAyPlO3XGCROADlSUhF/yXzhMgO8hmXmuKYh74j9 OaHZNmqDSmFAGAQdU65rpmVLT19UuQP3dlm7kudJLeUxqohITtuwXt9DZ9wrHhRC FHes/Fu56NdDsC3hnzbjH9SqlDqeseLAvD9/KUNE4lqlGBO9G0PH0EFH5bUGriw4 6QzlYKGWy7tEALwVK8QosLDF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOucwtyc WZRcY48ylHzawNp4mUS6MB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb07sjoagmT++rE+j2/LB9Ri7ISu5bZN9cmlg4V/siH2OBRjlOvTpW phhZdPT4RyoDHooNc1ZAcGAmeon007pUzNeU8IKPKJ7IdS1j1tT/7s4TGsNk/6Ij aPK+s4m60N/c14C02gIyZiERDIIU7tpRrqp1JX6ZtxOy3HaeKJwV6Cb0iwwEW3kC G6RQkrHta6NrEt/1zlH+d+aLKy0nO6merutCjpWuZdmwt2jo3MhBnfqXQ5o9Dt+7 NYxNJ6eFiEktjQACEX78WOANUKEc+AT6Gm4uPZ2kNzMFwfo+3s+kODFIKDJdaKnf 2/cjmp9dIULZmltyPxJ/tahETMu3xGXA -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net