$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: s4x7fjCagJuab1oTEhldQYO7fmkThp/Hw3Zp7YlOjP0= Subject key identifier: 3E:D0:7B:5F:90:DC:12:3A:B3:35:CE:28:64:D1:9C:91:A5:B1:2A:A9 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 0702 Signing time: Sat 26 Apr 2025 21:39:39 +0000 Manifest this update: Sat 26 Apr 2025 21:39:38 +0000 Manifest next update: Sat 03 May 2025 21:39:38 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: 6qVE0xOT9vcuzj3qDXWfUfgWOtnIUDcSekS6JNC/15E=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: H0CS/wDvj/j+OGq6CMvz4MaVZLlE1z8NE8iE80Ojvas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Apr 26 21:39:38 2025 GMT Not After : May 3 21:39:38 2025 GMT Subject: CN=680d529a-49dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:48:8f:9d:63:42:93:aa:00:2a:c7:c7:4f: 77:cc:b2:d3:c6:77:54:d8:e2:d8:1d:6c:96:81:3b: 30:a3:ad:4e:1a:aa:e4:dc:df:be:8f:c3:f0:02:af: 34:8e:a8:dd:74:67:e8:6c:ca:c0:59:06:8d:63:5d: f9:a7:8f:37:03:ea:2c:e7:a9:d0:22:79:9f:04:e2: 8e:17:b2:a9:7b:18:5e:38:a3:36:66:bd:c7:ec:af: 5b:4a:0d:c2:8d:ff:37:70:14:ae:f8:ad:af:ad:0f: df:eb:a3:4a:eb:ec:94:29:ce:26:11:17:6c:1f:2f: 1f:81:69:f9:8c:41:5a:a3:dc:e5:bb:66:b0:00:64: 58:5e:3d:c3:6b:49:9e:6e:38:7f:80:a9:d6:bf:04: 06:63:fa:0e:f2:b4:fe:a6:ee:ec:26:58:96:8d:b4: a6:45:b6:0d:72:a4:40:70:7f:8a:3d:d0:03:40:09: a7:de:ec:3a:1a:c2:7e:80:6b:62:fb:4a:0e:0b:39: 5c:34:51:bb:ed:52:49:41:65:f2:51:19:f2:18:fc: 2a:08:26:42:12:5b:85:c2:fd:ea:e1:fc:84:a2:c5: d5:57:77:ba:d0:93:e8:39:3f:54:94:37:96:17:cd: f3:d1:be:b9:b7:61:f7:f5:c2:47:6a:c4:b3:28:44: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D0:7B:5F:90:DC:12:3A:B3:35:CE:28:64:D1:9C:91:A5:B1:2A:A9 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c0:67:31:54:d0:5c:55:80:be:83:71:d6:75:44:43:4f:66: 48:94:66:9a:3d:a4:23:f8:12:d4:94:73:55:11:c7:5f:41:f8: b3:ed:0f:98:68:e1:34:35:da:84:df:f9:12:3e:4e:7b:c8:50: 6c:2e:dd:90:4f:0a:3a:a6:b5:00:ba:f9:c2:a3:38:6b:d1:5c: 00:31:0f:48:00:34:18:07:2f:b2:79:26:74:fc:73:04:41:83: 8b:bc:88:11:94:00:59:1c:f2:38:a1:1a:56:c8:9b:84:23:e0: 46:b9:4c:52:09:c1:43:46:94:f5:ab:e0:23:9d:0f:53:28:1a: 1a:35:a8:9a:5f:e7:60:9f:e8:f2:e0:0c:f2:d0:d8:c7:db:af: 08:9b:ad:9e:61:5a:98:67:bf:59:39:82:77:2e:89:0e:50:5d: 0d:08:5a:e5:41:36:8c:79:b2:af:ad:42:16:74:e9:09:91:16: b3:cd:d0:01:f7:cb:48:a0:8e:b9:2c:ee:57:7b:9e:6a:3e:07: 38:12:53:e2:39:30:8b:09:12:c0:8f:56:a2:4a:07:01:2a:5f: 97:89:b6:ee:e6:e3:b4:d3:d9:a9:62:58:36:1a:39:dc:c8:35: 08:ee:96:f9:7c:d9:f3:07:9c:b5:ef:22:10:6b:63:ec:5d:fc: 49:83:cf:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUwNDI2MjEzOTM4WhcNMjUwNTAzMjEzOTM4WjAYMRYwFAYD VQQDEw02ODBkNTI5YS00OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5BIj51jQpOqACrHx093zLLTxndU2OLYHWyWgTswo61OGqrk3N++j8PwAq80 jqjddGfobMrAWQaNY135p483A+os56nQInmfBOKOF7KpexheOKM2Zr3H7K9bSg3C jf83cBSu+K2vrQ/f66NK6+yUKc4mERdsHy8fgWn5jEFao9zlu2awAGRYXj3Da0me bjh/gKnWvwQGY/oO8rT+pu7sJliWjbSmRbYNcqRAcH+KPdADQAmn3uw6GsJ+gGti +0oOCzlcNFG77VJJQWXyURnyGPwqCCZCEluFwv3q4fyEosXVV3e60JPoOT9UlDeW F83z0b65t2H39cJHasSzKEQfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7Qe1+Q 3BI6szXOKGTRnJGlsSqpMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLwGcxVNBcVYC+g3HWdURDT2ZIlGaaPaQj+BLUlHNVEcdfQfiz7Q+Y aOE0NdqE3/kSPk57yFBsLt2QTwo6prUAuvnCozhr0VwAMQ9IADQYBy+yeSZ0/HME QYOLvIgRlABZHPI4oRpWyJuEI+BGuUxSCcFDRpT1q+AjnQ9TKBoaNaiaX+dgn+jy 4Azy0NjH268Im62eYVqYZ79ZOYJ3LokOUF0NCFrlQTaMebKvrUIWdOkJkRazzdAB 98tIoI65LO5Xe55qPgc4ElPiOTCLCRLAj1aiSgcBKl+Xibbu5uO009mpYlg2Gjnc yDUI7pb5fNnzB5y17yIQa2PsXfxJg887 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:58 2025 by rpki-client on console.sobornost.net