$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json) Hash identifier: ed7ogPTDW6hoH9x6dmz5P6cBDHfsgx8dsKEpMOmgp40= Subject key identifier: BE:50:EB:2F:E2:19:0F:FF:ED:47:41:9A:84:C5:08:46:98:F7:E6:EF Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft Manifest number: 0121 Signing time: Mon 28 Apr 2025 19:11:52 +0000 Manifest this update: Mon 28 Apr 2025 19:11:52 +0000 Manifest next update: Mon 05 May 2025 19:11:52 +0000 Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: yO7b8Zkj2UOoD2kzkFg3kSQYKa1/K6D5k3ZcpUpJh6A=) 2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: wX9s/s7jxKKJJyFHtP8kJqChB04GKqVy3xgEjOBVe9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Validity Not Before: Apr 28 19:11:52 2025 GMT Not After : May 5 19:11:52 2025 GMT Subject: CN=680fd2f8-6aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:f4:0a:60:23:5f:aa:3e:f7:0e:09:88:3d: ed:83:e9:6e:5f:79:3b:41:64:f8:46:18:b0:db:aa: 8a:9d:ae:a9:99:f1:16:c5:08:00:88:d1:52:c6:39: 3d:e5:4a:e2:bb:b8:71:de:78:24:61:35:b0:3b:ec: 91:f2:ba:be:3d:a2:0f:1a:38:ed:f4:b7:ff:4c:82: 29:8f:42:97:fc:1a:b6:92:a1:d4:b9:db:24:44:d5: d0:a5:8b:59:92:29:b0:a8:86:1b:ee:36:96:09:fe: 03:72:59:0e:6a:5e:5e:31:79:f9:e2:82:29:65:fb: f0:0b:25:48:b7:b5:fd:58:ad:dd:4d:08:2b:a7:45: 0e:f5:2d:8e:05:17:c4:2c:dd:dd:46:14:ab:86:9c: 45:a7:92:83:30:a9:76:3c:3b:7d:de:5d:6f:77:d2: 7c:0a:81:fb:2b:f9:bb:49:2a:f1:b9:92:f9:ab:de: 62:86:d7:f8:5b:6e:ee:b9:98:d2:11:8f:14:f0:9b: 1b:0f:b4:c9:84:a2:fe:93:8d:01:b9:16:e6:0f:ce: 3f:3a:d3:a8:61:ed:4c:ab:56:1a:f1:df:38:24:e5: ae:8d:56:40:cb:4b:ac:c8:02:5c:75:24:28:38:e8: c7:6f:02:8c:19:a8:a5:b7:a9:e6:fd:6c:35:57:63: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:50:EB:2F:E2:19:0F:FF:ED:47:41:9A:84:C5:08:46:98:F7:E6:EF X509v3 Authority Key Identifier: keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e6:e6:ee:89:f5:47:ed:41:b1:0b:83:69:de:eb:90:25:0c: 69:d8:d6:cc:3a:06:35:ba:b6:ba:2f:5a:56:1a:b1:59:5f:f3: a1:cc:ae:54:35:bf:e1:b2:7d:a4:50:97:c8:01:39:a0:d2:77: 08:a6:ba:c3:f4:6f:a2:3e:c6:d8:58:31:5b:66:31:3b:b4:54: 36:0e:21:04:43:a3:59:b6:4b:14:dd:55:30:1b:53:3a:9d:7a: ff:5c:a3:98:66:75:17:e9:88:8c:ec:5c:61:d4:22:d2:46:22: 5a:5b:0a:bb:1e:bb:b6:b1:c4:2e:1d:be:0b:06:0d:b1:d3:4f: 3b:22:91:26:c7:be:a8:23:36:aa:31:c4:0f:05:61:6b:91:63: 56:57:5a:cc:06:81:a3:f3:22:46:25:d4:85:00:94:af:54:f6: 43:75:36:0a:dc:a8:7c:c1:7b:dc:72:3e:7a:63:16:82:61:98: 64:8f:36:1c:3b:bf:32:e8:bf:4f:b8:0f:29:fd:f6:bc:8c:9d: 9f:16:5f:f0:2b:af:34:e3:bf:a6:8d:c7:51:b1:d9:48:40:cf: e4:3b:d7:1d:c5:3d:b2:4c:fb:a5:0d:1e:1d:2e:c8:9b:d8:bb: e8:fb:cd:52:71:5d:f0:73:fe:55:d6:d5:15:bf:07:c3:fa:d4: 46:f7:5e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKDk0M0FEOUJDNjE3N0FCOEMyRjhFODEzMUMxNEE1NDY1 RUM0Mjk1NEYwHhcNMjUwNDI4MTkxMTUyWhcNMjUwNTA1MTkxMTUyWjAYMRYwFAYD VQQDEw02ODBmZDJmOC02YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX/0CmAjX6o+9w4JiD3tg+luX3k7QWT4Rhiw26qKna6pmfEWxQgAiNFSxjk9 5Uriu7hx3ngkYTWwO+yR8rq+PaIPGjjt9Lf/TIIpj0KX/Bq2kqHUudskRNXQpYtZ kimwqIYb7jaWCf4DclkOal5eMXn54oIpZfvwCyVIt7X9WK3dTQgrp0UO9S2OBRfE LN3dRhSrhpxFp5KDMKl2PDt93l1vd9J8CoH7K/m7SSrxuZL5q95ihtf4W27uuZjS EY8U8JsbD7TJhKL+k40BuRbmD84/OtOoYe1Mq1Ya8d84JOWujVZAy0usyAJcdSQo OOjHbwKMGailt6nm/Ww1V2M5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5Q6y/i GQ//7UdBmoTFCEaY9+bvMB8GA1UdIwQYMBaAFJQ62bxhd6uML46BMcFKVGXsQpVP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC8zNjE4QUI2RTcy QTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0d3Zqb0V4d1VwVVpleENs VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0 d3Zqb0V4d1VwVVpleENsVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc5ubuifVH7UGxC4Np3uuQJQxp2NbMOgY1ura6L1pWGrFZX/OhzK5U Nb/hsn2kUJfIATmg0ncIprrD9G+iPsbYWDFbZjE7tFQ2DiEEQ6NZtksU3VUwG1M6 nXr/XKOYZnUX6YiM7Fxh1CLSRiJaWwq7Hru2scQuHb4LBg2x0087IpEmx76oIzaq McQPBWFrkWNWV1rMBoGj8yJGJdSFAJSvVPZDdTYK3Kh8wXvccj56YxaCYZhkjzYc O78y6L9PuA8p/fa8jJ2fFl/wK68047+mjcdRsdlIQM/kO9cdxT2yTPulDR4dLsib 2Lvo+81ScV3wc/5V1tUVvwfD+tRG916b -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:13 2025 by rpki-client on console.sobornost.net