$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: knyzkPRyuWUdDQ3KB+azGpEgwluxlEiK70755Gsc3O4= Subject key identifier: D5:F6:57:33:82:F3:E9:BC:1C:3E:4F:C7:50:60:1F:7A:E3:93:75:1F Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 011D Signing time: Sun 27 Apr 2025 03:41:25 +0000 Manifest this update: Sun 27 Apr 2025 03:41:25 +0000 Manifest next update: Sun 04 May 2025 03:41:25 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: w5O7TuOlpWn+wtlSjO2rQLXIuZndCWTkEE8QYYbFjbU=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Apr 27 03:41:25 2025 GMT Not After : May 4 03:41:25 2025 GMT Subject: CN=680da765-532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:50:88:ea:86:e6:7d:13:32:29:14:5b:5b: 20:3a:1c:97:07:d2:7c:8d:4d:46:af:67:8d:30:07: 3e:a0:02:b6:09:75:bf:38:b0:69:19:91:04:fd:7e: 4a:3a:bd:9b:96:da:68:65:82:7f:39:ee:62:45:62: 40:4b:86:aa:90:07:76:f0:c8:11:73:dd:19:6b:bf: 57:9e:1f:d8:11:f5:4f:e9:33:15:d5:2e:a9:b9:17: 8e:82:65:b5:5f:88:38:25:43:5a:58:14:3c:a3:20: 61:b6:7e:73:c4:35:38:71:1e:5a:2d:00:31:03:6d: 52:8e:99:ae:b8:d6:a2:70:2a:90:7c:8e:8f:57:b7: aa:30:7b:62:62:59:5a:a2:28:75:57:18:33:eb:60: 2d:45:e8:2c:6a:88:8e:9e:0f:48:79:d0:66:1b:d2: 31:13:ff:1d:6a:1d:cb:43:01:91:e4:c4:88:c2:b2: f4:6b:98:44:74:c8:15:45:b5:41:74:04:78:ca:8b: 66:d3:73:87:09:0b:c6:80:b1:3e:5e:df:6c:3d:f5: 23:c2:cd:ff:ed:70:68:65:c2:55:ab:5c:36:d5:26: 88:00:85:3f:44:84:4a:79:e9:53:e5:b7:5f:58:cc: e0:12:3f:d0:98:ea:c9:28:a2:e0:2c:bf:53:20:68: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:57:33:82:F3:E9:BC:1C:3E:4F:C7:50:60:1F:7A:E3:93:75:1F X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:9e:87:67:26:69:e6:97:c3:34:f3:aa:94:d8:7e:46:20: 4d:d3:48:cd:fa:9d:d0:31:90:a7:ad:d8:51:be:41:38:4f:1d: a5:74:79:df:16:42:da:c3:1a:ee:d7:60:ba:09:2f:49:a2:e1: 68:76:54:37:1d:27:e8:27:65:2e:6e:18:f5:df:a1:3c:3e:51: 78:ec:6d:1e:15:bd:2e:3d:59:0f:4a:85:86:47:e2:04:25:ec: ff:22:48:07:15:2e:a8:1b:7f:68:3d:8a:7d:d4:d9:b6:06:b7: fb:13:57:14:d0:41:db:c2:94:a0:48:ce:38:c9:76:38:4d:e6: 01:fc:9c:80:3d:a9:30:0a:9f:b9:35:fd:26:b5:bb:fa:82:2d: 50:db:ae:52:93:d2:e8:68:8b:1f:98:e6:9d:a0:8f:ef:38:76: 12:c9:2b:4a:d9:c4:bb:5c:c7:82:a4:e9:a1:f6:f3:d0:42:73: 2c:a8:c0:0d:30:f9:90:fd:1f:24:76:51:41:97:ee:cb:c9:5b: df:b2:f7:26:69:17:53:2b:fe:3e:25:4a:5f:b0:52:87:2a:de: 96:23:dd:32:34:26:51:ac:59:da:8b:ed:c5:f3:00:d8:49:8b: f9:b0:69:2c:13:30:da:c2:2e:c8:16:e9:d2:96:08:b6:8c:04: fb:13:d1:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNDI3MDM0MTI1WhcNMjUwNTA0MDM0MTI1WjAYMRYwFAYD VQQDEw02ODBkYTc2NS01MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJlQiOqG5n0TMikUW1sgOhyXB9J8jU1Gr2eNMAc+oAK2CXW/OLBpGZEE/X5K Or2bltpoZYJ/Oe5iRWJAS4aqkAd28MgRc90Za79Xnh/YEfVP6TMV1S6puReOgmW1 X4g4JUNaWBQ8oyBhtn5zxDU4cR5aLQAxA21SjpmuuNaicCqQfI6PV7eqMHtiYlla oih1Vxgz62AtRegsaoiOng9IedBmG9IxE/8dah3LQwGR5MSIwrL0a5hEdMgVRbVB dAR4yotm03OHCQvGgLE+Xt9sPfUjws3/7XBoZcJVq1w21SaIAIU/RIRKeelT5bdf WMzgEj/QmOrJKKLgLL9TIGiljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX2VzOC 8+m8HD5Px1BgH3rjk3UfMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAD56HZyZp5pfDNPOqlNh+RiBN00jN+p3QMZCnrdhRvkE4Tx2ldHnf FkLawxru12C6CS9JouFodlQ3HSfoJ2Uubhj136E8PlF47G0eFb0uPVkPSoWGR+IE Jez/IkgHFS6oG39oPYp91Nm2Brf7E1cU0EHbwpSgSM44yXY4TeYB/JyAPakwCp+5 Nf0mtbv6gi1Q265Sk9LoaIsfmOadoI/vOHYSyStK2cS7XMeCpOmh9vPQQnMsqMAN MPmQ/R8kdlFBl+7LyVvfsvcmaRdTK/4+JUpfsFKHKt6WI90yNCZRrFnai+3F8wDY SYv5sGksEzDawi7IFunSlgi2jAT7E9FW -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net