$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: gWRvs+9HluXyrF3lftynBMgRACNET+nXhunt4HNnpHk= Subject key identifier: D9:CA:DB:0C:CD:81:92:0C:8D:B0:DF:2F:C6:1D:39:3B:86:3C:18:19 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 07CF Signing time: Sat 26 Apr 2025 20:46:17 +0000 Manifest this update: Sat 26 Apr 2025 20:46:16 +0000 Manifest next update: Sat 03 May 2025 20:46:16 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: I0RhfxGKaPdv1qyx1shc/ld+tH5t5CWDdR2b7wOYTCU=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 6+tk9n+mwKmveOFrTOSyNOKqHKQyrXgQ60Gavs+tji8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Apr 26 20:46:16 2025 GMT Not After : May 3 20:46:16 2025 GMT Subject: CN=680d4619-464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:6d:01:5c:ba:c3:cc:19:b7:66:66:26:d7: ee:78:85:a8:8d:c1:13:d3:38:c1:9f:d0:90:c3:4d: b2:7f:5a:23:7f:a6:3c:0e:73:0a:29:e4:62:97:87: 17:7e:de:d9:66:b7:33:9c:14:d5:5b:2d:5d:9f:64: a4:f6:51:ce:62:1b:ea:98:91:5a:17:ae:83:a3:c6: 0f:0f:ac:bd:46:45:37:ba:81:7c:3d:29:50:37:29: 6d:bd:0e:1c:78:a5:53:ed:b4:a4:2d:fb:fa:22:79: ab:af:87:be:55:eb:78:c5:ec:20:54:97:bd:50:00: ce:96:f1:f3:c6:f7:93:f1:1b:f7:ea:d5:72:27:55: 8b:ab:fa:4d:d3:a3:06:4a:54:24:0e:41:86:1a:99: 50:fa:2e:5c:f4:41:fb:f8:e8:b3:e7:8f:6c:01:5c: b7:4f:ee:2f:fa:19:26:12:ab:e9:8d:5e:5f:c9:77: f1:01:a0:fe:db:f6:22:64:78:43:19:74:56:96:90: b0:cc:ae:0a:47:a5:b5:bf:7f:ff:e8:7b:e0:ca:e3: cd:55:8f:8d:f6:6a:89:2c:f3:2d:46:32:2f:c2:a9: 16:66:8e:85:46:d3:b1:8a:be:e1:aa:0f:e8:61:48: d7:40:47:02:fb:e9:b9:1f:dd:41:97:0e:b8:a8:73: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:DB:0C:CD:81:92:0C:8D:B0:DF:2F:C6:1D:39:3B:86:3C:18:19 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:05:9d:21:98:53:dc:62:21:5b:37:5c:53:62:45:86:b9:e4: 68:cf:38:be:d8:e3:1f:1e:a7:8d:f9:57:78:ef:32:97:55:cd: 44:d2:25:d3:29:0d:18:6c:70:ef:fc:e4:ba:44:73:88:29:7b: d6:00:14:97:f2:01:9f:df:ef:63:6d:66:d5:09:48:3f:25:a7: 49:7a:ef:c7:e4:e8:95:cc:bc:b7:ec:79:f7:99:ea:3e:48:98: 88:72:5a:6e:e4:71:e9:8b:8c:a7:f0:df:5d:0d:95:71:8a:94: db:b3:28:c0:ee:bf:89:9f:ce:4b:cb:c3:3e:a5:da:1e:04:40: 0f:21:f2:f7:30:ba:ba:3e:fa:d8:2e:ef:e8:f2:30:98:05:1f: ab:b1:2d:8e:36:9e:48:68:75:0b:2b:12:ae:f6:4b:bb:cc:af: dd:bf:01:f8:af:87:a8:9c:ac:98:29:e7:d5:3c:e9:b0:23:59: b4:19:ef:b4:32:98:0c:a6:dc:0d:58:12:66:78:10:ac:f0:c6: af:63:a8:51:a7:a0:fc:ae:40:e0:0a:68:4e:0d:f0:ce:f1:ef: 44:30:12:03:e8:da:86:67:1b:51:0b:9e:a9:49:08:d5:00:2d: b1:6a:e7:2b:a6:8e:e6:6e:9f:b1:3d:05:b1:cb:05:30:d6:7c: 26:7e:6f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwNDI2MjA0NjE2WhcNMjUwNTAzMjA0NjE2WjAYMRYwFAYD VQQDEw02ODBkNDYxOS00NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IhtAVy6w8wZt2ZmJtfueIWojcET0zjBn9CQw02yf1ojf6Y8DnMKKeRil4cX ft7ZZrcznBTVWy1dn2Sk9lHOYhvqmJFaF66Do8YPD6y9RkU3uoF8PSlQNyltvQ4c eKVT7bSkLfv6Inmrr4e+Vet4xewgVJe9UADOlvHzxveT8Rv36tVyJ1WLq/pN06MG SlQkDkGGGplQ+i5c9EH7+Oiz549sAVy3T+4v+hkmEqvpjV5fyXfxAaD+2/YiZHhD GXRWlpCwzK4KR6W1v3//6HvgyuPNVY+N9mqJLPMtRjIvwqkWZo6FRtOxir7hqg/o YUjXQEcC++m5H91Blw64qHMtpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnK2wzN gZIMjbDfL8YdOTuGPBgZMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0BZ0hmFPcYiFbN1xTYkWGueRozzi+2OMfHqeN+Vd47zKXVc1E0iXT KQ0YbHDv/OS6RHOIKXvWABSX8gGf3+9jbWbVCUg/JadJeu/H5OiVzLy37Hn3meo+ SJiIclpu5HHpi4yn8N9dDZVxipTbsyjA7r+Jn85Ly8M+pdoeBEAPIfL3MLq6PvrY Lu/o8jCYBR+rsS2ONp5IaHULKxKu9ku7zK/dvwH4r4eonKyYKefVPOmwI1m0Ge+0 MpgMptwNWBJmeBCs8MavY6hRp6D8rkDgCmhODfDO8e9EMBID6NqGZxtRC56pSQjV AC2xaucrpo7mbp+xPQWxywUw1nwmfm8b -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net