$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: lNIuY0Tl+zm4pq1uVvxme/tHNZ3iWVWfMX3w3yVo7rw= Subject key identifier: 5A:27:B8:8A:B2:43:5A:16:1A:CA:4A:F9:E9:3F:03:EA:9C:A8:66:E9 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 077D Signing time: Thu 24 Apr 2025 21:13:32 +0000 Manifest this update: Thu 24 Apr 2025 21:13:31 +0000 Manifest next update: Thu 01 May 2025 21:13:31 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: Saq2rmqZUbdOUe5fRxBMiCbsm10z92vS9w9OlxtVsgU=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Apr 24 21:13:31 2025 GMT Not After : May 1 21:13:31 2025 GMT Subject: CN=680aa97c-8962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:9b:87:98:7a:dd:89:ff:7a:dd:47:f5:03: 0f:87:fb:68:15:18:e6:57:02:f3:51:ce:ec:94:f4: 25:fc:05:e9:0d:2f:ae:2b:66:95:d2:a2:b2:86:4b: ba:ed:80:c1:e8:7b:2d:05:52:21:ac:d9:4e:15:5d: 7a:9f:91:0e:7e:1d:a6:01:54:5a:34:79:e0:bf:13: 07:82:3e:06:ae:ed:03:dc:3c:9a:7c:e6:73:f6:d3: 65:3f:a6:da:8b:f7:6a:00:0d:4e:89:0c:fe:f2:2a: 10:d2:dc:0c:5b:1c:30:1b:f8:48:ff:8a:7a:21:ef: 95:9e:d8:64:e4:32:73:0c:fe:fa:77:ff:f0:7a:fe: b2:ab:ce:2a:4d:6a:4f:36:41:5d:d0:00:12:2b:b3: fb:2d:39:a2:58:fc:b0:48:0f:7b:c3:de:78:15:b5: 7a:e8:16:81:85:c9:02:07:80:f0:1c:a5:f1:96:36: 7f:db:32:94:a3:03:35:e9:40:8a:41:81:12:bd:ce: 73:8f:01:9f:bd:a1:e8:ad:fe:ca:19:e0:72:e1:9e: 91:f9:55:21:7d:4e:4b:39:45:65:2c:b2:ba:c7:d9: 3a:91:49:d3:28:1e:49:65:0c:02:26:11:83:64:e2: f3:0e:1f:07:f1:e6:d3:0c:4b:8e:b5:92:76:41:b1: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:B8:8A:B2:43:5A:16:1A:CA:4A:F9:E9:3F:03:EA:9C:A8:66:E9 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:17:63:83:94:a3:57:6e:11:26:18:09:4e:9a:a8:20:a2:16: 5a:0e:75:09:ad:1c:1b:e6:47:a9:d7:55:0d:29:58:f9:15:81: 24:e6:18:a5:37:c0:b9:2c:ea:09:2a:47:d4:5c:e7:99:4c:fd: 7c:ae:fd:06:44:b7:a8:1f:c2:fb:47:9c:ed:3d:8e:f2:fa:c3: bf:6b:d2:98:98:74:ae:30:67:c4:b9:cc:cd:55:48:8b:f0:34: 07:b1:8d:84:5a:b4:08:c3:bd:55:0a:53:f7:30:2f:a4:54:37: a4:9c:e7:a6:1a:eb:28:16:7f:05:47:76:bc:85:95:61:2b:bc: 09:4f:fb:77:9f:36:b8:ce:56:7b:5f:0f:27:ab:d5:e9:36:02: 24:ea:5b:16:f0:35:ae:2d:76:3b:cc:67:f0:b6:2a:65:75:fa: 5b:2b:40:d3:fc:dd:ed:1b:ed:5d:e9:18:c3:dc:59:d0:8d:40: 6d:c8:6f:48:65:67:6e:9c:69:5f:a1:37:90:cb:7e:62:38:a4: d6:cd:b2:4d:c3:38:aa:db:74:5d:56:9c:93:40:0f:4e:df:9f: da:6d:24:8e:b9:83:4b:25:4c:74:d2:33:df:f0:8c:4d:ba:88: f9:97:f4:e5:b4:fb:f3:66:b3:05:e3:aa:7f:37:b6:8c:a1:6d: bc:f3:5b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwNDI0MjExMzMxWhcNMjUwNTAxMjExMzMxWjAYMRYwFAYD VQQDEw02ODBhYTk3Yy04OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKKbh5h63Yn/et1H9QMPh/toFRjmVwLzUc7slPQl/AXpDS+uK2aV0qKyhku6 7YDB6HstBVIhrNlOFV16n5EOfh2mAVRaNHngvxMHgj4Gru0D3DyafOZz9tNlP6ba i/dqAA1OiQz+8ioQ0twMWxwwG/hI/4p6Ie+Vnthk5DJzDP76d//wev6yq84qTWpP NkFd0AASK7P7LTmiWPywSA97w954FbV66BaBhckCB4DwHKXxljZ/2zKUowM16UCK QYESvc5zjwGfvaHorf7KGeBy4Z6R+VUhfU5LOUVlLLK6x9k6kUnTKB5JZQwCJhGD ZOLzDh8H8ebTDEuOtZJ2QbGyTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFonuIqy Q1oWGspK+ek/A+qcqGbpMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGF2ODlKNXbhEmGAlOmqggohZaDnUJrRwb5kep11UNKVj5FYEk5hil N8C5LOoJKkfUXOeZTP18rv0GRLeoH8L7R5ztPY7y+sO/a9KYmHSuMGfEuczNVUiL 8DQHsY2EWrQIw71VClP3MC+kVDeknOemGusoFn8FR3a8hZVhK7wJT/t3nza4zlZ7 Xw8nq9XpNgIk6lsW8DWuLXY7zGfwtipldfpbK0DT/N3tG+1d6RjD3FnQjUBtyG9I ZWdunGlfoTeQy35iOKTWzbJNwziq23RdVpyTQA9O35/abSSOuYNLJUx00jPf8IxN uoj5l/TltPvzZrMF46p/N7aMoW2881u9 -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:22 2025 by rpki-client on console.sobornost.net