$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft File: capYzfG2vXwm5hp1GKTQrSyfGhQ.mft (raw, json) Hash identifier: fnMITG+FNjaCbSxExgmDz6UqhGmKEzUBSDxh0ubriw4= Subject key identifier: 9A:6A:F3:EF:1B:87:54:25:54:64:04:82:05:EF:AA:18:54:E8:EC:34 Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft Manifest number: 0878 Signing time: Sat 26 Apr 2025 20:27:50 +0000 Manifest this update: Sat 26 Apr 2025 20:27:50 +0000 Manifest next update: Sat 03 May 2025 20:27:50 +0000 Files and hashes: 1: capYzfG2vXwm5hp1GKTQrSyfGhQ.crl (hash: q8DGeuq2IqfFO0/GSRM8vyghuAOUDcepYoX3v9fQ0RM=) 2: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (hash: ulEoG77MrSiwSYhpxeW0HQs0UzURtgxGQwYkMWVPA0Q=) 3: 8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (hash: fZLciG+K7KBAB8NViLLV71yANJqxZTohTScAC7z2iIU=) 4: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (hash: K/SJXrHKSaQpDMVLZJrukFZmfGOIIuOIUDxauUWHXXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Validity Not Before: Apr 26 20:27:50 2025 GMT Not After : May 3 20:27:50 2025 GMT Subject: CN=680d41c6-152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:7e:fd:d2:46:a7:9d:cd:3a:a7:58:e4:f1: 26:01:34:c7:c6:ce:5e:0d:18:f9:ef:17:23:64:61: cc:cb:ac:b4:8a:7a:f3:4e:b3:32:9a:3a:7a:5c:87: 93:95:94:9a:4a:84:ab:82:65:e4:2a:80:3e:7c:47: 23:b3:be:85:33:37:1b:11:30:3e:bc:74:21:0a:90: 5a:84:80:c1:54:b6:9c:69:88:70:5f:89:62:a5:df: 1e:0d:c5:cb:75:4f:5a:ea:69:72:6f:99:cb:0a:a7: 64:76:89:52:a3:4c:a1:4b:d4:a2:cb:6d:48:fa:3d: 68:97:68:ea:4f:54:91:cf:4c:3f:30:64:37:60:ba: f9:d1:5c:79:12:1e:f4:c0:48:30:b8:0f:f2:16:6b: 68:22:40:d7:87:ff:57:51:ad:fa:67:ca:86:be:36: a2:f1:09:9e:4a:62:a3:12:d7:9c:42:28:2a:42:a3: 66:1f:35:9e:de:00:ea:82:8c:c0:0f:e7:19:c6:7a: 01:72:0b:d0:52:47:6c:ba:5d:e4:4f:62:01:24:03: bf:da:ed:5d:d7:69:a7:d6:6a:98:14:8e:cf:2a:2b: f9:df:ad:56:e7:56:e2:b7:c5:08:b9:52:ca:6a:8b: 07:bf:64:99:a4:3f:02:c5:be:07:26:8b:f5:5c:bb: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6A:F3:EF:1B:87:54:25:54:64:04:82:05:EF:AA:18:54:E8:EC:34 X509v3 Authority Key Identifier: keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f8:9b:5e:78:48:28:51:e0:2b:5f:2a:f8:6f:ae:6e:1b:18: 11:27:57:66:1f:ae:3c:99:f2:0e:34:29:d0:a6:2a:dd:6c:49: bc:64:ae:6e:a4:e0:76:d1:ad:29:be:64:bd:5e:82:cb:50:e0: 10:ff:50:b0:52:52:dd:bd:09:de:d7:08:13:39:f8:c3:63:bb: 0a:e5:06:78:41:49:45:c5:e3:a8:64:d9:98:b4:b0:09:4f:ea: 08:93:51:b2:25:83:a5:2a:3b:a3:11:74:ee:49:5c:9e:c9:66: 9b:22:24:9d:e5:14:35:e6:e1:fa:9c:63:6f:46:7a:d9:e6:6b: e4:9c:95:f2:3a:31:5f:cf:64:17:91:cd:3b:1d:80:05:c4:cc: 50:f1:bd:34:ef:79:71:f1:e9:bf:9a:a9:8f:52:54:5f:10:8d: c7:eb:6d:d2:4e:42:c8:8b:89:73:f4:b4:fe:44:fa:92:6e:a4: 2f:b9:d3:3a:73:99:fb:a0:18:95:0c:cb:9f:78:d5:78:8e:76: 80:45:f5:2b:e7:4c:c8:2a:e8:b3:30:cd:ff:10:ca:f6:54:e9: 8b:0f:f0:6e:65:75:c6:f1:d0:5e:5b:44:a2:52:8f:74:62:15: b2:fe:05:9e:01:e4:2e:9e:04:74:74:fe:dc:c2:b1:bd:b0:9b: 69:3e:86:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBMEIxMTAvBgNVBAUTKDcxQUE1OENERjFCNkJEN0MyNkU2MUE3NTE4QTREMEFE MkM5RjFBMTQwHhcNMjUwNDI2MjAyNzUwWhcNMjUwNTAzMjAyNzUwWjAYMRYwFAYD VQQDEw02ODBkNDFjNi0xNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpd+/dJGp53NOqdY5PEmATTHxs5eDRj57xcjZGHMy6y0inrzTrMymjp6XIeT lZSaSoSrgmXkKoA+fEcjs76FMzcbETA+vHQhCpBahIDBVLacaYhwX4lipd8eDcXL dU9a6mlyb5nLCqdkdolSo0yhS9Siy21I+j1ol2jqT1SRz0w/MGQ3YLr50Vx5Eh70 wEgwuA/yFmtoIkDXh/9XUa36Z8qGvjai8QmeSmKjEtecQigqQqNmHzWe3gDqgozA D+cZxnoBcgvQUkdsul3kT2IBJAO/2u1d12mn1mqYFI7PKiv5361W51bit8UIuVLK aosHv2SZpD8Cxb4HJov1XLsSlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpq8+8b h1QlVGQEggXvqhhU6Ow0MB8GA1UdIwQYMBaAFHGqWM3xtr18JuYadRik0K0snxoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUEwQi8xNTU4NkY0MkM0 RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZYd201aHAxR0tUUXJTeWZH aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhcFl6Zkcydlh3bTVocDFHS1RRclN5ZkdoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUEwQi8xNTU4NkY0MkM0RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZY d201aHAxR0tUUXJTeWZHaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa+JteeEgoUeArXyr4b65uGxgRJ1dmH648mfIONCnQpirdbEm8ZK5u pOB20a0pvmS9XoLLUOAQ/1CwUlLdvQne1wgTOfjDY7sK5QZ4QUlFxeOoZNmYtLAJ T+oIk1GyJYOlKjujEXTuSVyeyWabIiSd5RQ15uH6nGNvRnrZ5mvknJXyOjFfz2QX kc07HYAFxMxQ8b0073lx8em/mqmPUlRfEI3H623STkLIi4lz9LT+RPqSbqQvudM6 c5n7oBiVDMufeNV4jnaARfUr50zIKuizMM3/EMr2VOmLD/BuZXXG8dBeW0SiUo90 YhWy/gWeAeQungR0dP7cwrG9sJtpPoYO -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net