$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: 0qDaFztHi6XQh4G4mAhpUYeIa3MwAxSnTGO7zqkEl+w= Subject key identifier: A6:E1:67:B0:33:10:3C:B1:52:97:83:16:83:27:13:FC:1A:31:83:14 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0ACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0AC7 Signing time: Mon 28 Apr 2025 19:49:43 +0000 Manifest this update: Mon 28 Apr 2025 19:49:42 +0000 Manifest next update: Mon 05 May 2025 19:49:42 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: duO/6OjphPmtQajyy8HOoAyF4nE6krqjkYXH7s7w4P8=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: xL/igmGv/tHvkJn5yKoATONH6AHHS5dqWF72gorDIBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Apr 28 19:49:42 2025 GMT Not After : May 5 19:49:42 2025 GMT Subject: CN=680fdbd6-3487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:92:08:a9:1c:a0:59:d6:34:5a:9b:96:e0: 35:e1:d7:c4:10:bc:ea:eb:82:10:77:98:a6:89:04: 79:84:51:51:fc:2f:2b:63:14:4a:df:76:4b:3a:2d: d2:93:8a:7b:99:5f:5d:cc:f1:e6:8c:df:69:ad:77: aa:3c:88:bd:b7:f2:73:99:a4:81:53:c3:1d:b2:3c: ad:07:ef:28:cb:52:4c:d0:2c:9a:63:2c:4d:b8:a0: 33:11:86:fa:16:da:bb:14:ec:1e:c6:2a:37:7a:da: 9e:87:eb:ed:5d:8e:14:f4:e5:dd:3a:8a:eb:1b:03: af:d8:d5:f5:77:3a:89:f2:bc:52:4d:76:7a:2f:f9: a5:2c:1a:2f:98:11:d4:51:95:e4:9c:1d:ef:bf:a2: 9d:95:68:4e:aa:72:55:fd:61:46:70:fa:ee:cb:d6: ed:24:56:99:25:61:3a:0f:fa:42:40:13:5a:5e:26: a7:83:5d:93:13:af:a4:21:2f:48:1a:14:32:47:c7: 13:12:60:05:e1:13:1e:17:26:82:de:2a:c8:57:c0: 2a:c4:75:b9:fb:27:b2:9c:ef:87:43:b3:80:11:9b: d9:ef:61:19:59:38:45:4e:c0:8f:cc:d6:c0:92:4a: c3:26:3e:5e:9b:2e:76:ce:d4:1a:0b:df:02:47:8e: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:67:B0:33:10:3C:B1:52:97:83:16:83:27:13:FC:1A:31:83:14 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:d8:b4:d6:eb:61:47:d6:7c:9f:bd:ec:bb:bf:0f:ef:69: cf:df:a4:b1:8d:6f:c2:9b:ed:09:02:99:61:9a:80:76:74:81: eb:40:a0:f0:53:09:11:4a:aa:9c:27:e4:d8:d6:d8:b5:e4:a3: f2:69:5d:3e:0d:cf:24:d4:e5:64:e7:69:20:5c:6e:06:86:b5: 74:de:93:ce:84:4e:5e:09:95:9d:c7:0e:05:e2:c4:01:21:22: 9d:1b:6c:76:35:ed:7e:55:ef:ca:62:29:5f:1b:bf:52:0a:e5: 3d:90:fc:92:9c:3f:4f:7c:c8:27:74:34:71:95:6a:32:7a:70: 6b:7e:6c:a4:ac:1c:70:0f:81:1b:ba:31:53:1a:6f:a1:85:48: 44:08:97:d7:fe:d1:13:33:6f:51:3e:89:5a:90:01:f7:95:8a: b1:77:02:69:e4:43:64:ee:c1:fb:e7:5b:ee:d5:ad:6b:cd:2a: 50:d3:5c:0a:81:42:77:88:b1:12:89:86:24:41:75:43:3f:ae: 3d:24:82:10:d0:36:62:ef:e7:26:d2:6a:59:04:9f:87:59:d7: 3f:43:3f:0c:83:2f:9f:98:fd:f2:6e:62:75:3b:10:b4:e3:10: 1e:d6:86:39:a6:57:0d:c8:1f:18:af:9e:92:a7:e1:f9:96:86: cc:a8:f7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjUwNDI4MTk0OTQyWhcNMjUwNTA1MTk0OTQyWjAYMRYwFAYD VQQDEw02ODBmZGJkNi0zNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTKSCKkcoFnWNFqbluA14dfEELzq64IQd5imiQR5hFFR/C8rYxRK33ZLOi3S k4p7mV9dzPHmjN9prXeqPIi9t/JzmaSBU8MdsjytB+8oy1JM0CyaYyxNuKAzEYb6 Ftq7FOwexio3etqeh+vtXY4U9OXdOorrGwOv2NX1dzqJ8rxSTXZ6L/mlLBovmBHU UZXknB3vv6KdlWhOqnJV/WFGcPruy9btJFaZJWE6D/pCQBNaXiang12TE6+kIS9I GhQyR8cTEmAF4RMeFyaC3irIV8AqxHW5+yeynO+HQ7OAEZvZ72EZWThFTsCPzNbA kkrDJj5emy52ztQaC98CR47uiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbhZ7Az EDyxUpeDFoMnE/waMYMUMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaNi01uthR9Z8n73su78P72nP36SxjW/Cm+0JAplhmoB2dIHrQKDw UwkRSqqcJ+TY1ti15KPyaV0+Dc8k1OVk52kgXG4GhrV03pPOhE5eCZWdxw4F4sQB ISKdG2x2Ne1+Ve/KYilfG79SCuU9kPySnD9PfMgndDRxlWoyenBrfmykrBxwD4Eb ujFTGm+hhUhECJfX/tETM29RPolakAH3lYqxdwJp5ENk7sH751vu1a1rzSpQ01wK gUJ3iLESiYYkQXVDP649JIIQ0DZi7+cm0mpZBJ+HWdc/Qz8Mgy+fmP3ybmJ1OxC0 4xAe1oY5plcNyB8Yr56Sp+H5lobMqPeZ -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:19 2025 by rpki-client on console.sobornost.net