$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: s/QWkTARurnQBZhEIzAVpwUwfIg+SLE9l/9XWyW/k2U= Subject key identifier: 83:60:42:D2:CF:57:8B:51:33:92:18:AF:8C:0E:FB:75:54:4F:53:A6 Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0150 Signing time: Sun 27 Apr 2025 03:18:32 +0000 Manifest this update: Sun 27 Apr 2025 03:18:32 +0000 Manifest next update: Sun 04 May 2025 03:18:32 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: PqTBE5mMlb/ydcv6fIQa1kQKSbkN/F9LbL+e8IGAO9U=) 2: C606792CD3C811EFA4C15D2FC4F9AE02.roa (hash: RhIG4rVv0sC6eQgj2JPpIA3cTSID02u0FgU4lPWL4Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Apr 27 03:18:32 2025 GMT Not After : May 4 03:18:32 2025 GMT Subject: CN=680da208-cb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:e4:97:0b:7c:cb:64:34:30:65:c5:f9:6b: 0e:d3:2b:42:9d:6c:c4:10:d9:f6:10:c1:83:e3:02: e2:59:b5:05:27:bb:f7:a3:4c:42:a3:cb:50:38:b4: a2:97:fb:1f:e4:1d:5a:c0:98:73:24:3b:74:fd:8b: 81:f5:1c:3a:a5:87:0b:4d:e0:81:3e:e4:3b:4a:03: 45:4e:08:c2:0e:fd:fb:18:de:08:20:3a:fa:20:4d: 47:23:f8:48:c3:eb:75:76:7e:04:4d:a9:03:74:6b: 57:ee:c3:84:ee:4d:40:53:95:8f:6e:a0:6f:44:5f: 05:ef:5b:5a:48:2c:0a:a3:e7:07:00:f5:d7:90:c0: d1:65:87:b4:92:8a:4e:45:9b:a7:ba:c7:bd:43:e8: d6:22:24:1a:36:94:4a:f3:a4:f2:c2:cd:a3:84:0b: 6e:fb:15:32:23:54:20:df:14:ae:b9:85:d0:fd:09: 51:95:e3:fd:a0:12:15:10:76:c3:5c:a5:78:48:db: 48:4b:ae:14:1c:c1:fd:f1:cb:3b:0c:fc:1e:0e:33: 23:5f:4c:66:0e:ab:eb:9c:dd:01:c5:5d:da:79:d3: e3:0f:ae:4a:34:0c:b1:cb:68:1b:ba:44:f4:80:60: 87:53:19:ef:4d:a2:ea:66:0f:c4:d1:ab:f1:c9:10: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:42:D2:CF:57:8B:51:33:92:18:AF:8C:0E:FB:75:54:4F:53:A6 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fa:fe:84:a9:22:7d:1a:45:dd:3b:bd:e7:7e:e5:e8:56:d6: a2:61:78:eb:e7:92:40:56:e2:bc:13:ca:36:48:84:42:f4:09: c6:59:2d:b8:f9:de:91:e0:3e:47:cf:f2:d3:63:04:8d:f2:1e: 9a:41:1f:98:5d:6f:98:ff:0d:7c:f5:4d:1b:5e:7a:a2:c0:ee: 42:62:59:86:18:43:55:6f:9f:8f:98:a1:8a:35:e4:c1:f5:93: ee:19:10:2c:4f:48:f5:5e:fa:34:0e:3d:ac:b8:6f:c8:8c:d0: 00:ef:38:e1:0c:83:a2:5f:04:56:59:02:dd:f4:b0:e8:96:06: 16:83:9b:e6:45:8c:e2:3f:28:83:b5:7a:2a:b6:ab:7c:c6:74: e3:2b:fb:a6:f9:21:39:a9:37:6e:23:01:d5:50:7d:83:73:14: 0f:2a:70:34:9d:5b:0c:8c:d4:51:78:aa:f9:25:e5:38:21:a5: 23:03:70:90:0a:ee:ec:08:5e:c8:38:e5:d0:40:df:86:33:66: 53:2f:b4:f1:da:db:f3:e1:02:b9:3a:14:c0:48:6f:09:3f:01: 71:7c:4c:4a:c2:cd:10:63:2e:b3:4c:11:5a:47:dd:a0:41:c7: 0b:36:5b:d3:4a:de:c4:8c:e9:3c:26:49:34:05:40:d8:b4:b2: e7:82:a5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwNDI3MDMxODMyWhcNMjUwNTA0MDMxODMyWjAYMRYwFAYD VQQDEw02ODBkYTIwOC1jYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rjklwt8y2Q0MGXF+WsO0ytCnWzEENn2EMGD4wLiWbUFJ7v3o0xCo8tQOLSi l/sf5B1awJhzJDt0/YuB9Rw6pYcLTeCBPuQ7SgNFTgjCDv37GN4IIDr6IE1HI/hI w+t1dn4ETakDdGtX7sOE7k1AU5WPbqBvRF8F71taSCwKo+cHAPXXkMDRZYe0kopO RZunuse9Q+jWIiQaNpRK86Tyws2jhAtu+xUyI1Qg3xSuuYXQ/QlRleP9oBIVEHbD XKV4SNtIS64UHMH98cs7DPweDjMjX0xmDqvrnN0BxV3aedPjD65KNAyxy2gbukT0 gGCHUxnvTaLqZg/E0avxyRDVAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINgQtLP V4tRM5IYr4wO+3VUT1OmMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC+v6EqSJ9GkXdO73nfuXoVtaiYXjr55JAVuK8E8o2SIRC9AnGWS24 +d6R4D5Hz/LTYwSN8h6aQR+YXW+Y/w189U0bXnqiwO5CYlmGGENVb5+PmKGKNeTB 9ZPuGRAsT0j1Xvo0Dj2suG/IjNAA7zjhDIOiXwRWWQLd9LDolgYWg5vmRYziPyiD tXoqtqt8xnTjK/um+SE5qTduIwHVUH2DcxQPKnA0nVsMjNRReKr5JeU4IaUjA3CQ Cu7sCF7IOOXQQN+GM2ZTL7Tx2tvz4QK5OhTASG8JPwFxfExKws0QYy6zTBFaR92g QccLNlvTSt7EjOk8Jkk0BUDYtLLngqW7 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:00 2025 by rpki-client on console.sobornost.net