$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: z+G4f5wT0eljj5Lqzvy1ze0WbYIjq3ivYb9iXqgSy/8= Subject key identifier: 47:35:7D:35:56:F2:1C:87:64:1D:53:5C:3E:42:6B:9F:C2:F7:D6:35 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 9A Signing time: Sun 27 Apr 2025 05:07:28 +0000 Manifest this update: Sun 27 Apr 2025 05:07:27 +0000 Manifest next update: Sun 04 May 2025 05:07:27 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: L8+rxBiVft6UuYy3NqsZVLMLddi/f1+L+dYLE77bqn0=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: SBjUcQwgq8eYibunzuM6B0MYbh92vDqaJjZbumGPIz4=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Apr 27 05:07:27 2025 GMT Not After : May 4 05:07:27 2025 GMT Subject: CN=680dbb90-97ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b7:db:b4:b0:10:d3:c8:55:7e:25:b9:ea:2c: 26:be:12:de:d6:a7:b3:a6:69:a8:f0:fe:14:c6:02: 08:9d:65:52:06:1e:18:51:a7:ba:6c:00:2c:ac:f2: 1c:71:84:8b:8b:fd:66:5c:f6:17:59:5a:35:01:c0: f5:ce:70:23:ee:37:8f:50:7a:b6:f1:32:da:75:a7: 02:63:56:e4:81:d9:1c:76:92:d1:52:ff:31:1a:23: 57:e2:8c:49:54:e7:ef:8f:f7:d4:a0:10:6c:73:56: 66:77:29:23:84:93:66:90:2d:f4:c2:40:02:aa:2f: bd:54:cd:4a:cd:79:75:cc:fb:29:cd:74:8a:84:1b: c1:2f:a8:40:c1:6d:0a:57:40:83:89:f9:05:62:48: 30:dc:d8:c7:f6:41:90:a8:b8:b3:90:cd:66:87:bc: 2e:a0:5d:28:e7:7e:43:31:66:05:0d:98:98:fe:81: d2:e2:69:80:42:56:a3:1e:5f:b2:29:2b:56:c2:61: 3a:0d:95:4b:8c:08:7e:b8:be:80:fe:d8:53:b8:f2: ff:b6:98:1f:14:3d:3d:6e:2f:6d:f3:5b:2d:d8:28: f8:3c:be:4a:ca:fb:f1:db:38:59:1f:5e:97:df:b5: d8:90:bd:cb:c7:19:b7:37:e8:8c:da:aa:df:a0:ae: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:7D:35:56:F2:1C:87:64:1D:53:5C:3E:42:6B:9F:C2:F7:D6:35 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:77:a9:45:36:89:dc:20:45:bc:3d:48:9e:fe:05:f8:ae:8a: 3d:16:62:15:4c:64:6d:bb:99:e6:0c:3e:7c:28:ce:d4:f1:a5: d1:02:b6:c8:15:7e:77:18:31:62:e5:08:df:f6:15:da:dc:e2: 3e:a0:ab:3d:f2:04:5d:d2:c1:86:31:5c:83:15:d8:bc:72:d6: 62:a5:a3:51:34:62:cd:4a:b1:09:56:e5:08:f9:d4:4a:d9:0e: 7d:be:7e:84:c2:3a:1c:08:9d:b7:71:af:a0:c0:a3:ae:a1:4e: 17:e9:68:09:60:e7:3a:4e:df:18:24:85:5e:42:d2:71:72:31: fe:b7:e8:07:99:23:1e:e1:fe:47:00:2d:27:0f:93:f7:0f:21: 4a:34:3c:c3:9f:84:56:f2:24:d4:5d:0f:ac:e4:95:98:01:6c: 01:ad:ba:85:99:a6:4a:01:d2:51:4e:6f:b2:3b:7c:83:ef:b7: 98:c8:fe:6b:b8:a8:be:c2:0d:3c:97:a5:1f:9b:62:05:ce:c5: fe:20:24:57:0e:40:51:9c:fd:16:48:17:54:06:92:5d:b2:aa: 0a:43:a0:27:d0:ae:f1:17:c5:ac:1a:a1:58:b1:6c:8b:4f:fd: 4d:9a:72:79:81:0d:ee:de:e6:7d:99:e1:64:58:b5:92:a7:a0: 8b:18:cc:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUwNDI3MDUwNzI3WhcNMjUwNTA0MDUwNzI3WjAYMRYwFAYD VQQDEw02ODBkYmI5MC05N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rfbtLAQ08hVfiW56iwmvhLe1qezpmmo8P4UxgIInWVSBh4YUae6bAAsrPIc cYSLi/1mXPYXWVo1AcD1znAj7jePUHq28TLadacCY1bkgdkcdpLRUv8xGiNX4oxJ VOfvj/fUoBBsc1ZmdykjhJNmkC30wkACqi+9VM1KzXl1zPspzXSKhBvBL6hAwW0K V0CDifkFYkgw3NjH9kGQqLizkM1mh7wuoF0o535DMWYFDZiY/oHS4mmAQlajHl+y KStWwmE6DZVLjAh+uL6A/thTuPL/tpgfFD09bi9t81st2Cj4PL5Kyvvx2zhZH16X 37XYkL3Lxxm3N+iM2qrfoK6WhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc1fTVW 8hyHZB1TXD5Ca5/C99Y1MB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6d6lFNoncIEW8PUie/gX4roo9FmIVTGRtu5nmDD58KM7U8aXRArbI FX53GDFi5Qjf9hXa3OI+oKs98gRd0sGGMVyDFdi8ctZipaNRNGLNSrEJVuUI+dRK 2Q59vn6EwjocCJ23ca+gwKOuoU4X6WgJYOc6Tt8YJIVeQtJxcjH+t+gHmSMe4f5H AC0nD5P3DyFKNDzDn4RW8iTUXQ+s5JWYAWwBrbqFmaZKAdJRTm+yO3yD77eYyP5r uKi+wg08l6Ufm2IFzsX+ICRXDkBRnP0WSBdUBpJdsqoKQ6An0K7xF8WsGqFYsWyL T/1NmnJ5gQ3u3uZ9meFkWLWSp6CLGMzw -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net