$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: Pyak3yMHrY3V9LVrQq56pSFgy1tU8e9Xmh+lDQne52U= Subject key identifier: CA:30:E5:92:84:15:41:22:1D:E8:10:CB:4C:83:B0:90:1C:C8:34:A0 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 1019 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 100F Signing time: Fri 02 May 2025 17:38:27 +0000 Manifest this update: Fri 02 May 2025 17:38:27 +0000 Manifest next update: Fri 09 May 2025 17:38:27 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: hVVjLfSauM0l3B3nnH/cuTBTKcgXbPY6mTYZ1pAGsHc=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4121 (0x1019) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: May 2 17:38:27 2025 GMT Not After : May 9 17:38:27 2025 GMT Subject: CN=68150313-ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:29:b5:94:c9:0a:31:65:4c:fe:44:82:fd: 46:0d:ee:4a:b4:c8:6b:60:78:4a:57:23:fa:83:0b: 17:bb:b3:b9:44:5a:6e:5d:90:8b:7c:da:3f:11:ff: 93:f1:10:92:df:ab:06:bc:82:20:ed:b0:12:d0:e7: cb:ff:06:50:44:63:3e:0d:1e:ac:65:0b:b6:18:06: 41:60:9e:4e:4b:3b:e8:d5:84:9f:d6:91:66:8a:68: f4:96:f2:02:7d:5a:b2:84:93:46:3a:d2:30:62:03: 9f:18:02:be:7c:48:9d:ff:89:89:11:a8:22:76:8c: eb:a9:1c:1a:cc:f6:0b:04:03:bb:ff:5b:e4:b1:06: 8a:43:d2:32:92:8d:41:4e:c6:74:64:c8:28:78:13: 19:31:b4:01:37:f9:c6:87:f5:ac:b4:26:76:d8:7e: 64:20:55:c2:09:33:82:d6:56:a5:94:95:47:66:dc: 1d:7f:f3:f7:2b:40:4f:65:dc:5b:39:fe:ed:45:db: 74:d5:01:3f:61:3a:74:fd:11:46:9b:59:a0:68:81: f2:bd:4a:41:be:5a:1e:5a:4c:37:1d:59:d1:04:a9: 64:66:83:ce:10:fe:d5:52:38:da:f7:e8:da:5c:9f: b3:dd:c4:33:b8:c7:60:04:5f:28:8d:25:18:e2:78: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:30:E5:92:84:15:41:22:1D:E8:10:CB:4C:83:B0:90:1C:C8:34:A0 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:52:0f:07:25:06:e2:45:fb:a3:e4:ec:3f:4b:8a:5b:2c:4f: 0c:0d:6e:53:98:61:77:b9:3e:b1:58:1c:1e:d7:62:32:fd:b2: b4:b7:c3:17:38:d6:95:c3:4c:f1:7b:6c:97:49:d5:ef:98:67: ee:74:45:c4:85:f4:ab:7a:39:b5:c2:1d:3c:de:a1:70:45:05: 26:fd:c1:8a:8e:ec:58:6e:96:85:98:4d:54:05:17:05:bd:08: ea:bf:a1:17:85:c7:ad:28:f3:68:b6:2d:40:b0:77:d8:37:36: 37:3e:c9:2f:20:f9:ec:f8:3e:33:dc:f6:86:79:72:49:4a:71: 9d:cc:93:bf:ac:93:da:30:be:4b:e9:a0:8e:3c:92:cc:d7:1c: 9d:70:2a:e2:55:01:d6:2f:8c:88:99:c1:53:6d:75:7b:ff:74: a8:e2:9b:49:4b:bc:71:06:cc:70:ef:85:56:52:e6:e4:02:35: 60:7d:c3:95:0f:11:7d:72:1a:51:ee:c3:74:98:04:53:36:cc: 38:ef:2e:8c:23:47:47:9c:d6:59:88:84:a2:1e:1d:e0:56:75: 84:23:53:44:58:b3:33:d7:09:8b:84:93:e4:22:48:9b:79:ae: 96:1c:bc:cb:2f:8d:68:39:f2:85:04:fe:74:73:f4:82:fb:c9: 9a:d6:7c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNTAyMTczODI3WhcNMjUwNTA5MTczODI3WjAYMRYwFAYD VQQDEw02ODE1MDMxMy1lYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbIptZTJCjFlTP5Egv1GDe5KtMhrYHhKVyP6gwsXu7O5RFpuXZCLfNo/Ef+T 8RCS36sGvIIg7bAS0OfL/wZQRGM+DR6sZQu2GAZBYJ5OSzvo1YSf1pFmimj0lvIC fVqyhJNGOtIwYgOfGAK+fEid/4mJEagidozrqRwazPYLBAO7/1vksQaKQ9Iyko1B TsZ0ZMgoeBMZMbQBN/nGh/WstCZ22H5kIFXCCTOC1lallJVHZtwdf/P3K0BPZdxb Of7tRdt01QE/YTp0/RFGm1mgaIHyvUpBvloeWkw3HVnRBKlkZoPOEP7VUjja9+ja XJ+z3cQzuMdgBF8ojSUY4nhqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMow5ZKE FUEiHegQy0yDsJAcyDSgMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARUg8HJQbiRfuj5Ow/S4pbLE8MDW5TmGF3uT6xWBwe12Iy/bK0t8MX ONaVw0zxe2yXSdXvmGfudEXEhfSrejm1wh083qFwRQUm/cGKjuxYbpaFmE1UBRcF vQjqv6EXhcetKPNoti1AsHfYNzY3PskvIPns+D4z3PaGeXJJSnGdzJO/rJPaML5L 6aCOPJLM1xydcCriVQHWL4yImcFTbXV7/3So4ptJS7xxBsxw74VWUubkAjVgfcOV DxF9chpR7sN0mARTNsw47y6MI0dHnNZZiISiHh3gVnWEI1NEWLMz1wmLhJPkIkib ea6WHLzLL41oOfKFBP50c/SC+8ma1ny1 -----END CERTIFICATE-----Generated at Sat May 3 06:10:52 2025 by rpki-client on console.sobornost.net