$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: X9cGwpTF1HYLDVXeMnrje/oK26mpMBMZx7qLA+dZpTM= Subject key identifier: 70:E0:E5:B6:EA:3D:E2:A9:FC:10:D6:28:1B:4F:50:83:5D:86:F5:0A Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: 72 Signing time: Wed 23 Apr 2025 05:56:56 +0000 Manifest this update: Wed 23 Apr 2025 05:56:55 +0000 Manifest next update: Wed 30 Apr 2025 05:56:55 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: uzcUlqfPEjQkKo7bVPIpAg32lK+QsQMZX5ThOz8fZ3c=) 2: B0D54166830311EFBF66FC21C4F9AE02.roa (hash: tZx4V13WdS1YqkwOo/f+c5fdIh0lni7XzhM0Rn3v6tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Apr 23 05:56:55 2025 GMT Not After : Apr 30 05:56:55 2025 GMT Subject: CN=68088127-752e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:a4:cf:0b:54:5c:7c:51:4b:21:b6:48:af: b3:2b:5f:ea:f8:7a:f6:ed:15:43:3f:f0:8e:14:5d: fd:f5:b1:57:2b:6b:27:97:a8:0f:70:c1:f9:cb:24: 08:a6:98:21:db:03:e7:7f:e7:a6:d1:bb:67:9e:c4: 57:e1:c0:e4:c4:df:36:fd:f7:9c:4f:27:de:0c:c4: 4a:c1:7d:e2:40:a1:f2:bb:1c:1c:d1:a9:f8:75:76: 89:22:a9:0e:14:6d:86:da:b1:5d:39:7c:c0:3e:4b: cb:b3:ef:5e:70:93:58:fb:07:35:bb:42:99:06:98: bf:94:03:7e:09:ac:ea:0f:42:f3:2c:2d:3d:bd:97: ee:7c:7d:56:f0:78:4b:6c:e8:49:58:0c:7f:28:d8: 83:c8:86:61:fb:ce:6d:7d:50:84:be:35:b3:64:71: 6b:aa:1c:52:ad:00:0c:12:b7:f3:a6:40:a1:6b:44: 47:45:21:82:cc:ee:f1:d8:d4:76:d7:aa:8b:40:3f: 51:1e:04:be:f7:c5:6e:19:88:93:65:b8:f6:9d:a5: c9:db:8c:30:19:10:ba:1f:b0:1c:d3:59:aa:1f:9c: cc:fd:35:b8:cb:28:c5:f4:15:a3:65:fd:cd:34:98: 4e:9a:a4:d1:9e:29:49:ca:9d:02:bf:d8:6a:13:7d: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:E5:B6:EA:3D:E2:A9:FC:10:D6:28:1B:4F:50:83:5D:86:F5:0A X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ac:24:31:45:3f:99:17:05:52:be:f1:c4:34:54:e9:ff:48: fc:c7:64:46:d7:94:fd:90:d7:19:43:20:51:00:d2:07:42:77: 11:13:9a:20:92:d8:b8:53:50:8b:e6:d1:5c:4c:76:f3:ad:6e: 89:3d:34:50:9b:b2:ee:8d:8c:5c:8e:4b:78:96:79:a4:d2:7c: a2:79:3d:45:00:4e:7a:21:0d:ba:e3:a3:0f:b8:3a:60:52:a5: 1a:0d:00:8c:b0:1f:1f:98:e3:b0:78:ab:84:3e:2d:cb:06:25: c5:da:cf:6f:42:17:79:ca:44:ad:57:03:db:58:c4:8d:84:63: f1:4c:e0:d2:5c:f8:32:63:7b:6d:03:fd:f4:cf:d0:ff:c0:5c: 5b:ba:35:17:bf:bc:7c:82:38:81:ad:ae:6b:16:77:df:08:91: 26:c7:0c:ed:4a:a2:64:65:7b:d5:23:19:be:06:66:b8:c8:24: c6:45:e8:eb:69:f1:52:ab:e1:da:93:72:ee:57:a3:b8:7a:ca: 83:35:23:87:50:d9:5f:9c:bd:d3:48:67:bc:a6:b7:1b:d2:c8: 21:71:e9:f0:8e:b4:ea:fc:20:23:c2:a5:e4:bc:cb:08:2e:5f: 0a:f3:0b:0a:ea:d2:f5:78:d4:b1:3a:5e:be:da:7e:d8:a8:77: c8:c8:4c:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDZDMTExMC8GA1UEBRMoMjZEODY0NUVFOEVFM0E1RDFFQjFEMkRGOTc5Qjg1NDlC ODc2MUUyQTAeFw0yNTA0MjMwNTU2NTVaFw0yNTA0MzAwNTU2NTVaMBgxFjAUBgNV BAMTDTY4MDg4MTI3LTc1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPM6TPC1RcfFFLIbZIr7MrX+r4evbtFUM/8I4UXf31sVcrayeXqA9wwfnLJAim mCHbA+d/56bRu2eexFfhwOTE3zb995xPJ94MxErBfeJAofK7HBzRqfh1dokiqQ4U bYbasV05fMA+S8uz715wk1j7BzW7QpkGmL+UA34JrOoPQvMsLT29l+58fVbweEts 6ElYDH8o2IPIhmH7zm19UIS+NbNkcWuqHFKtAAwSt/OmQKFrREdFIYLM7vHY1HbX qotAP1EeBL73xW4ZiJNluPadpcnbjDAZELofsBzTWaofnMz9NbjLKMX0FaNl/c00 mE6apNGeKUnKnQK/2GoTfYqtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcODltuo9 4qn8ENYoG09Qg12G9QowHwYDVR0jBBgwFoAUJthkXujuOl0esdLfl5uFSbh2Hiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZENkMxL0RCNzA0NEUyN0Ey NjExRUZBRjA3QjY1NUM0RjlBRTAyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnRoa1h1anVPbDBlc2RMZmw1dUZTYmgySGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE NkMxL0RCNzA0NEUyN0EyNjExRUZBRjA3QjY1NUM0RjlBRTAyL0p0aGtYdWp1T2ww ZXNkTGZsNXVGU2JoMkhpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqsJDFFP5kXBVK+8cQ0VOn/SPzHZEbXlP2Q1xlDIFEA0gdCdxETmiCS 2LhTUIvm0VxMdvOtbok9NFCbsu6NjFyOS3iWeaTSfKJ5PUUATnohDbrjow+4OmBS pRoNAIywHx+Y47B4q4Q+LcsGJcXaz29CF3nKRK1XA9tYxI2EY/FM4NJc+DJje20D /fTP0P/AXFu6NRe/vHyCOIGtrmsWd98IkSbHDO1KomRle9UjGb4GZrjIJMZF6Otp 8VKr4dqTcu5Xo7h6yoM1I4dQ2V+cvdNIZ7ymtxvSyCFx6fCOtOr8ICPCpeS8ywgu XwrzCwrq0vV41LE6Xr7aftiod8jITLE= -----END CERTIFICATE-----Generated at Wed Apr 23 09:02:27 2025 by rpki-client on console.sobornost.net