$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft File: 4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json) Hash identifier: vmKHRtIMssloGiXEDZDC6tfzp+2qQWL1DwX9ZQyfQRw= Subject key identifier: 5D:2C:10:DD:5B:0C:C6:BE:3D:75:E5:4E:87:A4:E3:2E:22:9F:05:A7 Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft Manifest number: 0182 Signing time: Sun 27 Apr 2025 02:40:37 +0000 Manifest this update: Sun 27 Apr 2025 02:40:37 +0000 Manifest next update: Sun 04 May 2025 02:40:37 +0000 Files and hashes: 1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: S1BdrqBjIhGoWBL6Lcv6XWw6B40gHem3H4dLIirVdrk=) 2: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RDPi47SZcDAz4xmQe0PzevESUJOCnp77k9KEsG3kOPw=) 3: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: 4ZxnpGjaykPQCM8pL2N1CRQo3+QNzrfE6n7zpJytINg=) 4: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: +lHlOLbl/5RnNOcPx8/sJld2TYpyfZTtFIxadDBZYdU=) 5: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: v8W7oHHzaQTWG5Q9zg44OzZnUjsO7rk1vnHeE+xeDvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Apr 27 02:40:37 2025 GMT Not After : May 4 02:40:37 2025 GMT Subject: CN=680d9925-1686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:08:0e:27:44:3e:4b:aa:79:bc:bd:d9:ca: 17:f6:3b:6f:09:f3:57:9e:9c:46:6d:b6:d5:13:64: 72:54:8f:a9:5d:3d:77:04:f6:4a:90:46:0d:7a:f8: ec:6a:6b:74:b6:bf:12:a2:4c:94:b8:24:28:bf:d5: 54:d2:7b:62:6c:4d:f1:7e:b1:18:da:2b:44:94:87: 87:9b:08:78:07:26:2a:a6:ed:39:6e:44:cc:75:31: 79:bf:ae:03:38:a8:e9:2e:a2:4c:03:21:b5:8f:a1: 16:9e:2c:55:48:55:4c:e0:f0:39:29:5a:b4:61:6f: 46:78:72:8a:fb:27:0b:98:9a:0a:29:95:f3:71:9a: 16:f0:ee:2b:96:c6:07:cd:d3:a6:ab:10:71:02:78: 8f:fa:d7:cb:80:7b:7e:1f:ed:82:ff:eb:15:df:e1: 1a:1c:2f:28:40:81:22:96:20:51:20:25:4b:ca:65: d0:87:ce:cb:c1:9d:56:18:c1:8c:c1:9b:9f:17:a3: 25:c7:8e:09:90:49:d9:0e:d5:2f:fa:e6:aa:b8:ec: 8c:c3:42:97:a9:03:72:f9:95:29:a5:92:2c:75:bb: 04:53:c6:e8:fd:52:dc:7f:7d:4a:a4:99:76:61:be: f3:c2:70:1d:74:69:5f:ce:2e:c9:43:d3:0b:f0:f1: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2C:10:DD:5B:0C:C6:BE:3D:75:E5:4E:87:A4:E3:2E:22:9F:05:A7 X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7b:ff:11:6c:bb:c8:a4:36:63:0e:d7:75:57:0f:6b:f9:c9: 80:0a:bf:43:bd:44:96:bd:29:cd:01:03:ad:42:47:73:d9:80: ac:59:97:45:ab:b1:14:b6:8f:2c:fe:5d:a3:fe:3f:06:45:40: 03:76:b6:94:17:2d:b2:4e:8f:3b:10:95:39:85:dc:f8:ef:a1: d0:8b:53:84:ff:bf:53:da:ac:29:bc:d0:0e:7b:4a:4c:13:c8: 80:b5:60:29:14:33:76:38:1b:b6:4c:63:07:a4:f4:6d:19:00: eb:8d:79:b9:2d:ff:ff:81:94:96:31:4b:45:20:8e:fd:41:64: c2:c9:24:ca:97:11:c2:7d:40:d2:b7:3d:cf:e9:82:4a:13:c9: 59:d7:20:f6:3c:f9:66:9f:7c:d1:5a:5e:28:ff:f1:0e:3a:72: 25:9b:0c:0b:66:23:60:c2:dd:88:2e:91:ec:81:6a:7a:5d:3e: b3:c1:9f:e5:ab:3a:df:1a:0c:b1:69:1d:7f:9f:9a:0e:7b:30: b1:29:77:d0:fb:ad:0d:fd:e8:c3:a4:bd:82:d1:4a:0c:80:01: 05:a9:af:ac:18:0a:fe:b6:45:4d:20:9f:74:38:4e:47:1c:2a: 57:f3:d1:7a:4f:63:56:90:e3:1f:b3:d6:c9:fc:9d:91:cc:04: f9:87:5e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjUwNDI3MDI0MDM3WhcNMjUwNTA0MDI0MDM3WjAYMRYwFAYD VQQDEw02ODBkOTkyNS0xNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVYIDidEPkuqeby92coX9jtvCfNXnpxGbbbVE2RyVI+pXT13BPZKkEYNevjs amt0tr8SokyUuCQov9VU0ntibE3xfrEY2itElIeHmwh4ByYqpu05bkTMdTF5v64D OKjpLqJMAyG1j6EWnixVSFVM4PA5KVq0YW9GeHKK+ycLmJoKKZXzcZoW8O4rlsYH zdOmqxBxAniP+tfLgHt+H+2C/+sV3+EaHC8oQIEiliBRICVLymXQh87LwZ1WGMGM wZufF6Mlx44JkEnZDtUv+uaquOyMw0KXqQNy+ZUppZIsdbsEU8bo/VLcf31KpJl2 Yb7zwnAddGlfzi7JQ9ML8PGE3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0sEN1b DMa+PXXlToek4y4inwWnMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEM1My9DRTQ0NUJEMERBNUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFp Sk1ITERKRmV5NFR1S0xXcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbe/8RbLvIpDZjDtd1Vw9r+cmACr9DvUSWvSnNAQOtQkdz2YCsWZdF q7EUto8s/l2j/j8GRUADdraUFy2yTo87EJU5hdz476HQi1OE/79T2qwpvNAOe0pM E8iAtWApFDN2OBu2TGMHpPRtGQDrjXm5Lf//gZSWMUtFII79QWTCySTKlxHCfUDS tz3P6YJKE8lZ1yD2PPlmn3zRWl4o//EOOnIlmwwLZiNgwt2ILpHsgWp6XT6zwZ/l qzrfGgyxaR1/n5oOezCxKXfQ+60N/ejDpL2C0UoMgAEFqa+sGAr+tkVNIJ90OE5H HCpX89F6T2NWkOMfs9bJ/J2RzAT5h14s -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net