$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: KX8FaVLVOwBQ8M+zto4R1kkZWUfIW6LDYJbkBaC9vUE= Subject key identifier: B2:C8:D7:02:55:B0:4B:E8:45:5A:40:20:1D:88:77:9A:1D:9A:25:AA Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 5D Signing time: Sun 27 Apr 2025 05:56:26 +0000 Manifest this update: Sun 27 Apr 2025 05:56:26 +0000 Manifest next update: Sun 04 May 2025 05:56:26 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: CFUPZ0Gk8rIAS1pbc8idQwXiJ5+mWIJAdx0+YNsbPZc=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Apr 27 05:56:26 2025 GMT Not After : May 4 05:56:26 2025 GMT Subject: CN=680dc70a-0daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:8c:fd:f6:ad:50:fc:e3:6d:44:0c:26:e9: 28:3e:9c:7a:da:24:fc:39:5b:83:8e:f8:0b:63:47: 8b:6b:cc:63:78:ff:4d:cd:6f:c9:0a:6a:08:c9:eb: 86:9a:31:14:eb:81:1b:52:a8:4c:b8:f7:74:1c:a7: 0c:b9:57:57:cc:98:bc:6b:ac:26:69:97:3a:e2:d3: f3:55:86:da:2d:f2:b6:ba:f1:db:20:c0:88:8b:b6: b7:26:f8:84:38:b1:e3:65:96:94:1b:af:99:4d:5e: 1b:0d:18:d7:fc:8d:da:9f:6e:8f:b7:dc:88:4d:f3: 66:fa:10:47:00:cb:1a:07:30:bc:99:d2:e9:b4:c6: bd:53:c6:21:c3:eb:3a:67:64:27:04:0f:0d:c1:d6: f3:37:08:37:62:65:40:7b:17:21:57:6a:ec:05:c6: 6c:49:a2:be:22:e3:1b:59:ce:dc:68:16:89:09:06: c3:81:51:02:bb:6e:65:64:43:e1:29:ee:ed:af:1a: 7f:81:8b:61:36:39:68:29:e4:10:53:70:7d:95:12: 40:1d:6e:f8:f6:26:cb:3d:6e:80:74:55:14:f4:1d: 85:0a:bc:cc:57:b8:3b:3a:2a:7e:bd:7b:07:61:ef: 6e:c0:cc:cb:84:df:31:6e:bf:e5:2f:48:73:22:ef: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:D7:02:55:B0:4B:E8:45:5A:40:20:1D:88:77:9A:1D:9A:25:AA X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e2:34:bf:85:51:20:76:a9:9b:4c:c5:25:d7:03:17:90:a4: 6d:21:f4:45:21:6c:63:cc:c6:dd:39:d5:26:45:6e:a5:70:45: bf:d1:fa:bc:88:95:df:eb:8f:2b:00:5d:24:61:5b:09:21:53: 3a:f4:ef:cf:1a:06:a7:4a:e4:98:9f:5a:ce:74:d6:8f:f0:1c: ee:d9:2d:03:12:2a:8c:84:3f:22:0d:d3:f4:9a:a7:27:d0:84: 33:49:53:26:85:28:f0:00:06:45:02:3e:b3:1b:1b:eb:4f:a2: f0:4e:63:f4:64:45:de:62:e1:cb:88:07:93:7e:b8:05:47:cc: 1e:0b:6a:da:4b:da:92:21:d8:6d:74:13:0f:99:07:29:34:a0: 71:4d:99:39:d7:d5:e7:a3:2e:49:8f:9c:9d:58:67:49:39:c3: fe:a7:35:3c:b4:18:6a:e8:5a:2a:cc:9d:77:be:9c:d4:d6:cc: 8f:d5:12:20:53:ff:22:75:a8:cb:73:ef:c1:b5:e7:ab:5f:a8: b4:ee:d9:b8:0e:c0:11:92:7c:c5:88:d3:dc:02:3e:d5:8c:a4: 1f:33:be:01:cd:71:9d:8a:0d:ea:d7:5c:ad:f4:1a:25:6d:0c: 25:f3:a4:f2:98:9d:b8:b1:75:90:b0:94:12:17:4c:42:15:f8: db:5d:72:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoRDQ2OTY0RjlGMzczMUYyRjYzRTY3MDA4QzkxRTU5QzdE Q0M3ODU1NzAeFw0yNTA0MjcwNTU2MjZaFw0yNTA1MDQwNTU2MjZaMBgxFjAUBgNV BAMTDTY4MGRjNzBhLTBkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyoIz99q1Q/ONtRAwm6Sg+nHraJPw5W4OO+AtjR4trzGN4/03Nb8kKagjJ64aa MRTrgRtSqEy493Qcpwy5V1fMmLxrrCZplzri0/NVhtot8ra68dsgwIiLtrcm+IQ4 seNllpQbr5lNXhsNGNf8jdqfbo+33IhN82b6EEcAyxoHMLyZ0um0xr1TxiHD6zpn ZCcEDw3B1vM3CDdiZUB7FyFXauwFxmxJor4i4xtZztxoFokJBsOBUQK7bmVkQ+Ep 7u2vGn+Bi2E2OWgp5BBTcH2VEkAdbvj2Jss9boB0VRT0HYUKvMxXuDs6Kn69ewdh 727AzMuE3zFuv+UvSHMi7ymDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUssjXAlWw S+hFWkAgHYh3mh2aJaowHwYDVR0jBBgwFoAU1Glk+fNzHy9j5nAIyR5Zx9zHhVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0U5MjZFOTEyOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhW Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUdsay1mTnpIeTlqNW5BSXlSNVp4OXpIaFZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RjExL0U5MjZFOTEyOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5 ajVuQUl5UjVaeDl6SGhWYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbiNL+FUSB2qZtMxSXXAxeQpG0h9EUhbGPMxt051SZFbqVwRb/R+ryI ld/rjysAXSRhWwkhUzr0788aBqdK5JifWs501o/wHO7ZLQMSKoyEPyIN0/SapyfQ hDNJUyaFKPAABkUCPrMbG+tPovBOY/RkRd5i4cuIB5N+uAVHzB4LatpL2pIh2G10 Ew+ZByk0oHFNmTnX1eejLkmPnJ1YZ0k5w/6nNTy0GGroWirMnXe+nNTWzI/VEiBT /yJ1qMtz78G156tfqLTu2bgOwBGSfMWI09wCPtWMpB8zvgHNcZ2KDerXXK30GiVt DCXzpPKYnbixdZCwlBIXTEIV+Ntdcmk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net