$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: 5ZG9NBaBAKof0kR6ltVAI+LFJsVuU2vbc/RbUZlH40o= Subject key identifier: C1:07:72:62:B9:F6:89:02:3C:2A:AF:45:B7:89:A1:11:D4:E9:C7:09 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: E6 Signing time: Fri 25 Apr 2025 04:30:18 +0000 Manifest this update: Fri 25 Apr 2025 04:30:17 +0000 Manifest next update: Fri 02 May 2025 04:30:17 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: 8ONMQoGVtaR4SVPud8KImCExlASvzUZPE6+kz5D0VZs=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Apr 25 04:30:17 2025 GMT Not After : May 2 04:30:17 2025 GMT Subject: CN=680b0fda-7b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:54:33:72:f3:7b:f2:40:0b:de:e5:dc:e0:4d: 86:9b:95:5e:11:67:c7:43:2e:c3:cf:14:27:a3:72: 8a:0b:f3:5c:fc:8d:2c:59:bf:bb:e8:cb:ba:2a:82: 16:e7:3a:e0:8d:d0:09:88:e9:0d:63:8c:b4:b6:e2: 91:05:a5:fc:c1:a5:5b:11:21:6c:35:25:7f:b8:41: 8d:3e:a0:f8:dc:be:66:81:d3:22:ab:c4:9c:b6:19: b5:56:ad:58:db:ed:af:9c:bc:d0:83:82:cd:f7:03: 70:89:83:f4:50:19:f4:6f:11:d5:6e:c0:cc:2b:83: 5a:08:77:48:ef:e5:b6:95:a6:33:73:99:61:62:a9: 68:80:52:9c:fe:8b:47:ac:79:e8:50:00:2a:c0:61: ad:dc:89:00:21:22:09:1f:75:bb:6c:a7:53:6d:d3: 79:ff:20:5c:af:34:3f:52:78:4d:98:7b:d5:37:df: 50:9b:7f:85:81:80:59:5d:31:eb:98:77:38:5c:e6: d5:a7:21:23:6e:6e:a4:55:dc:2f:57:4b:e5:66:4b: 9b:3a:f5:fd:7e:e8:04:b4:ff:90:9c:ce:b1:bd:fa: af:43:67:34:4b:ab:64:8a:2f:59:b0:c5:2b:83:97: 4d:98:48:13:b1:a2:bb:8d:9d:b7:a2:c6:5d:da:88: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:07:72:62:B9:F6:89:02:3C:2A:AF:45:B7:89:A1:11:D4:E9:C7:09 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d8:e4:d1:34:88:95:fa:43:2b:23:14:b3:0f:ce:de:f3:d5: 27:0a:be:cb:24:4d:df:92:d1:bb:2a:34:43:26:d9:61:f5:09: 9d:04:87:74:e9:4e:8a:69:b6:17:cd:3e:e8:2d:8d:14:e2:c9: d0:7c:16:79:81:99:16:19:d7:64:38:0d:df:66:72:c2:25:08: 4b:65:a9:7e:d5:2d:a1:ef:8f:e2:34:bb:a6:24:27:f4:53:75: 2a:05:7c:8a:b7:01:aa:f0:53:65:ae:00:3e:4c:13:bf:cf:97: bd:bd:ed:f1:06:c9:38:48:af:27:c7:27:69:fd:5a:0a:b6:93: 2c:ab:6e:e1:54:df:20:3d:7d:e0:ec:6e:bf:c3:7d:f1:22:8c: 80:74:2b:7e:73:1e:95:38:02:dc:ed:48:f5:ee:92:98:7b:fe: ed:0f:59:e5:1b:5c:9b:8e:98:12:37:4c:52:29:f8:0e:70:19: e1:34:49:ca:1e:da:99:8c:eb:bb:54:1b:b9:45:4e:f1:0e:72: 80:ce:2f:64:bd:80:1f:19:a7:73:38:3c:32:a9:38:8c:a3:59: b4:2a:34:a0:72:0d:46:c1:b4:3c:f3:1a:81:2c:41:65:4c:e4: 9a:15:c8:de:3d:aa:fa:c7:46:ff:9b:ff:92:0c:7f:01:30:aa: 26:3b:32:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUwNDI1MDQzMDE3WhcNMjUwNTAyMDQzMDE3WjAYMRYwFAYD VQQDEw02ODBiMGZkYS03YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VQzcvN78kAL3uXc4E2Gm5VeEWfHQy7DzxQno3KKC/Nc/I0sWb+76Mu6KoIW 5zrgjdAJiOkNY4y0tuKRBaX8waVbESFsNSV/uEGNPqD43L5mgdMiq8Scthm1Vq1Y 2+2vnLzQg4LN9wNwiYP0UBn0bxHVbsDMK4NaCHdI7+W2laYzc5lhYqlogFKc/otH rHnoUAAqwGGt3IkAISIJH3W7bKdTbdN5/yBcrzQ/UnhNmHvVN99Qm3+FgYBZXTHr mHc4XObVpyEjbm6kVdwvV0vlZkubOvX9fugEtP+QnM6xvfqvQ2c0S6tkii9ZsMUr g5dNmEgTsaK7jZ23osZd2oju0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEHcmK5 9okCPCqvRbeJoRHU6ccJMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY2OTRNIiV+kMrIxSzD87e89UnCr7LJE3fktG7KjRDJtlh9QmdBId0 6U6KabYXzT7oLY0U4snQfBZ5gZkWGddkOA3fZnLCJQhLZal+1S2h74/iNLumJCf0 U3UqBXyKtwGq8FNlrgA+TBO/z5e9ve3xBsk4SK8nxydp/VoKtpMsq27hVN8gPX3g 7G6/w33xIoyAdCt+cx6VOALc7Uj17pKYe/7tD1nlG1ybjpgSN0xSKfgOcBnhNEnK HtqZjOu7VBu5RU7xDnKAzi9kvYAfGadzODwyqTiMo1m0KjSgcg1GwbQ88xqBLEFl TOSaFcjePar6x0b/m/+SDH8BMKomOzJX -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:00 2025 by rpki-client on console.sobornost.net