$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: Pax6R7KwttYKbWMiTbBnGEGrRRdCq/HdVj+wKASNbKU= Subject key identifier: 96:DC:44:1E:8D:97:35:EB:73:36:B9:FC:E8:F0:7C:B7:5A:26:D8:7A Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 4E Signing time: Sun 27 Apr 2025 06:10:59 +0000 Manifest this update: Sun 27 Apr 2025 06:10:59 +0000 Manifest next update: Sun 04 May 2025 06:10:59 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: pyinSDVLcnAyXbB5nm6jmoyMAjk42hnOQ7L2zU+CjW0=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Apr 27 06:10:59 2025 GMT Not After : May 4 06:10:59 2025 GMT Subject: CN=680dca73-87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:f5:27:97:d8:fb:97:9d:3b:76:65:c5:29: ea:01:44:ba:8c:e7:25:4a:f9:4e:c2:cc:34:54:8f: d6:a6:ee:7a:66:6e:15:ec:bf:a7:ec:f2:dc:e4:a9: ba:bb:b9:6c:09:92:2c:65:91:d2:01:e0:64:11:48: 66:bb:ef:01:83:c7:ce:66:f1:d9:28:a6:e0:77:79: ec:fe:fb:11:9b:60:a1:3d:31:10:08:0b:8f:24:c2: 29:d8:af:3f:d1:ed:04:e6:67:5d:af:58:9e:8f:0e: 2c:a6:50:36:17:fb:71:61:a8:21:b5:f0:b8:c0:b9: dc:02:d8:d2:6f:32:99:b9:f7:7b:69:55:85:1b:e7: be:69:3e:0c:2e:fa:ce:9d:df:d1:5a:7a:e1:46:0d: 3e:48:72:62:85:69:20:77:2d:af:88:06:c0:9d:7a: 78:8d:b9:89:4b:a4:2c:5e:ab:f0:97:96:f7:e5:04: 9a:e4:c8:70:93:19:63:cc:ae:21:26:db:e4:09:98: 8b:3a:ee:79:50:53:0f:5f:5d:98:13:66:12:cc:98: cc:59:17:1f:8b:06:01:91:93:50:6c:0a:b9:3d:aa: cb:bd:e0:81:be:ca:4e:ba:15:69:e5:43:ed:61:5f: 56:8b:a6:6d:b3:b9:ff:0c:a9:1a:9c:d9:64:57:8d: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:44:1E:8D:97:35:EB:73:36:B9:FC:E8:F0:7C:B7:5A:26:D8:7A X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b5:9b:59:3e:c5:27:59:9e:81:ba:9e:e4:a8:ca:53:33:8a: 9e:68:ea:fa:f3:f1:a6:2c:96:08:20:21:42:55:d9:c4:ee:e9: 4e:f8:7d:45:b2:74:d2:1d:6f:55:06:34:a2:26:ee:7f:86:62: 1c:51:61:7c:69:0f:2b:29:a1:8a:ce:99:49:a6:4e:50:3d:17: 56:84:bb:58:82:69:c1:22:d9:34:17:c2:33:ec:a2:bf:4d:78: a0:c7:6d:2e:c3:84:d3:cf:1b:4e:0d:a9:d8:9d:84:09:b6:09: 64:a0:84:40:80:e6:e5:20:f8:82:a5:1c:8f:7c:1b:dd:a0:87: d4:57:96:0e:50:12:b9:78:2c:07:04:37:c2:60:04:9e:2f:d0: 6d:cb:41:c1:06:39:92:f0:43:d2:9d:fd:21:a3:d2:80:e0:20: d4:ef:8c:34:60:56:ae:8a:6b:6c:91:a1:ec:15:04:97:bb:80: 37:7b:67:48:9e:d3:de:94:f3:e9:36:e1:79:ef:4a:d8:e7:d2: 61:2c:0b:ea:98:1f:e2:7c:90:89:5f:73:95:3c:40:68:83:5f: 6d:1e:e9:12:35:d7:72:e1:4e:34:c9:76:92:90:b5:ba:d8:a8: 38:f6:74:85:ac:41:d2:5c:41:69:39:13:0d:6f:a1:45:6f:12: 07:00:a2:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTA0MjcwNjEwNTlaFw0yNTA1MDQwNjEwNTlaMBgxFjAUBgNV BAMTDTY4MGRjYTczLTg3Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPefUnl9j7l507dmXFKeoBRLqM5yVK+U7CzDRUj9am7npmbhXsv6fs8tzkqbq7 uWwJkixlkdIB4GQRSGa77wGDx85m8dkopuB3eez++xGbYKE9MRAIC48kwinYrz/R 7QTmZ12vWJ6PDiymUDYX+3FhqCG18LjAudwC2NJvMpm593tpVYUb575pPgwu+s6d 39FaeuFGDT5IcmKFaSB3La+IBsCdeniNuYlLpCxeq/CXlvflBJrkyHCTGWPMriEm 2+QJmIs67nlQUw9fXZgTZhLMmMxZFx+LBgGRk1BsCrk9qsu94IG+yk66FWnlQ+1h X1aLpm2zuf8MqRqc2WRXjeuhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUltxEHo2X NetzNrn86PB8t1om2HowHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFO1m1k+xSdZnoG6nuSoylMzip5o6vrz8aYslgggIUJV2cTu6U74fUWy dNIdb1UGNKIm7n+GYhxRYXxpDyspoYrOmUmmTlA9F1aEu1iCacEi2TQXwjPsor9N eKDHbS7DhNPPG04NqdidhAm2CWSghECA5uUg+IKlHI98G92gh9RXlg5QErl4LAcE N8JgBJ4v0G3LQcEGOZLwQ9Kd/SGj0oDgINTvjDRgVq6Ka2yRoewVBJe7gDd7Z0ie 096U8+k24XnvStjn0mEsC+qYH+J8kIlfc5U8QGiDX20e6RI113LhTjTJdpKQtbrY qDj2dIWsQdJcQWk5Ew1voUVvEgcAouY= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net