$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json) Hash identifier: oPQ9WuOwI7csW2t5DrVtL6erzWQ+61PdIk6jipBLMhQ= Subject key identifier: 7C:FA:F6:30:F3:39:71:1B:0A:B5:54:4C:DA:C1:D9:6C:DF:A1:98:03 Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft Manifest number: 49 Signing time: Fri 25 Apr 2025 06:22:05 +0000 Manifest this update: Fri 25 Apr 2025 06:22:05 +0000 Manifest next update: Fri 02 May 2025 06:22:05 +0000 Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: DrTd4U/s83UsavEiMkxbii0i6vJbgB0MWh8GZ11dgRY=) 2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: 3X4IEvNoArraBKAuq5CyT+VKjti9XVZccQ9OUFJ9p8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Apr 25 06:22:05 2025 GMT Not After : May 2 06:22:05 2025 GMT Subject: CN=680b2a0d-30d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:16:86:18:87:7b:7f:00:22:7d:64:3e:8e: cd:b5:bd:65:1f:fd:e5:02:27:09:37:89:1c:a9:e8: e4:1c:c7:d0:ac:09:1b:d8:c4:9c:e7:fb:bd:1a:56: ef:d8:8b:cc:1a:fc:a2:1c:cb:00:58:b4:f7:dc:09: 06:92:b4:f3:ac:9c:08:39:77:fc:a2:21:44:6d:12: 4d:30:50:3e:85:51:d8:6d:35:50:24:3e:9b:1f:e1: 0a:eb:a3:e8:64:92:8f:54:4f:a7:5d:e0:0a:dc:d7: 4e:64:90:fa:90:17:94:2b:35:26:48:48:3c:a7:f7: 1c:32:c5:1f:03:f4:2f:3f:37:2a:7e:7d:fe:8c:31: 2d:bc:42:f2:9e:56:c4:a6:35:2c:6d:9b:12:5a:f9: 6f:c8:2d:ec:37:7c:9e:28:19:90:b7:ac:51:e4:55: 39:92:94:34:53:9a:3f:ca:8d:1c:6f:2d:2b:c5:dc: b8:6a:1c:74:6d:b9:09:5e:ba:73:c8:0b:a7:d5:20: dd:96:0d:f9:81:07:27:94:fd:ee:62:7a:00:21:e5: cf:68:db:67:a7:e6:a2:d9:ba:4c:26:c7:c0:f8:64: ae:37:97:ad:99:69:cb:56:57:25:14:41:b6:a4:0d: 70:31:b7:e5:82:2c:cd:0e:96:b6:a7:36:7e:81:31: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FA:F6:30:F3:39:71:1B:0A:B5:54:4C:DA:C1:D9:6C:DF:A1:98:03 X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ec:19:94:7c:e2:56:cf:dd:62:19:35:d2:a6:94:d7:c4:d5: 95:e6:7f:80:e5:b5:54:d3:1d:5c:65:65:cf:e6:35:f9:29:6a: 82:48:a9:c9:c8:7b:b0:16:0d:84:08:4a:e9:3c:02:55:15:77: f0:28:d9:c0:13:d9:a6:8e:10:37:c6:0d:35:bc:44:e4:44:2c: 7e:97:c3:d2:84:31:c9:7b:70:7c:2a:1b:1f:d7:38:9c:a5:39: 4a:0a:2c:b2:b4:17:3c:d3:e8:12:21:9f:62:15:8c:8c:f3:e7: 8a:61:d7:20:fb:f2:e0:51:90:4c:82:1a:93:96:a4:a3:7b:c2: 83:78:80:3e:8a:f4:a1:13:cf:4d:ec:61:ea:61:c7:cc:52:91: 9b:16:f2:0e:95:46:1c:df:93:57:42:9f:fb:42:8a:b7:58:dd: f8:a9:98:62:0e:93:35:b3:c9:4f:48:54:ec:e8:60:0e:dc:50: e5:ae:fa:b6:58:27:37:9f:d3:ad:dd:6a:3a:e6:d3:04:b7:4b: cd:44:48:87:82:30:4b:d4:76:85:c7:64:fe:9f:52:ef:56:5b: 10:0a:1c:8a:dd:0e:01:7c:da:b6:74:d6:30:15:08:01:79:b7: 5c:c0:4d:fd:ee:0c:b5:d6:b6:d4:35:da:65:ab:25:69:ef:9e: cb:dc:c5:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkFDQjExMC8GA1UEBRMoNDAyRDFEMEJEOTFGNDM4MDJDN0EwRDcwNzM2MTg4QkVC QTBBMDgxMjAeFw0yNTA0MjUwNjIyMDVaFw0yNTA1MDIwNjIyMDVaMBgxFjAUBgNV BAMTDTY4MGIyYTBkLTMwZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqdxaGGId7fwAifWQ+js21vWUf/eUCJwk3iRyp6OQcx9CsCRvYxJzn+70aVu/Y i8wa/KIcywBYtPfcCQaStPOsnAg5d/yiIURtEk0wUD6FUdhtNVAkPpsf4Qrro+hk ko9UT6dd4Arc105kkPqQF5QrNSZISDyn9xwyxR8D9C8/Nyp+ff6MMS28QvKeVsSm NSxtmxJa+W/ILew3fJ4oGZC3rFHkVTmSlDRTmj/KjRxvLSvF3LhqHHRtuQleunPI C6fVIN2WDfmBByeU/e5iegAh5c9o22en5qLZukwmx8D4ZK43l62ZactWVyUUQbak DXAxt+WCLM0OlranNn6BMYp1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfPr2MPM5 cRsKtVRM2sHZbN+hmAMwHwYDVR0jBBgwFoAUQC0dC9kfQ4Aseg1wc2GIvroKCBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGQUNCLzFDOTQ2QUYyQjQ2 NTExRUY5QkZCQUE2N0M0RjlBRTAyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUMwZEM5a2ZRNEFzZWcxd2MyR0l2cm9LQ0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG QUNCLzFDOTQ2QUYyQjQ2NTExRUY5QkZCQUE2N0M0RjlBRTAyL1FDMGRDOWtmUTRB c2VnMXdjMkdJdnJvS0NCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPsGZR84lbP3WIZNdKmlNfE1ZXmf4DltVTTHVxlZc/mNfkpaoJIqcnI e7AWDYQISuk8AlUVd/Ao2cAT2aaOEDfGDTW8RORELH6Xw9KEMcl7cHwqGx/XOJyl OUoKLLK0FzzT6BIhn2IVjIzz54ph1yD78uBRkEyCGpOWpKN7woN4gD6K9KETz03s Yephx8xSkZsW8g6VRhzfk1dCn/tCirdY3fipmGIOkzWzyU9IVOzoYA7cUOWu+rZY Jzef063dajrm0wS3S81ESIeCMEvUdoXHZP6fUu9WWxAKHIrdDgF82rZ01jAVCAF5 t1zATf3uDLXWttQ12mWrJWnvnsvcxX8= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:02 2025 by rpki-client on console.sobornost.net