$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json) Hash identifier: WabQ+Gkgn9Zj600fugcVKtvRmYUdVAPIn9PWUQyArz8= Subject key identifier: 25:95:4E:7F:AB:28:8C:DB:91:56:AE:2E:32:4A:A0:F7:31:03:A6:4F Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft Manifest number: 2D Signing time: Sun 27 Apr 2025 06:32:41 +0000 Manifest this update: Sun 27 Apr 2025 06:32:40 +0000 Manifest next update: Sun 04 May 2025 06:32:40 +0000 Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: pNu3NcVFd2hrYqAywMkuHFRyITzEysFK47jVzUkFB8k=) 2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=) 3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Validity Not Before: Apr 27 06:32:40 2025 GMT Not After : May 4 06:32:40 2025 GMT Subject: CN=680dcf89-2313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:5a:23:45:57:b0:85:89:5a:f6:79:60:17: 83:81:da:46:10:ce:2c:4b:af:d9:93:8c:93:2a:eb: 41:ff:76:20:87:53:d5:d4:8b:98:cb:02:07:98:59: c4:72:64:a2:3d:7a:f0:ce:85:67:61:1d:96:94:94: c2:eb:b0:f1:62:40:36:d3:2c:e6:36:af:d1:b2:96: 46:e4:8c:e3:c6:fe:b4:b3:8e:58:09:bc:b9:9f:ea: 1d:c9:db:57:39:9a:8e:aa:dd:53:db:6f:ae:15:b9: 0b:cb:dc:b1:15:d2:5b:76:2c:d0:f4:ac:60:da:2c: 79:9e:85:9c:80:db:86:9e:92:5f:f8:d9:31:1a:51: 8f:35:42:2c:8c:85:e0:ea:3d:6f:fa:e9:78:49:20: 4f:e4:7a:cf:bb:68:22:84:93:85:77:71:b0:9c:c1: b8:93:5e:67:52:bf:b4:05:e5:76:01:f9:8d:fe:65: ab:dc:db:2e:55:d1:09:28:53:4c:01:b1:91:c9:8b: d9:d4:c5:93:5c:af:2a:68:14:26:43:62:b6:a3:79: 36:9a:1b:f3:dc:64:fc:71:57:a3:29:d9:f3:54:b9: 65:05:4b:06:5f:29:74:fc:17:f1:a3:82:df:1d:ba: 1c:9e:86:b2:e7:50:55:c1:f5:2b:9a:d5:b8:0e:3d: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:4E:7F:AB:28:8C:DB:91:56:AE:2E:32:4A:A0:F7:31:03:A6:4F X509v3 Authority Key Identifier: keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f7:6b:eb:bb:29:7d:4e:9b:f1:d7:6b:32:4d:75:86:9c:ed: e6:72:3d:02:65:78:d1:51:f5:b1:8d:60:59:43:c8:8b:ed:22: bd:a0:cc:6b:87:d9:ab:b1:12:76:45:70:83:0c:ce:3c:3b:7d: 7e:4b:22:8c:53:e2:76:fc:5c:f6:c9:22:f1:f4:d1:86:6b:b2: 2c:a1:80:8b:59:1b:f1:1f:e5:95:96:06:89:d6:59:3b:aa:9f: 76:8d:36:f3:99:d2:21:cb:6f:1c:5b:97:c3:02:3c:aa:5d:d7: a6:33:6e:cf:6e:e8:79:e5:40:d3:87:38:d5:a4:84:7c:f8:bf: e5:55:5a:b6:65:20:59:3a:9c:26:35:67:fd:87:fe:86:9c:50: 3e:98:9e:0e:8f:5c:b8:ad:bf:34:6a:51:b5:e0:b1:cb:8c:a8: d1:4c:73:e3:52:a6:51:d2:5d:17:7f:5d:16:0a:02:d5:f6:6e: 29:7e:1c:aa:5f:93:de:7b:5c:83:7d:ab:9c:a9:87:9a:40:55: a1:e4:c8:2a:78:f2:df:a7:c6:40:3a:b7:e8:20:ff:ee:b1:f6: f4:cf:a0:34:90:0a:30:f4:33:8e:13:95:e3:a1:14:20:33:6e: f6:62:0f:7a:ea:f7:e8:36:bf:ad:85:c7:e1:73:8d:b7:ce:a1: 4b:81:79:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDgzODExMC8GA1UEBRMoNTNFQzhGNEYxMEE5NDA2NDQ2MjgyM0FBMjk5QkIyODY2 MDBFREYwOTAeFw0yNTA0MjcwNjMyNDBaFw0yNTA1MDQwNjMyNDBaMBgxFjAUBgNV BAMTDTY4MGRjZjg5LTIzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVelojRVewhYla9nlgF4OB2kYQzixLr9mTjJMq60H/diCHU9XUi5jLAgeYWcRy ZKI9evDOhWdhHZaUlMLrsPFiQDbTLOY2r9GylkbkjOPG/rSzjlgJvLmf6h3J21c5 mo6q3VPbb64VuQvL3LEV0lt2LND0rGDaLHmehZyA24aekl/42TEaUY81QiyMheDq PW/66XhJIE/kes+7aCKEk4V3cbCcwbiTXmdSv7QF5XYB+Y3+Zavc2y5V0QkoU0wB sZHJi9nUxZNcrypoFCZDYrajeTaaG/PcZPxxV6Mp2fNUuWUFSwZfKXT8F/Gjgt8d uhyehrLnUFXB9Sua1bgOPQzzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJZVOf6so jNuRVq4uMkqg9zEDpk8wHwYDVR0jBBgwFoAUU+yPTxCpQGRGKCOqKZuyhmAO3wkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwODM4LzBEMTk5NTdBRTUy QTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdSR0tDT3FLWnV5aG1BTzN3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS15UFR4Q3BRR1JHS0NPcUtadXlobUFPM3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw ODM4LzBEMTk5NTdBRTUyQTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdS R0tDT3FLWnV5aG1BTzN3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJv3a+u7KX1Om/HXazJNdYac7eZyPQJleNFR9bGNYFlDyIvtIr2gzGuH 2auxEnZFcIMMzjw7fX5LIoxT4nb8XPbJIvH00YZrsiyhgItZG/Ef5ZWWBonWWTuq n3aNNvOZ0iHLbxxbl8MCPKpd16Yzbs9u6HnlQNOHONWkhHz4v+VVWrZlIFk6nCY1 Z/2H/oacUD6Yng6PXLitvzRqUbXgscuMqNFMc+NSplHSXRd/XRYKAtX2bil+HKpf k957XIN9q5yph5pAVaHkyCp48t+nxkA6t+gg/+6x9vTPoDSQCjD0M44TleOhFCAz bvZiD3rq9+g2v62Fx+FzjbfOoUuBeas= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net