$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: xxIVpFnWuyxR1qJTO95PymC5XZSQX5FigSPwktl9qBI= Subject key identifier: EE:7B:7A:FC:E5:7B:E0:3A:61:A0:24:4C:A0:6E:15:14:E6:9A:D2:F6 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09CE Signing time: Thu 24 Apr 2025 16:10:10 +0000 Manifest this update: Thu 24 Apr 2025 16:10:09 +0000 Manifest next update: Thu 01 May 2025 16:10:09 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: Ds9IGNYNCSoj3UsmG4Io+lZra07VDwLshB/xmJj8KrA=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Apr 24 16:10:09 2025 GMT Not After : May 1 16:10:09 2025 GMT Subject: CN=680a6261-fcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:d3:13:8c:f2:b9:a3:1d:f1:34:e3:dd:37: 03:d6:2c:c0:21:1c:5b:7a:ae:77:97:33:75:74:8d: 19:4c:6e:63:3e:13:b8:37:bc:63:dd:54:df:ff:78: c0:ac:ed:a6:58:74:5d:63:dc:ff:1c:37:13:84:8b: ac:a2:b1:42:1b:da:50:7a:fc:54:55:23:c9:22:c7: e4:02:35:6e:11:94:f2:d6:5e:79:61:80:85:92:cc: eb:85:b1:38:d9:c3:2e:9e:7e:e9:e2:ca:40:40:f0: 44:3a:ff:3a:ba:35:d8:64:6f:be:77:21:e7:f3:61: 76:47:ae:06:c4:71:a7:95:ae:b2:d7:84:34:c4:77: ee:4a:69:fb:02:93:62:54:bf:11:42:9a:a4:f2:c4: 04:74:56:da:82:66:af:b9:40:89:99:cc:42:f4:06: a1:db:f0:79:cf:6e:b4:f8:35:cd:b6:fb:ed:ba:71: 15:65:5d:4a:dd:6d:f6:bf:01:3c:ab:fb:b3:e9:f5: 64:3a:3c:e5:86:72:41:20:a4:9a:0b:06:11:34:c2: e6:94:6a:c0:ed:f8:5c:00:a7:b6:86:c9:13:8f:c1: a6:27:6b:b1:27:01:b2:6f:a8:a9:da:27:2d:95:ce: fb:9f:5d:b9:46:64:a7:2f:34:de:0e:18:f9:46:1e: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7B:7A:FC:E5:7B:E0:3A:61:A0:24:4C:A0:6E:15:14:E6:9A:D2:F6 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:55:71:4e:63:b8:3d:39:2e:54:46:3f:ac:35:05:a3:50:47: c0:2e:9d:3e:98:75:65:67:ec:ec:a1:83:86:ea:30:cd:e3:80: 5a:de:70:40:0d:19:b4:7d:a0:05:10:f1:68:b1:cb:bf:a1:b8: 70:15:99:47:28:22:55:51:04:37:10:e9:dd:ff:39:54:4a:a7: fe:f2:73:a2:8f:7a:9e:58:2a:48:02:08:83:6a:ab:b3:8d:61: cb:67:56:82:3a:cc:a3:da:48:76:4b:a2:d2:ee:1a:10:e0:c2: f0:51:f8:d3:f1:7a:07:e6:ef:46:99:95:51:53:ff:f5:dc:5f: dd:83:65:03:b7:0b:f9:b0:f0:2b:36:80:7b:0a:b4:f8:a9:b1: b6:e8:e4:2f:c9:27:81:cc:45:2c:66:87:3d:5e:9a:68:b6:dc: 65:24:e3:c7:35:a8:c0:2a:1d:9c:2c:d1:9a:8d:73:68:1c:25: 9a:cd:c0:1e:12:84:f1:3d:0f:85:c6:45:82:57:67:4c:84:63: 33:92:d3:69:9c:e9:0e:e8:28:66:a8:8a:35:21:c3:9a:27:07: 3e:29:dd:ef:91:40:29:4c:3b:f3:b4:44:8e:2a:59:5b:5b:98: d4:6a:ed:3f:1e:26:e5:f3:86:82:8d:10:3a:80:c9:c6:b3:c0: 1e:e4:98:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNDI0MTYxMDA5WhcNMjUwNTAxMTYxMDA5WjAYMRYwFAYD VQQDEw02ODBhNjI2MS1mY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ArTE4zyuaMd8TTj3TcD1izAIRxbeq53lzN1dI0ZTG5jPhO4N7xj3VTf/3jA rO2mWHRdY9z/HDcThIusorFCG9pQevxUVSPJIsfkAjVuEZTy1l55YYCFkszrhbE4 2cMunn7p4spAQPBEOv86ujXYZG++dyHn82F2R64GxHGnla6y14Q0xHfuSmn7ApNi VL8RQpqk8sQEdFbagmavuUCJmcxC9Aah2/B5z260+DXNtvvtunEVZV1K3W32vwE8 q/uz6fVkOjzlhnJBIKSaCwYRNMLmlGrA7fhcAKe2hskTj8GmJ2uxJwGyb6ip2ict lc77n125RmSnLzTeDhj5Rh4kWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO57evzl e+A6YaAkTKBuFRTmmtL2MB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0VXFOY7g9OS5URj+sNQWjUEfALp0+mHVlZ+zsoYOG6jDN44Ba3nBA DRm0faAFEPFoscu/obhwFZlHKCJVUQQ3EOnd/zlUSqf+8nOij3qeWCpIAgiDaquz jWHLZ1aCOsyj2kh2S6LS7hoQ4MLwUfjT8XoH5u9GmZVRU//13F/dg2UDtwv5sPAr NoB7CrT4qbG26OQvySeBzEUsZoc9XppottxlJOPHNajAKh2cLNGajXNoHCWazcAe EoTxPQ+FxkWCV2dMhGMzktNpnOkO6ChmqIo1IcOaJwc+Kd3vkUApTDvztESOKllb W5jUau0/Hibl84aCjRA6gMnGs8Ae5Jgb -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:26 2025 by rpki-client on console.sobornost.net