$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: X535o/x2FVfNCZT6XGvF6rcvrxgpThX+Gd5QJ8YkZxU= Subject key identifier: 1A:A8:1F:47:56:BC:F2:68:3B:5B:FB:04:5C:70:1B:C6:BC:92:3A:7E Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1229 Signing time: Sun 04 May 2025 19:32:10 +0000 Manifest this update: Sun 04 May 2025 19:32:10 +0000 Manifest next update: Sun 11 May 2025 19:32:09 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: k0vLRFu0OApAv9cPM7JLa/n3elWkDwGVGKZQodv3nQg=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: m9vtjIJIq2t72L0Goc5PW0dIrS3vnSSj4P2xta8ZeoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: May 4 19:32:10 2025 GMT Not After : May 11 19:32:09 2025 GMT Subject: CN=6817c0ba-3dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:ff:ff:7d:62:9f:01:40:66:df:1c:91:32: c2:a5:b0:e5:1c:ed:a9:c5:29:38:95:3b:e1:95:62: 41:f3:21:a5:72:58:54:ae:fa:ed:5b:84:4c:e8:60: 4c:be:bf:d2:01:e7:f8:b2:cc:cb:85:7b:33:72:d9: 0f:6f:6a:ab:52:45:6c:b3:7d:89:47:07:21:6c:28: 49:fc:d6:8f:35:cf:f1:a9:57:7b:d7:94:10:ca:12: 3c:aa:3f:ac:58:7e:2c:82:0a:0e:97:62:3e:d8:d9: d1:9f:da:29:89:49:ae:21:d9:ab:44:fd:66:fb:94: cc:a6:e4:cd:65:cd:ba:10:2a:7e:bb:3f:35:b3:94: 88:ac:97:b9:c8:ec:97:1c:cc:cb:3a:2b:90:15:71: e2:55:31:34:12:90:b9:5a:21:6d:91:e3:89:11:0b: 43:81:df:d8:ad:79:a9:8b:60:49:d7:6a:2c:85:d8: 18:df:83:ab:4f:63:22:2a:cd:ee:67:14:de:08:83: ae:7e:ef:31:fb:65:2f:05:48:d1:62:bb:cf:1f:8c: ad:0a:e0:d4:14:e4:30:3a:e3:b9:8f:d2:3c:ce:36: 33:a4:8d:5d:ac:89:48:ce:fa:63:57:c0:96:36:de: 48:3e:9b:9c:45:f9:01:05:d4:5a:ce:e0:92:57:d3: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:1F:47:56:BC:F2:68:3B:5B:FB:04:5C:70:1B:C6:BC:92:3A:7E X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:28:1f:97:a9:e9:39:33:d5:d4:97:05:89:d5:78:50:d1:95: 05:53:c1:30:a6:f9:da:b1:74:e5:81:a1:ba:42:b1:38:86:eb: 54:e6:af:b5:2a:94:3b:fc:16:41:c2:33:89:5e:64:71:de:a4: 79:57:d2:23:18:dc:6d:4e:f2:df:18:85:1c:18:ca:fe:c2:1e: bd:07:56:29:d5:2c:bf:8b:6a:0d:a7:22:5e:52:b7:90:37:0d: 3a:5d:2a:78:51:d8:72:52:a1:df:5f:3f:6f:fa:83:4d:ba:d0: ab:41:ea:9a:a5:65:e7:21:4b:f9:3a:d1:0e:9d:b9:02:b2:21: ca:d8:a1:f2:a5:6c:c0:74:cc:6b:b7:6c:49:b4:86:95:8c:f5: 0d:86:7a:83:94:df:62:cc:87:8b:22:9b:6a:33:fb:42:51:be: 3a:92:3f:8d:d6:a9:86:8e:86:5d:7c:2f:10:f5:d4:b4:bb:4e: 63:0e:70:8e:28:ac:f3:fe:f1:f0:c8:5b:6f:6e:07:26:ab:fb: 0b:56:b9:81:f0:cc:67:66:23:c5:3b:53:3c:54:94:05:42:e1: 94:df:cb:c2:69:92:bc:bc:96:dd:fd:52:6d:08:aa:0c:f1:f3: 45:e2:06:14:1a:c9:6f:fe:7e:dd:d4:0a:43:93:27:e2:d9:f8: 0b:14:b1:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwNTA0MTkzMjEwWhcNMjUwNTExMTkzMjA5WjAYMRYwFAYD VQQDEw02ODE3YzBiYS0zZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oH//31inwFAZt8ckTLCpbDlHO2pxSk4lTvhlWJB8yGlclhUrvrtW4RM6GBM vr/SAef4sszLhXszctkPb2qrUkVss32JRwchbChJ/NaPNc/xqVd715QQyhI8qj+s WH4sggoOl2I+2NnRn9opiUmuIdmrRP1m+5TMpuTNZc26ECp+uz81s5SIrJe5yOyX HMzLOiuQFXHiVTE0EpC5WiFtkeOJEQtDgd/YrXmpi2BJ12oshdgY34OrT2MiKs3u ZxTeCIOufu8x+2UvBUjRYrvPH4ytCuDUFOQwOuO5j9I8zjYzpI1drIlIzvpjV8CW Nt5IPpucRfkBBdRazuCSV9PVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqoH0dW vPJoO1v7BFxwG8a8kjp+MB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWKB+Xqek5M9XUlwWJ1XhQ0ZUFU8EwpvnasXTlgaG6QrE4hutU5q+1 KpQ7/BZBwjOJXmRx3qR5V9IjGNxtTvLfGIUcGMr+wh69B1Yp1Sy/i2oNpyJeUreQ Nw06XSp4UdhyUqHfXz9v+oNNutCrQeqapWXnIUv5OtEOnbkCsiHK2KHypWzAdMxr t2xJtIaVjPUNhnqDlN9izIeLIptqM/tCUb46kj+N1qmGjoZdfC8Q9dS0u05jDnCO KKzz/vHwyFtvbgcmq/sLVrmB8MxnZiPFO1M8VJQFQuGU38vCaZK8vJbd/VJtCKoM 8fNF4gYUGslv/n7d1ApDkyfi2fgLFLG9 -----END CERTIFICATE-----Generated at Sun May 4 23:49:50 2025 by rpki-client on console.sobornost.net