$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: hxvMa5JsZ5FAWF3CaHbP4U0KaSr3IpyuXwmr1tkFWAg= Subject key identifier: 4C:AE:48:1A:04:1E:AA:05:E9:52:2E:35:CB:B9:44:C7:79:70:6C:80 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0EE4 Signing time: Sat 26 Apr 2025 21:10:30 +0000 Manifest this update: Sat 26 Apr 2025 21:10:30 +0000 Manifest next update: Sat 03 May 2025 21:10:30 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: 6BbC9FMZGPrOiaLieHSqNOTD/LEANCD91HHcnnXtHOs=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Apr 26 21:10:30 2025 GMT Not After : May 3 21:10:30 2025 GMT Subject: CN=680d4bc6-14fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:65:7c:27:a1:cb:0f:14:69:26:b5:4f:4b: 2d:7f:49:ff:1c:11:8e:c7:a4:09:f1:60:16:47:fc: 9a:9a:ba:c9:45:e6:c5:54:92:48:3a:cf:45:6f:d5: ed:59:ad:49:5b:8a:c9:aa:b0:57:1b:01:b3:1b:bc: 30:0b:bd:9f:b3:7b:43:d2:93:eb:27:ca:a8:d2:23: 94:4d:03:ba:bf:61:d8:86:73:70:5a:03:45:7d:2d: d3:86:1f:1d:d5:18:3c:bd:92:ed:cf:f1:f3:4b:0a: 19:c8:d6:25:de:91:f0:e5:e2:34:0c:e6:9d:78:d6: 3b:df:17:5d:2a:4d:40:a2:05:e7:02:6a:f4:03:6b: 0b:27:61:8c:41:6b:97:a7:fa:8b:37:48:93:65:89: 17:b9:34:1f:d0:b5:53:d5:9b:f6:28:2d:01:9a:f1: ca:af:82:75:66:b3:51:1e:55:a2:36:70:f0:f7:ae: e1:7a:63:01:c6:89:c2:8f:74:d1:e8:af:e9:c7:3d: 4c:ba:d2:38:9b:bc:60:c8:a2:7d:cb:49:da:54:f5: 7f:91:55:70:2f:78:12:7a:c4:54:73:b0:23:47:09: d6:6f:ff:ec:89:25:1f:33:52:42:a9:84:83:5c:05: f6:c1:77:59:bd:a0:67:fa:fc:0f:17:aa:d4:04:fb: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:48:1A:04:1E:AA:05:E9:52:2E:35:CB:B9:44:C7:79:70:6C:80 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:52:0f:43:bf:81:76:5f:bc:09:28:d1:92:b8:94:d5:7c:5a: 97:ff:7d:d1:7f:fa:2e:c2:8f:c4:6f:58:e4:0c:b8:e6:ac:85: 3c:49:d9:04:4c:32:1c:51:10:ac:29:4d:88:b3:8b:9f:d8:1a: cf:db:f4:1e:c0:a6:85:6a:2b:97:dd:14:68:d0:38:eb:14:0b: f8:68:23:cd:e1:9e:c5:8c:6f:25:d3:4a:90:5e:6f:41:3c:fe: 5b:ef:fc:56:d5:99:2b:77:ea:7f:c4:be:bc:8a:b3:f2:47:8b: e2:55:95:fb:0a:4e:40:53:ca:d3:d0:c7:9a:7c:ad:04:3d:05: 4f:0c:f1:03:fe:0c:14:74:1f:d7:9d:4a:44:2c:ac:49:9d:79: 46:cd:1d:90:bc:09:02:e1:18:90:fe:95:8f:3c:26:bd:db:82: a7:6b:45:6d:33:dc:dd:35:a0:af:af:8c:90:17:82:c0:17:51: d6:7c:0b:33:5c:77:4a:c8:b6:69:03:3a:0c:dc:ae:d9:74:c2: 19:33:59:bb:4d:60:65:bd:73:fd:bd:07:b9:79:23:25:8c:43: 7d:30:64:4d:a3:ef:fc:2f:10:0f:dd:00:61:f2:55:5d:48:fd: 16:6c:9f:b9:73:74:c3:b5:15:a0:55:3f:23:8f:2a:44:2e:ca: 79:27:e4:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwNDI2MjExMDMwWhcNMjUwNTAzMjExMDMwWjAYMRYwFAYD VQQDEw02ODBkNGJjNi0xNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WZlfCehyw8UaSa1T0stf0n/HBGOx6QJ8WAWR/yamrrJRebFVJJIOs9Fb9Xt Wa1JW4rJqrBXGwGzG7wwC72fs3tD0pPrJ8qo0iOUTQO6v2HYhnNwWgNFfS3Thh8d 1Rg8vZLtz/HzSwoZyNYl3pHw5eI0DOadeNY73xddKk1AogXnAmr0A2sLJ2GMQWuX p/qLN0iTZYkXuTQf0LVT1Zv2KC0BmvHKr4J1ZrNRHlWiNnDw967hemMBxonCj3TR 6K/pxz1MutI4m7xgyKJ9y0naVPV/kVVwL3gSesRUc7AjRwnWb//siSUfM1JCqYSD XAX2wXdZvaBn+vwPF6rUBPsPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyuSBoE HqoF6VIuNcu5RMd5cGyAMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Ug9Dv4F2X7wJKNGSuJTVfFqX/33Rf/ouwo/Eb1jkDLjmrIU8SdkE TDIcURCsKU2Is4uf2BrP2/QewKaFaiuX3RRo0DjrFAv4aCPN4Z7FjG8l00qQXm9B PP5b7/xW1Zkrd+p/xL68irPyR4viVZX7Ck5AU8rT0MeafK0EPQVPDPED/gwUdB/X nUpELKxJnXlGzR2QvAkC4RiQ/pWPPCa924Kna0VtM9zdNaCvr4yQF4LAF1HWfAsz XHdKyLZpAzoM3K7ZdMIZM1m7TWBlvXP9vQe5eSMljEN9MGRNo+/8LxAP3QBh8lVd SP0WbJ+5c3TDtRWgVT8jjypELsp5J+QQ -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net