$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: SMigQsDi0R3C3RMc+E9/jYHJkNh5K4/oSRDX9m98kys= Subject key identifier: 5D:FF:DE:6B:8A:CD:BA:BF:55:6E:53:BC:B9:AD:47:DB:B0:E8:A9:84 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C8A Signing time: Mon 28 Apr 2025 18:29:25 +0000 Manifest this update: Mon 28 Apr 2025 18:29:24 +0000 Manifest next update: Mon 05 May 2025 18:29:24 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: bYl9hRz5KpdoFUqfQYC4DPFSNpQgUwQAlhpk7fLZJt4=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: XBCRIujbmqCZAO+evWS2z7S/+660XMC7RMeYNEWozlk=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: EHmZXLxVsief8zLb3cKkbfGcRs3h6H923HKwEbsQt7I=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: GO1uvSUSs2KlKPAfKRLY58uFyr43GGZE9D5pAlewhKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 28 18:29:24 2025 GMT Not After : May 5 18:29:24 2025 GMT Subject: CN=680fc905-1937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:39:db:a1:e3:3e:ab:29:4f:dc:f5:6d:dd: f8:1b:ae:04:fb:d6:3d:bc:1e:13:d8:71:5a:f9:a2: a9:ce:49:d4:0c:a5:60:6a:94:87:5c:fb:ff:28:f4: 1f:b3:83:84:b2:e9:15:78:2e:3f:e5:45:d3:09:d9: a5:31:fe:63:c7:a1:d5:ea:5c:5c:92:e2:f1:2b:43: 6e:0b:64:16:17:3f:12:dc:e2:b5:be:a6:0e:7a:f0: 97:29:32:94:f0:1e:9a:63:3c:06:55:11:78:1d:ba: 1c:6e:fc:63:37:74:e0:aa:4b:1a:89:ed:28:e1:9c: 46:8c:2b:00:98:33:cb:4f:d2:39:a1:a6:b3:34:30: 55:af:7b:95:c7:ca:06:ef:00:46:62:56:c1:35:6f: a9:42:57:c0:cc:08:f4:71:4f:57:9f:56:16:f5:6f: 3b:20:aa:50:2c:48:b7:81:2b:85:df:9a:3d:e1:87: 7a:11:5f:ce:2d:77:ac:c5:2d:b6:fc:ba:c2:29:1c: c2:33:94:01:77:14:bc:3e:c0:28:d7:69:98:5f:61: e1:9d:5b:54:38:bc:0d:82:95:ae:0a:48:fb:1a:5b: 6e:d1:4b:75:7c:83:eb:5f:dd:36:6a:60:5e:94:b9: 82:96:a1:55:fb:6a:df:ae:aa:c1:eb:93:00:7b:44: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:DE:6B:8A:CD:BA:BF:55:6E:53:BC:B9:AD:47:DB:B0:E8:A9:84 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:79:07:7a:de:eb:68:72:c9:8d:bb:ad:89:f8:8b:50:58:e5: 8f:5f:58:b8:fc:7e:55:68:ef:66:49:dc:2a:d8:87:59:62:7a: 6f:3d:37:7a:ae:f7:eb:2b:77:7a:79:15:fe:49:02:b0:23:82: 26:a6:bc:22:f9:04:27:ff:1d:60:34:1e:8d:dc:e6:5c:e3:52: 75:b7:7d:2d:bc:2a:f4:3a:47:ef:30:60:26:ba:1f:48:e6:9b: 9f:31:15:f6:3d:fd:d1:e5:b3:ed:49:22:85:89:68:3d:c0:24: 91:51:c9:78:4f:e5:40:9f:b4:ee:59:d8:07:d5:6f:cb:7b:25: 43:49:d3:3f:51:e1:5e:5b:00:e0:de:3d:e4:28:e4:44:de:e1: c8:56:f9:e0:9b:6c:d4:14:0c:72:82:36:62:5b:fb:2c:5d:b9: c0:d7:48:e9:2f:58:c6:66:e3:29:52:ac:5b:74:6e:60:ee:b7: 04:20:48:60:72:a6:a7:62:7a:1e:bf:32:e9:ea:b2:84:09:a1: fe:01:5a:7f:7c:5e:6b:3c:ef:72:bf:17:8e:9f:76:54:bc:15: 9a:e9:d7:e4:d4:43:92:0c:70:46:21:b1:26:be:1b:73:c2:c9: 8a:c1:ff:92:f4:ae:72:ee:f3:b0:f6:25:6c:19:1f:6c:05:76: fa:06:0a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNDI4MTgyOTI0WhcNMjUwNTA1MTgyOTI0WjAYMRYwFAYD VQQDEw02ODBmYzkwNS0xOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0U526HjPqspT9z1bd34G64E+9Y9vB4T2HFa+aKpzknUDKVgapSHXPv/KPQf s4OEsukVeC4/5UXTCdmlMf5jx6HV6lxckuLxK0NuC2QWFz8S3OK1vqYOevCXKTKU 8B6aYzwGVRF4HbocbvxjN3Tgqksaie0o4ZxGjCsAmDPLT9I5oaazNDBVr3uVx8oG 7wBGYlbBNW+pQlfAzAj0cU9Xn1YW9W87IKpQLEi3gSuF35o94Yd6EV/OLXesxS22 /LrCKRzCM5QBdxS8PsAo12mYX2HhnVtUOLwNgpWuCkj7Gltu0Ut1fIPrX902amBe lLmClqFV+2rfrqrB65MAe0SDewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3/3muK zbq/VW5TvLmtR9uw6KmEMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHeQd63utocsmNu62J+ItQWOWPX1i4/H5VaO9mSdwq2IdZYnpvPTd6 rvfrK3d6eRX+SQKwI4Imprwi+QQn/x1gNB6N3OZc41J1t30tvCr0OkfvMGAmuh9I 5pufMRX2Pf3R5bPtSSKFiWg9wCSRUcl4T+VAn7TuWdgH1W/LeyVDSdM/UeFeWwDg 3j3kKORE3uHIVvngm2zUFAxygjZiW/ssXbnA10jpL1jGZuMpUqxbdG5g7rcEIEhg cqanYnoevzLp6rKECaH+AVp/fF5rPO9yvxeOn3ZUvBWa6dfk1EOSDHBGIbEmvhtz wsmKwf+S9K5y7vOw9iVsGR9sBXb6BgpE -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net