$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: dlG8UzTnNCMoIGp9jNnVJzCoraW1pZjYnTGcgFZZZ8Y= Subject key identifier: 8C:9B:01:58:AD:B3:7C:31:AE:6F:A8:72:82:40:BD:3A:9D:62:B8:3E Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 0454 Signing time: Sat 26 Apr 2025 23:50:01 +0000 Manifest this update: Sat 26 Apr 2025 23:50:01 +0000 Manifest next update: Sat 03 May 2025 23:50:01 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: HOJOje3OLkF8gDwJZTG/pap0Isx5Oow51lM7IqfVMTs=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: Apr 26 23:50:01 2025 GMT Not After : May 3 23:50:01 2025 GMT Subject: CN=680d7129-dbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:3f:2a:79:62:e6:7a:16:f2:1c:1e:82:fe: 1a:4c:4d:89:9e:74:9f:5d:76:e4:9b:ba:03:22:38: 05:0c:dd:8b:c1:e7:f9:72:49:59:6f:2b:be:dd:9a: cf:cc:41:ff:ef:50:7c:c4:69:4b:4b:a2:fb:1d:e2: ba:5d:e3:63:3c:f4:66:97:4f:74:ab:6c:59:c9:5e: f8:77:c2:37:e2:66:37:0b:64:ea:cf:7d:93:73:ae: 76:ee:d6:12:2e:c0:4b:e8:ce:1f:36:9c:73:0f:ad: 76:25:fe:a0:5d:32:4a:97:79:19:ef:33:fc:80:66: da:03:99:dc:a0:5e:cf:fc:4a:f3:a0:a3:d9:5b:db: 44:a0:15:c4:ad:76:57:47:b2:40:f0:39:a9:22:ee: 07:5a:8a:ce:74:db:bc:c5:23:91:00:96:d5:9b:4c: 55:6b:58:75:cb:b2:96:57:fa:4a:80:c0:1a:79:7b: f7:a8:74:e4:0e:82:dc:0f:54:3b:d0:73:2b:db:cf: 4b:07:b5:8b:7a:81:8a:72:4b:c5:96:3a:6f:11:20: 10:8c:78:d2:5b:67:5a:69:2f:42:49:f4:36:e9:db: 6e:f4:e8:4f:ef:ea:28:11:96:96:b3:16:35:f5:c0: 09:70:cf:73:51:ae:23:60:f2:5b:91:92:25:38:5a: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:01:58:AD:B3:7C:31:AE:6F:A8:72:82:40:BD:3A:9D:62:B8:3E X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0b:be:87:1b:dd:dc:88:f2:3a:87:dd:13:31:28:e4:d7:ca: f3:71:5f:13:bc:48:05:98:4b:ae:26:f2:fa:b7:cb:ec:bf:d9: 3e:82:5e:56:b1:73:3a:57:e4:fe:1a:76:56:09:57:04:5f:e7: 08:ef:bf:e3:cc:91:bd:22:a0:78:48:49:b9:be:71:98:cc:35: f1:d5:43:c6:8a:4a:3a:26:52:19:2f:4d:8e:f0:c7:d5:9d:70: 5c:e3:5f:cf:f7:a8:b5:5c:59:07:23:d2:46:59:04:20:28:97: 58:86:b4:0c:29:cf:c1:b0:69:24:c5:5d:e7:6c:45:57:04:bf: c8:4d:21:e1:42:78:6a:a4:2d:e7:4c:54:fa:49:8b:e3:23:64: 13:3c:12:ec:52:d4:72:df:b2:9e:d8:2c:5c:4a:c2:7c:4d:ca: 37:0c:59:73:42:57:d3:f4:d2:c5:83:d2:79:d2:a0:fa:b7:ed: d6:1d:ad:d0:3d:7a:18:e2:99:f4:85:21:e7:c8:b7:f9:a9:b9: de:1e:41:96:ff:c1:33:d8:85:2f:d2:99:74:8d:1a:1f:c5:1d: 5d:87:96:a5:b0:b3:51:40:73:81:4a:8c:56:1d:84:86:52:1b: 3d:a5:f7:ad:d4:0b:ea:1f:af:d3:a4:b0:0e:51:67:98:c5:b1: 5f:79:5e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwNDI2MjM1MDAxWhcNMjUwNTAzMjM1MDAxWjAYMRYwFAYD VQQDEw02ODBkNzEyOS1kYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvY/Knli5noW8hwegv4aTE2JnnSfXXbkm7oDIjgFDN2Lwef5cklZbyu+3ZrP zEH/71B8xGlLS6L7HeK6XeNjPPRml090q2xZyV74d8I34mY3C2Tqz32Tc6527tYS LsBL6M4fNpxzD612Jf6gXTJKl3kZ7zP8gGbaA5ncoF7P/ErzoKPZW9tEoBXErXZX R7JA8DmpIu4HWorOdNu8xSORAJbVm0xVa1h1y7KWV/pKgMAaeXv3qHTkDoLcD1Q7 0HMr289LB7WLeoGKckvFljpvESAQjHjSW2daaS9CSfQ26dtu9OhP7+ooEZaWsxY1 9cAJcM9zUa4jYPJbkZIlOFonJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIybAVit s3wxrm+ocoJAvTqdYrg+MB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEC76HG93ciPI6h90TMSjk18rzcV8TvEgFmEuuJvL6t8vsv9k+gl5W sXM6V+T+GnZWCVcEX+cI77/jzJG9IqB4SEm5vnGYzDXx1UPGiko6JlIZL02O8MfV nXBc41/P96i1XFkHI9JGWQQgKJdYhrQMKc/BsGkkxV3nbEVXBL/ITSHhQnhqpC3n TFT6SYvjI2QTPBLsUtRy37Ke2CxcSsJ8Tco3DFlzQlfT9NLFg9J50qD6t+3WHa3Q PXoY4pn0hSHnyLf5qbneHkGW/8Ez2IUv0pl0jRofxR1dh5alsLNRQHOBSoxWHYSG Uhs9pfet1AvqH6/TpLAOUWeYxbFfeV7G -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net