$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft File: 9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json) Hash identifier: qWOwRICJLaYP+C7Rs6sNIXHcT1to0oz7d1EimSqnGAE= Subject key identifier: B4:D3:D0:E7:72:E5:7E:C6:A9:BC:C7:EB:0E:99:E9:E5:AB:E5:A6:41 Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft Manifest number: 0896 Signing time: Sat 26 Apr 2025 20:22:03 +0000 Manifest this update: Sat 26 Apr 2025 20:22:02 +0000 Manifest next update: Sat 03 May 2025 20:22:02 +0000 Files and hashes: 1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: pKc/0h1TBeBYG8Jbpo6yXPkEfqj8is5FJtM/Xj0US7Y=) 2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=) 3: A069584E32B311EF809D8B35C4F9AE02.roa (hash: Gw0kNl2t8PieKLC+KrgxefhotSeMoj6pQV0MiEUUWsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC510, serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Validity Not Before: Apr 26 20:22:02 2025 GMT Not After : May 3 20:22:02 2025 GMT Subject: CN=680d406b-6a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:e7:37:e5:60:6a:a8:03:96:14:e7:60:f6: 70:fe:a2:c2:fe:1e:e1:1e:aa:4b:fb:18:ee:1c:2a: de:95:45:a0:f0:98:64:b6:3e:ca:69:30:82:a0:8a: 56:d4:fc:f5:a1:a9:ee:3d:fd:f8:87:9d:4c:07:51: a8:80:dc:bd:9b:cb:b6:df:7e:16:27:de:e9:96:ae: c6:61:3f:d6:a1:72:e2:90:51:62:d3:8b:6e:97:2f: 1a:e7:30:dd:cf:36:2e:2b:f3:ce:a5:f7:05:ca:c3: 58:54:dc:a5:ec:ae:d2:cb:ad:bd:26:0d:c2:99:1b: 5a:dd:90:77:3a:95:cd:86:75:6c:e4:ca:64:30:a7: 4d:ae:a9:e8:93:0c:4a:79:8c:51:ed:f0:26:91:3f: 45:91:c7:10:bf:3c:60:01:41:b0:e3:0e:b0:b6:27: d7:5e:f6:7a:71:9d:fb:8a:ab:e4:06:fd:cd:21:a1: d5:aa:90:a1:de:3f:c0:cc:5b:ed:89:71:12:26:15: 71:db:1f:54:71:a7:57:b4:2c:db:87:bc:93:2b:62: 01:9d:ea:18:e5:e9:6a:f5:b0:6e:3d:40:60:10:0a: e0:65:8f:5f:db:15:c8:50:4a:6e:82:aa:03:1b:23: 41:26:8a:44:54:e0:01:3b:fd:97:bc:a3:91:0e:2d: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D3:D0:E7:72:E5:7E:C6:A9:BC:C7:EB:0E:99:E9:E5:AB:E5:A6:41 X509v3 Authority Key Identifier: keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3f:5a:4f:b3:eb:0d:6a:c1:04:8b:c7:3e:65:5a:a0:d3:8e: 7d:d0:d1:7f:98:28:f7:aa:ec:06:91:58:c7:fc:b9:fe:7d:23: e7:91:b4:c8:1e:7a:a3:92:27:ef:47:30:9e:d7:39:cb:39:fe: 01:ea:4c:ed:00:d6:da:1e:50:b7:ff:61:4e:59:dc:48:88:c7: 50:9d:93:37:d1:f9:e5:11:e1:87:46:36:71:6c:8f:58:15:38: b4:e5:82:ad:33:d6:c9:f1:cf:73:16:a7:35:8d:fb:d6:1c:5b: 46:4a:d9:4c:29:9d:21:4a:0d:ab:fe:3d:62:21:22:d6:8a:ea: 54:68:dd:a9:b6:06:43:01:6f:5f:cb:89:08:89:09:16:04:f4: b3:cc:f4:ea:0b:0c:bf:29:d0:88:76:d0:83:a2:5c:a3:6b:69: 6f:5e:fa:dd:5a:0f:5d:90:c1:cd:f9:2b:b2:4d:f2:2c:1f:95: 13:2d:d7:71:c7:6e:61:a6:7d:86:09:0c:f6:5b:2b:19:e8:63: 4e:2a:6e:ea:1a:12:c4:cc:e6:c4:fa:bb:7e:6e:10:92:ac:6f: 33:72:49:4b:b5:e4:b0:21:d1:30:16:24:63:65:32:81:56:73: 47:25:70:f4:06:c4:78:ae:8a:54:a9:58:81:5d:97:81:83:be: 4b:dd:fa:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF MDA3RDc5NTMwHhcNMjUwNDI2MjAyMjAyWhcNMjUwNTAzMjAyMjAyWjAYMRYwFAYD VQQDEw02ODBkNDA2Yi02YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8nnN+VgaqgDlhTnYPZw/qLC/h7hHqpL+xjuHCrelUWg8Jhktj7KaTCCoIpW 1Pz1oanuPf34h51MB1GogNy9m8u2334WJ97plq7GYT/WoXLikFFi04tuly8a5zDd zzYuK/POpfcFysNYVNyl7K7Sy629Jg3CmRta3ZB3OpXNhnVs5MpkMKdNrqnokwxK eYxR7fAmkT9FkccQvzxgAUGw4w6wtifXXvZ6cZ37iqvkBv3NIaHVqpCh3j/AzFvt iXESJhVx2x9UcadXtCzbh7yTK2IBneoY5elq9bBuPUBgEArgZY9f2xXIUEpugqoD GyNBJopEVOABO/2XvKORDi1goQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTT0Ody 5X7GqbzH6w6Z6eWr5aZBMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/P1pPs+sNasEEi8c+ZVqg04590NF/mCj3quwGkVjH/Ln+fSPnkbTI HnqjkifvRzCe1znLOf4B6kztANbaHlC3/2FOWdxIiMdQnZM30fnlEeGHRjZxbI9Y FTi05YKtM9bJ8c9zFqc1jfvWHFtGStlMKZ0hSg2r/j1iISLWiupUaN2ptgZDAW9f y4kIiQkWBPSzzPTqCwy/KdCIdtCDolyja2lvXvrdWg9dkMHN+SuyTfIsH5UTLddx x25hpn2GCQz2WysZ6GNOKm7qGhLEzObE+rt+bhCSrG8zcklLteSwIdEwFiRjZTKB VnNHJXD0BsR4ropUqViBXZeBg75L3fqU -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net