$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json) Hash identifier: MD/WctsyG/nhEdiUrAkapiQfN5JDWKbOg4Oi2ZdFetw= Subject key identifier: 91:F3:1B:F1:1F:FA:9C:11:47:3C:F4:12:20:AA:BD:43:97:51:2F:FB Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft Manifest number: 0124 Signing time: Sun 27 Apr 2025 03:37:15 +0000 Manifest this update: Sun 27 Apr 2025 03:37:14 +0000 Manifest next update: Sun 04 May 2025 03:37:14 +0000 Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: znm7yJM7YSlcjnAHWWOn3jrxGuz0ocq86NG88nATvCM=) 2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Validity Not Before: Apr 27 03:37:14 2025 GMT Not After : May 4 03:37:14 2025 GMT Subject: CN=680da66b-0c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:c4:62:64:70:e0:40:5d:58:69:ba:06:27: 6b:5c:26:be:39:18:92:0c:b2:3e:37:35:c1:6c:44: d0:06:53:45:3f:23:78:b6:0e:45:4d:91:f9:e9:e7: 5a:cc:ed:20:5e:46:49:5a:e0:4f:b1:1b:b1:14:99: ab:70:6a:d9:20:6c:5d:bc:97:6d:b6:4f:d6:0c:d8: 5c:83:b2:f0:51:6a:fa:ef:f8:e6:a2:40:ab:d8:e6: dc:23:59:d6:b7:47:0d:47:70:c1:e2:67:7d:78:83: 93:be:75:97:7d:1f:81:ea:1f:25:fb:66:22:78:0f: 6c:d5:45:34:e0:3e:70:04:ea:c9:e9:52:8e:36:0e: 65:b9:5d:42:2e:27:d2:f8:46:ae:8e:89:ad:21:7a: e5:85:7f:9b:d9:59:29:1b:9b:7a:b5:94:a8:71:15: e2:ec:a9:8a:ce:70:b9:7f:3e:90:46:83:5c:b6:d0: 1b:f4:08:d5:bc:31:37:20:a2:91:9e:8f:5a:63:f4: 1c:38:7c:88:0b:61:51:12:1a:33:66:ca:9b:2c:88: 1f:1c:90:96:97:ba:91:a5:17:06:48:93:ea:2f:0e: 3f:81:d2:64:4e:0f:c6:f1:41:17:97:54:de:bf:59: 77:be:1c:3f:74:ed:1f:97:5b:a4:ab:c1:d3:3b:fd: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:1B:F1:1F:FA:9C:11:47:3C:F4:12:20:AA:BD:43:97:51:2F:FB X509v3 Authority Key Identifier: keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:87:d6:d7:d4:88:ed:93:2d:86:2b:a8:23:86:e2:7c:fa:0c: 0e:d7:c5:f9:63:30:e5:dc:cd:6b:55:8c:bb:46:40:3c:cc:a3: 04:62:e8:13:dd:c0:20:64:ad:48:6c:db:c3:7f:eb:6a:ac:eb: 29:8a:d4:63:f0:e1:21:66:3c:c4:a6:77:38:ac:5d:86:80:cf: 33:3b:1d:dd:a8:43:d1:cc:59:41:4b:a6:f7:56:3f:7a:fd:89: 1a:90:87:e7:da:dd:ab:16:69:9f:b2:82:3f:5a:f2:a4:86:65: 23:5c:73:bb:67:7f:f7:ea:7f:1d:7d:cf:18:6e:2e:38:21:d9: 6e:8f:4e:be:f0:8d:ad:e0:86:56:ea:a0:1d:ad:e2:9c:56:f4: a0:7c:0c:df:5f:fb:b0:8e:6e:75:02:aa:e1:29:46:4a:d2:9f: b0:6c:de:75:1a:58:b3:7c:1b:8b:da:c2:64:6c:e2:72:50:48: 98:09:91:bd:31:e7:de:70:1d:07:f0:13:e4:97:72:b1:9b:45: fb:a1:5a:1f:d1:98:32:85:74:a6:13:8a:49:f7:d2:72:82:25: f1:37:73:b6:54:c4:79:54:98:e7:91:97:a1:05:74:f1:4d:77: f8:cf:d8:c5:70:f4:71:c6:e5:18:99:3d:b7:13:eb:c3:72:fa: 6e:7e:d9:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MTUxMTAvBgNVBAUTKDZEQTJFN0IyMDczN0Q2RkREQTI5MzExODAzMjMzODRE QzdGODAxNzIwHhcNMjUwNDI3MDMzNzE0WhcNMjUwNTA0MDMzNzE0WjAYMRYwFAYD VQQDEw02ODBkYTY2Yi0wYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbnEYmRw4EBdWGm6BidrXCa+ORiSDLI+NzXBbETQBlNFPyN4tg5FTZH56eda zO0gXkZJWuBPsRuxFJmrcGrZIGxdvJdttk/WDNhcg7LwUWr67/jmokCr2ObcI1nW t0cNR3DB4md9eIOTvnWXfR+B6h8l+2YieA9s1UU04D5wBOrJ6VKONg5luV1CLifS +EaujomtIXrlhX+b2VkpG5t6tZSocRXi7KmKznC5fz6QRoNcttAb9AjVvDE3IKKR no9aY/QcOHyIC2FREhozZsqbLIgfHJCWl7qRpRcGSJPqLw4/gdJkTg/G8UEXl1Te v1l3vhw/dO0fl1ukq8HTO/04kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHzG/Ef +pwRRzz0EiCqvUOXUS/7MB8GA1UdIwQYMBaAFG2i57IHN9b92ikxGAMjOE3H+AFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQxNS82NEI3NzYyRTY3 QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2M2FLVEVZQXlNNFRjZjRB WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhTG5zZ2MzMXYzYUtURVlBeU00VGNmNEFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQxNS82NEI3NzYyRTY3QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2 M2FLVEVZQXlNNFRjZjRBWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHh9bX1Ijtky2GK6gjhuJ8+gwO18X5YzDl3M1rVYy7RkA8zKMEYugT 3cAgZK1IbNvDf+tqrOspitRj8OEhZjzEpnc4rF2GgM8zOx3dqEPRzFlBS6b3Vj96 /YkakIfn2t2rFmmfsoI/WvKkhmUjXHO7Z3/36n8dfc8Ybi44Idluj06+8I2t4IZW 6qAdreKcVvSgfAzfX/uwjm51AqrhKUZK0p+wbN51GlizfBuL2sJkbOJyUEiYCZG9 MefecB0H8BPkl3Kxm0X7oVof0ZgyhXSmE4pJ99JygiXxN3O2VMR5VJjnkZehBXTx TXf4z9jFcPRxxuUYmT23E+vDcvpuftk/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net