$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: PX23c11ayb240OO1yknbX8Yzhu9f86ixTAu4DpCdElU= Subject key identifier: 43:86:8C:FD:8B:4E:D4:C6:F0:BA:A5:35:1E:0B:19:5D:7E:3F:81:65 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 025E Signing time: Sun 27 Apr 2025 01:24:18 +0000 Manifest this update: Sun 27 Apr 2025 01:24:17 +0000 Manifest next update: Sun 04 May 2025 01:24:17 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: ZGPRPRo8jCe96JX2BUwaDlQOLy+8lNk5bcR7PwKmsyk=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Apr 27 01:24:17 2025 GMT Not After : May 4 01:24:17 2025 GMT Subject: CN=680d8741-2e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:94:9c:d4:fe:f3:de:55:db:f1:34:cc:36: 92:45:79:b0:52:92:3b:73:b5:f7:c2:02:60:f9:26: 37:43:ba:0e:99:60:5c:ee:1e:bb:fc:34:a3:7e:d7: 0e:6f:97:8b:b6:0c:bf:15:45:fa:9b:99:f9:51:64: 1e:ec:c2:f1:15:e2:ae:f5:5e:62:30:31:b8:3c:82: 32:fc:0c:94:ab:d3:67:14:90:5a:c2:10:81:99:98: 8c:72:08:8f:4c:53:cb:23:bc:91:c4:09:d1:32:9a: 53:d3:c8:f7:eb:cf:d5:9a:b3:b4:7d:7d:2b:f3:70: 93:eb:7d:ac:0c:15:18:0f:65:97:51:2f:0e:07:88: 54:d5:50:38:33:5f:24:d3:89:64:37:c0:fc:0d:49: 82:e1:64:8c:0b:2c:33:8a:ca:83:b9:c9:cf:f3:00: f0:aa:60:a3:cc:a4:87:e2:c6:3a:95:8b:73:0b:82: aa:76:2b:9f:19:4c:11:93:fe:17:07:5f:c6:a2:70: 0a:a3:98:0c:0f:a5:ea:36:0a:9f:b8:1d:f0:2f:7a: 85:12:72:07:6c:22:d0:e9:26:ad:75:78:2b:d1:11: 6f:b8:17:dd:04:39:f1:70:00:7c:8e:ab:b9:72:13: 9b:a9:04:bc:54:2d:bd:08:43:38:9d:26:3a:76:c8: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:8C:FD:8B:4E:D4:C6:F0:BA:A5:35:1E:0B:19:5D:7E:3F:81:65 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:84:e5:cf:fe:ca:10:50:e2:6d:24:de:c0:6d:59:8a:bc: 19:17:48:8e:82:6b:f6:fa:b9:ac:e7:6c:a7:c9:e1:29:91:13: 88:ac:99:c8:9d:52:07:39:1f:89:09:04:c2:45:d3:fa:18:55: bf:02:b0:a1:08:ae:c3:9a:9f:40:80:07:f9:6a:d5:d8:5b:03: 2e:5a:b2:80:06:53:ce:28:64:7e:40:7a:08:01:69:67:35:59: 93:d0:3e:45:a8:2f:62:2c:31:46:18:7c:00:47:29:7c:d5:1d: 57:32:bd:fa:63:49:46:61:1f:c9:6d:88:8b:0c:d8:56:91:f3: c1:7a:8e:bf:30:af:05:67:38:89:bd:0c:c8:c4:fb:0d:9a:73: 29:0b:f4:51:14:fe:b0:7f:43:0d:4a:30:e0:69:ec:25:d6:b1: e4:e1:29:c7:b4:51:79:dd:6e:c4:a7:dd:43:c9:57:1f:d3:32: 8b:4a:55:9e:31:99:7f:2f:ee:5b:b9:11:e1:97:3a:78:6a:5d: af:9f:6a:b5:28:d5:f8:73:cb:26:bc:0b:b6:93:70:28:7c:11: 86:1c:37:df:b6:c8:c8:af:c6:d1:75:8a:0e:84:b2:51:13:c8: cc:d9:c6:4c:03:80:b3:4f:0d:e6:33:06:c3:d8:92:db:4f:a7: f9:d2:05:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUwNDI3MDEyNDE3WhcNMjUwNTA0MDEyNDE3WjAYMRYwFAYD VQQDEw02ODBkODc0MS0yZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlC+UnNT+895V2/E0zDaSRXmwUpI7c7X3wgJg+SY3Q7oOmWBc7h67/DSjftcO b5eLtgy/FUX6m5n5UWQe7MLxFeKu9V5iMDG4PIIy/AyUq9NnFJBawhCBmZiMcgiP TFPLI7yRxAnRMppT08j368/VmrO0fX0r83CT632sDBUYD2WXUS8OB4hU1VA4M18k 04lkN8D8DUmC4WSMCywzisqDucnP8wDwqmCjzKSH4sY6lYtzC4KqdiufGUwRk/4X B1/GonAKo5gMD6XqNgqfuB3wL3qFEnIHbCLQ6SatdXgr0RFvuBfdBDnxcAB8jqu5 chObqQS8VC29CEM4nSY6dsgdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOGjP2L TtTG8LqlNR4LGV1+P4FlMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAppoTlz/7KEFDibSTewG1ZirwZF0iOgmv2+rms52ynyeEpkROIrJnI nVIHOR+JCQTCRdP6GFW/ArChCK7Dmp9AgAf5atXYWwMuWrKABlPOKGR+QHoIAWln NVmT0D5FqC9iLDFGGHwARyl81R1XMr36Y0lGYR/JbYiLDNhWkfPBeo6/MK8FZziJ vQzIxPsNmnMpC/RRFP6wf0MNSjDgaewl1rHk4SnHtFF53W7Ep91DyVcf0zKLSlWe MZl/L+5buRHhlzp4al2vn2q1KNX4c8smvAu2k3AofBGGHDfftsjIr8bRdYoOhLJR E8jM2cZMA4CzTw3mMwbD2JLbT6f50gVO -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net