$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: wsTjq7r55dVPqpUZcnh5gyl+5fWJVSuTzDYR0RGQhVo= Subject key identifier: 5A:BF:EB:76:C2:7D:2D:23:64:E7:DD:3E:C5:D5:43:E5:79:DA:F4:FF Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0342 Signing time: Sun 27 Apr 2025 00:43:12 +0000 Manifest this update: Sun 27 Apr 2025 00:43:12 +0000 Manifest next update: Sun 04 May 2025 00:43:12 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: JRBeBab8ZgHd+/6+/h/zUeUENIhv0RDTkYa0pYwo5vk=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Apr 27 00:43:12 2025 GMT Not After : May 4 00:43:12 2025 GMT Subject: CN=680d7da0-b759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:d8:d1:ae:1d:eb:1f:c2:5d:1b:28:8c:d5: b9:cf:b2:82:4b:69:a4:be:4f:2d:be:6b:09:61:4f: 3e:b9:a7:c6:f9:71:bf:c0:17:32:c5:03:c7:a4:e4: 9a:e1:7f:1b:39:3b:05:2f:dc:18:27:3a:a9:09:da: c9:75:2c:70:9f:97:cd:90:04:63:cb:b2:64:8e:df: b3:7f:12:5a:19:f0:6e:78:70:a6:c7:d7:22:9c:7d: f9:da:a4:a9:94:a3:1d:55:11:18:5f:54:8b:c6:9e: 3f:bc:2f:c4:79:98:17:da:f1:c1:b6:72:ef:da:f7: 8f:11:ac:38:e4:b4:cb:80:77:61:d9:b4:cd:cb:67: c9:02:36:f5:b3:ff:e8:42:5e:b5:5c:ee:29:66:30: 23:dd:c7:65:a1:93:0c:dc:42:ba:be:94:7f:93:04: e0:76:04:ba:95:df:77:45:35:c0:0b:e3:56:9b:4e: 74:19:ac:34:ab:d1:6c:b1:0b:5f:57:43:32:92:e3: 7a:3b:37:66:f5:0e:83:82:e5:d9:bd:c7:72:07:fc: 48:c0:f4:59:09:84:b1:81:f5:fa:3a:91:05:8b:15: b2:a8:58:54:67:7f:04:88:b0:d8:89:67:19:a2:74: 80:a3:0b:a6:d0:ea:f1:e3:ff:0b:89:26:14:a3:6e: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:EB:76:C2:7D:2D:23:64:E7:DD:3E:C5:D5:43:E5:79:DA:F4:FF X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:6a:d6:f8:b4:6f:33:c5:1a:e2:9d:86:35:b0:2f:b2:4c: ec:56:eb:15:7b:0e:43:0b:0c:fb:1a:44:e4:34:66:a4:2f:20: 66:e0:62:db:0f:7d:a7:47:30:5a:17:60:88:12:fd:32:b7:a3: 2c:6f:fd:8e:9f:99:f4:f7:44:1a:a9:a3:12:e3:ef:5f:d1:fb: db:69:81:c4:eb:55:7e:6e:e6:d1:a8:3c:e6:77:4a:a2:1e:3d: b1:cb:3d:8f:d8:9a:b6:cc:5e:12:fb:29:97:4b:ad:41:eb:bb: aa:11:ea:d5:a7:3b:8e:fd:8c:20:d4:c8:a2:b9:b7:a0:13:c1: ef:6d:e1:53:6f:b6:ec:be:55:6c:75:a3:cf:66:3d:0f:5a:fd: 60:31:9f:cf:3a:23:cc:3c:0a:7f:0a:01:16:5c:32:a1:43:32: a0:58:88:03:4d:b3:0a:0e:58:2e:97:59:2a:8a:f4:98:32:04: b1:cb:e8:c6:85:8b:a0:35:51:2d:97:b4:cf:20:45:92:e4:3c: 29:f0:f3:9b:ee:86:2f:1f:bd:c4:b3:a2:49:ef:3e:21:62:ef: 7e:ce:61:12:5d:79:93:24:1f:c2:f0:11:00:27:96:7c:a4:f4: 36:fe:14:4c:02:71:5e:8a:88:7e:eb:e7:1a:93:43:c0:11:70: 2e:4c:c7:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwNDI3MDA0MzEyWhcNMjUwNTA0MDA0MzEyWjAYMRYwFAYD VQQDEw02ODBkN2RhMC1iNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/3Y0a4d6x/CXRsojNW5z7KCS2mkvk8tvmsJYU8+uafG+XG/wBcyxQPHpOSa 4X8bOTsFL9wYJzqpCdrJdSxwn5fNkARjy7Jkjt+zfxJaGfBueHCmx9cinH352qSp lKMdVREYX1SLxp4/vC/EeZgX2vHBtnLv2vePEaw45LTLgHdh2bTNy2fJAjb1s//o Ql61XO4pZjAj3cdloZMM3EK6vpR/kwTgdgS6ld93RTXAC+NWm050Gaw0q9FssQtf V0MykuN6Ozdm9Q6DguXZvcdyB/xIwPRZCYSxgfX6OpEFixWyqFhUZ38EiLDYiWcZ onSAowum0Orx4/8LiSYUo246FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq/63bC fS0jZOfdPsXVQ+V52vT/MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdOmrW+LRvM8Ua4p2GNbAvskzsVusVew5DCwz7GkTkNGakLyBm4GLb D32nRzBaF2CIEv0yt6Msb/2On5n090QaqaMS4+9f0fvbaYHE61V+bubRqDzmd0qi Hj2xyz2P2Jq2zF4S+ymXS61B67uqEerVpzuO/Ywg1MiiubegE8HvbeFTb7bsvlVs daPPZj0PWv1gMZ/POiPMPAp/CgEWXDKhQzKgWIgDTbMKDlgul1kqivSYMgSxy+jG hYugNVEtl7TPIEWS5Dwp8POb7oYvH73Es6JJ7z4hYu9+zmESXXmTJB/C8BEAJ5Z8 pPQ2/hRMAnFeioh+6+cak0PAEXAuTMcl -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net