$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: hBHVLayqQeUljAeRuP83EJ+jQqMmk1tf7HtydFQ8ZJE= Subject key identifier: 1A:71:AC:80:1D:C6:32:41:BC:33:8F:7F:18:EF:EF:97:61:91:3D:26 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0386 Signing time: Fri 25 Apr 2025 00:41:49 +0000 Manifest this update: Fri 25 Apr 2025 00:41:49 +0000 Manifest next update: Fri 02 May 2025 00:41:48 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: ShoTXrlJ9xc3hiduwi2Qj+RHuRdBDxBnty3KK58yYNs=) 2: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: A66Rcwdstkb/5EinIJWrWOuekP0qJLH5hk4F7NZimSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Apr 25 00:41:49 2025 GMT Not After : May 2 00:41:48 2025 GMT Subject: CN=680ada4d-4c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:b5:64:9a:55:df:54:1a:64:5a:3f:3b:69: 9c:91:fe:10:65:49:7f:8b:9d:29:60:84:a3:08:96: 19:0b:fd:e3:c3:35:58:07:51:d0:72:b7:1c:d4:68: 75:ff:ae:ff:88:f9:f2:33:70:4e:a7:c9:17:72:4a: 28:53:fe:a7:c1:9d:7b:87:28:b2:29:fb:b9:62:c8: 60:cf:93:cc:46:ff:3f:ab:33:a6:d5:99:8d:ac:06: 5a:72:37:23:f5:18:70:41:5d:c6:5a:43:6b:85:32: c7:74:f0:bc:f2:28:78:05:43:01:58:eb:3e:a9:19: 77:e9:12:89:61:9f:2d:72:69:0f:c1:87:0b:d0:f7: 68:d2:05:7d:5e:c5:82:92:07:06:3d:59:b0:33:6e: 1f:b8:20:48:fa:17:4a:4f:3d:d6:68:45:0f:09:7e: cc:ed:f8:98:12:b8:0c:12:cd:25:36:33:48:48:26: 50:a8:7c:cf:fb:2a:bb:5e:d2:d3:2e:c0:34:d7:76: 5a:0c:43:e4:e4:53:f2:73:ac:2c:0c:2f:ca:48:28: fc:ee:2e:eb:b6:7d:e1:e2:6f:f0:de:a3:bd:61:4b: 9a:ec:87:36:21:78:df:02:9f:36:19:c1:f7:a8:1e: 41:64:41:60:62:83:c2:5b:f7:4d:82:2b:8f:b6:b1: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:AC:80:1D:C6:32:41:BC:33:8F:7F:18:EF:EF:97:61:91:3D:26 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:44:b5:a8:3a:39:24:c2:0e:33:f6:01:d4:ee:47:06:e7:c0: 3e:96:e2:63:a2:9c:e2:78:c8:42:67:f3:01:33:93:e2:44:7e: fd:6d:7a:26:95:33:85:58:40:07:bf:67:cc:bf:87:eb:36:40: c3:bb:85:f9:5d:10:d3:b7:33:50:1d:95:5b:10:dc:c2:17:f0: 3d:16:ae:6b:e6:2c:d8:e6:07:50:38:cd:32:2d:5e:d4:af:9d: cb:36:94:60:91:48:7a:61:cb:d6:78:b6:5e:4a:4e:d0:be:37: 83:7a:28:08:76:b1:54:55:7c:05:f5:34:86:67:91:68:40:96: 25:40:05:93:90:f3:45:c8:78:ef:e6:7d:3a:4d:3b:64:53:7d: 6f:68:9f:73:18:09:80:61:4e:f0:fe:b8:9a:da:d8:aa:5f:11: eb:33:a1:e1:b9:6a:4f:ec:31:75:b5:9f:5b:24:db:1e:ed:d7: 2f:39:55:c2:00:ee:59:96:30:b8:60:99:d0:b0:3a:91:b9:6b: 70:64:11:79:e1:68:7f:7e:2b:0b:c2:ee:2b:e9:0f:58:7e:ad: 81:0f:8c:af:1d:f8:f6:35:ee:06:11:95:e8:ca:c6:27:a2:da: 36:24:a7:6a:6a:a3:fa:c5:a6:41:86:c4:f0:ff:13:70:c2:b3: f9:9c:37:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjUwNDI1MDA0MTQ5WhcNMjUwNTAyMDA0MTQ4WjAYMRYwFAYD VQQDEw02ODBhZGE0ZC00Yzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5S1ZJpV31QaZFo/O2mckf4QZUl/i50pYISjCJYZC/3jwzVYB1HQcrcc1Gh1 /67/iPnyM3BOp8kXckooU/6nwZ17hyiyKfu5Yshgz5PMRv8/qzOm1ZmNrAZacjcj 9RhwQV3GWkNrhTLHdPC88ih4BUMBWOs+qRl36RKJYZ8tcmkPwYcL0Pdo0gV9XsWC kgcGPVmwM24fuCBI+hdKTz3WaEUPCX7M7fiYErgMEs0lNjNISCZQqHzP+yq7XtLT LsA013ZaDEPk5FPyc6wsDC/KSCj87i7rtn3h4m/w3qO9YUua7Ic2IXjfAp82GcH3 qB5BZEFgYoPCW/dNgiuPtrHvowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpxrIAd xjJBvDOPfxjv75dhkT0mMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATRLWoOjkkwg4z9gHU7kcG58A+luJjopzieMhCZ/MBM5PiRH79bXom lTOFWEAHv2fMv4frNkDDu4X5XRDTtzNQHZVbENzCF/A9Fq5r5izY5gdQOM0yLV7U r53LNpRgkUh6YcvWeLZeSk7QvjeDeigIdrFUVXwF9TSGZ5FoQJYlQAWTkPNFyHjv 5n06TTtkU31vaJ9zGAmAYU7w/ria2tiqXxHrM6HhuWpP7DF1tZ9bJNse7dcvOVXC AO5ZljC4YJnQsDqRuWtwZBF54Wh/fisLwu4r6Q9Yfq2BD4yvHfj2Ne4GEZXoysYn oto2JKdqaqP6xaZBhsTw/xNwwrP5nDeT -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:41 2025 by rpki-client on console.sobornost.net