$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: 6BdtEME0mwWzZfe8CXa+2q+OJjtUnmZs2xP8cZBY7Uw= Subject key identifier: AB:51:CD:B0:50:C4:65:3A:9E:C9:1B:CA:34:BD:84:04:3A:DB:D9:0A Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 61 Signing time: Sun 27 Apr 2025 05:54:23 +0000 Manifest this update: Sun 27 Apr 2025 05:54:22 +0000 Manifest next update: Sun 04 May 2025 05:54:22 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: /S+acfMyA+D3rvXMGR98sq53NVWgQLCROytlDUgD6yE=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Apr 27 05:54:22 2025 GMT Not After : May 4 05:54:22 2025 GMT Subject: CN=680dc68e-12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:ae:7f:d8:b6:82:8f:b6:45:a2:60:ce:5e: 15:3a:ff:32:6d:7e:b4:dd:c4:51:d2:e3:54:6c:d9: 52:db:57:6f:6b:e3:e7:c5:27:20:f9:8d:61:40:da: 92:f4:3d:b0:0c:c7:cb:91:81:24:e1:5f:63:b2:fe: 59:8e:c0:44:18:f5:eb:32:41:81:e8:92:e7:64:2b: b9:cc:f6:d2:90:f1:48:e9:24:4d:ca:ab:64:2d:bc: f6:77:61:9d:1d:c2:13:b0:69:35:92:5f:e9:36:57: 4a:c6:43:2a:e5:e9:5a:62:ce:b2:8f:c8:98:e1:a2: 28:1c:a0:80:2f:96:65:d0:b9:3c:33:28:18:d0:0d: d9:ea:0c:e2:58:16:51:7e:b4:af:88:cf:ce:f0:a0: 61:d7:8c:ab:54:43:3a:b7:a0:c0:2c:d7:53:0c:2c: 76:5d:ce:6d:8b:82:17:2e:37:05:27:85:f8:60:d6: 37:43:cd:b4:65:a8:af:0a:29:56:2d:cf:2e:99:2a: 90:99:46:04:3e:7d:eb:7e:88:73:40:fe:90:e2:a8: f9:fa:51:0d:a5:89:7f:ae:29:a6:04:45:48:9f:2a: 2f:ef:62:e9:01:9f:a6:96:9e:13:e1:5c:d9:d5:91: 9b:54:69:2c:f2:0d:6e:49:11:48:58:32:2d:ee:ae: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:51:CD:B0:50:C4:65:3A:9E:C9:1B:CA:34:BD:84:04:3A:DB:D9:0A X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:9c:69:d1:6c:6d:00:c2:87:00:94:81:02:0c:52:1a:85:05: d9:3c:98:e6:fa:40:f1:6e:80:87:f3:ec:30:80:83:90:dc:5a: c5:65:e4:3f:d5:a1:ac:63:ce:57:c0:56:58:89:fc:8c:e7:ea: c1:60:58:ad:fa:38:8c:4b:fb:99:9d:fa:0b:61:15:c7:50:5c: 61:47:a9:ca:75:ab:a2:98:45:e6:d5:ec:43:47:12:47:c7:d4: 05:a6:5b:31:43:a5:7e:9c:5e:56:da:78:ae:83:a6:d5:31:23: ba:f8:92:e1:5e:5d:a5:bb:02:7c:5f:e5:4e:18:e3:04:bc:d8: a5:10:4f:5f:de:c6:31:8f:69:46:57:c5:af:e9:64:f8:b8:cb: 34:b3:8e:9d:ce:dd:0f:e0:bd:79:56:4b:27:6a:9b:bc:17:66: 3d:6c:85:22:38:f3:77:42:7e:cf:7b:ab:3c:b6:bc:ca:39:85: 1e:b5:52:03:7f:28:e0:7f:de:10:8a:21:c4:b0:e4:b0:67:27: 4e:fb:dd:78:d6:8f:16:27:68:5e:6e:7c:4d:7b:88:93:d0:86: 62:1f:76:09:2e:c2:86:49:aa:2e:49:93:ee:d5:86:c0:6b:6b: ec:a3:30:53:bf:7f:0c:49:f8:e3:df:50:41:50:61:8c:70:42: 4f:c2:56:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoRjQ0NEI4RERBQzFBMkFFQzlDOThEODk4MTYxQzczNDgy QzJFRDQ4ODAeFw0yNTA0MjcwNTU0MjJaFw0yNTA1MDQwNTU0MjJaMBgxFjAUBgNV BAMTDTY4MGRjNjhlLTEyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsBa5/2LaCj7ZFomDOXhU6/zJtfrTdxFHS41Rs2VLbV29r4+fFJyD5jWFA2pL0 PbAMx8uRgSThX2Oy/lmOwEQY9esyQYHokudkK7nM9tKQ8UjpJE3Kq2QtvPZ3YZ0d whOwaTWSX+k2V0rGQyrl6VpizrKPyJjhoigcoIAvlmXQuTwzKBjQDdnqDOJYFlF+ tK+Iz87woGHXjKtUQzq3oMAs11MMLHZdzm2LghcuNwUnhfhg1jdDzbRlqK8KKVYt zy6ZKpCZRgQ+fet+iHNA/pDiqPn6UQ2liX+uKaYERUifKi/vYukBn6aWnhPhXNnV kZtUaSzyDW5JEUhYMi3urrl7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq1HNsFDE ZTqeyRvKNL2EBDrb2QowHwYDVR0jBBgwFoAU9ES43awaKuycmNiYFhxzSCwu1Igw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzcwMzFBMUVDOTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOUVTNDNhd2FLdXljbU5pWUZoeHpTQ3d1MUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzcwMzFBMUVDOTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5 Y21OaVlGaHh6U0N3dTFJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANqcadFsbQDChwCUgQIMUhqFBdk8mOb6QPFugIfz7DCAg5DcWsVl5D/V oaxjzlfAVliJ/Izn6sFgWK36OIxL+5md+gthFcdQXGFHqcp1q6KYRebV7ENHEkfH 1AWmWzFDpX6cXlbaeK6DptUxI7r4kuFeXaW7Anxf5U4Y4wS82KUQT1/exjGPaUZX xa/pZPi4yzSzjp3O3Q/gvXlWSydqm7wXZj1shSI483dCfs97qzy2vMo5hR61UgN/ KOB/3hCKIcSw5LBnJ0773XjWjxYnaF5ufE17iJPQhmIfdgkuwoZJqi5Jk+7VhsBr a+yjMFO/fwxJ+OPfUEFQYYxwQk/CVlE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net