$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: pnqmSCGlSrGaeBII0f9bmNiMMrQDFQrTSVgWVz41dn4= Subject key identifier: 07:53:0F:10:06:DE:EB:6B:A1:E0:B0:08:E5:2C:31:15:B6:63:17:D3 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 03E2 Signing time: Sun 27 Apr 2025 00:11:50 +0000 Manifest this update: Sun 27 Apr 2025 00:11:49 +0000 Manifest next update: Sun 04 May 2025 00:11:49 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: xss1qExPp/MId8ksHirnQiVtQN5wgDWU2VQxM9yixOk=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Apr 27 00:11:49 2025 GMT Not After : May 4 00:11:49 2025 GMT Subject: CN=680d7645-b649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:b1:f6:24:2a:43:f4:a8:36:59:eb:ba:58: 34:d4:b5:b1:62:c6:c8:20:94:dc:37:dd:5a:b3:82: 00:48:c1:f4:c7:43:c1:9b:25:c3:6e:d1:1d:2b:6e: 0f:1a:cd:ef:d3:79:05:58:84:3f:27:b6:14:cf:34: 04:9d:a9:a2:e5:f2:e1:c8:53:3f:58:c5:ef:75:65: b4:55:0b:2e:4a:25:89:e0:0f:57:27:55:65:ee:2a: d3:97:40:a5:87:8a:96:61:0e:28:6d:cd:cc:26:58: d6:0f:20:c0:f0:c6:c5:d5:b8:14:45:18:1f:5b:fe: 9f:4e:a9:6d:77:f3:cf:2d:27:85:d0:c0:02:dd:4d: 7d:ab:9c:f4:91:6e:20:5f:14:d6:58:6e:81:78:52: d4:98:c9:64:f4:81:82:29:b5:67:63:00:71:97:8f: e2:2b:84:07:c4:bb:80:a7:f6:e0:f5:87:d1:8b:c9: 1c:8a:ee:54:52:d6:ef:2a:7b:7b:44:16:72:7c:50: 73:d9:42:55:92:e0:63:2c:41:6e:39:52:bb:07:d2: 70:32:11:a4:4c:b0:a6:0a:8b:ca:90:1b:8f:a7:b2: 7e:16:a1:77:7f:9b:94:61:81:ce:25:b2:aa:38:8e: 38:71:83:e9:22:53:c4:52:16:d6:81:c8:37:66:d9: 0e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:0F:10:06:DE:EB:6B:A1:E0:B0:08:E5:2C:31:15:B6:63:17:D3 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a8:3e:22:16:48:03:70:9d:f8:e3:86:4f:de:b5:68:65:1c: 83:48:a9:41:8f:bd:71:ca:a9:5d:08:bb:08:74:83:cd:3d:8f: 0e:98:7b:20:a4:bd:53:1e:11:c9:4d:fb:dd:25:db:90:ff:a8: d4:71:c2:33:08:0c:8c:ca:22:c3:d9:9d:a9:45:0d:e4:f5:e9: 84:a3:84:69:4f:83:d0:68:0d:69:36:df:ea:37:58:dc:7c:a1: 75:f8:ee:35:9a:64:05:88:01:a2:b3:8c:f9:57:28:0f:e5:7d: 8f:73:91:6e:f1:f2:65:2c:a9:80:87:0f:29:89:10:32:1e:a2: 43:b1:11:af:15:5e:e2:f2:9f:23:ed:c0:64:c0:6b:96:57:34: 7b:82:31:8a:e8:dc:69:91:81:6c:cd:f5:2b:3b:60:23:3e:24: 58:2e:73:5e:43:5a:e8:f9:1a:26:63:fb:46:96:32:7a:c1:0d: f0:2c:43:f2:e3:b6:97:68:fb:b2:96:b2:48:a7:de:61:92:76: 38:5c:2a:6e:6b:be:91:d9:ac:0c:93:53:8e:7b:7b:0b:f1:34: a6:c4:2c:65:4c:4d:84:05:ed:0c:d8:26:62:14:8d:27:35:0a: 76:df:96:9e:62:f5:05:7f:e3:d9:e3:eb:35:3a:e3:a3:ab:b7: 6e:45:5a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwNDI3MDAxMTQ5WhcNMjUwNTA0MDAxMTQ5WjAYMRYwFAYD VQQDEw02ODBkNzY0NS1iNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyGx9iQqQ/SoNlnrulg01LWxYsbIIJTcN91as4IASMH0x0PBmyXDbtEdK24P Gs3v03kFWIQ/J7YUzzQEnami5fLhyFM/WMXvdWW0VQsuSiWJ4A9XJ1Vl7irTl0Cl h4qWYQ4obc3MJljWDyDA8MbF1bgURRgfW/6fTqltd/PPLSeF0MAC3U19q5z0kW4g XxTWWG6BeFLUmMlk9IGCKbVnYwBxl4/iK4QHxLuAp/bg9YfRi8kciu5UUtbvKnt7 RBZyfFBz2UJVkuBjLEFuOVK7B9JwMhGkTLCmCovKkBuPp7J+FqF3f5uUYYHOJbKq OI44cYPpIlPEUhbWgcg3ZtkO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdTDxAG 3utroeCwCOUsMRW2YxfTMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLqD4iFkgDcJ3444ZP3rVoZRyDSKlBj71xyqldCLsIdIPNPY8OmHsg pL1THhHJTfvdJduQ/6jUccIzCAyMyiLD2Z2pRQ3k9emEo4RpT4PQaA1pNt/qN1jc fKF1+O41mmQFiAGis4z5VygP5X2Pc5Fu8fJlLKmAhw8piRAyHqJDsRGvFV7i8p8j 7cBkwGuWVzR7gjGK6NxpkYFszfUrO2AjPiRYLnNeQ1ro+RomY/tGljJ6wQ3wLEPy 47aXaPuylrJIp95hknY4XCpua76R2awMk1OOe3sL8TSmxCxlTE2EBe0M2CZiFI0n NQp235aeYvUFf+PZ4+s1OuOjq7duRVrl -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:44 2025 by rpki-client on console.sobornost.net