$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: X0lNi9+ABOhkJpN+Wqlcb7PYMlwUaiiYGwXas+DLwDI= Subject key identifier: 19:90:E5:00:1A:23:6C:98:95:E0:F3:88:FC:FF:C2:3A:9B:1F:10:D3 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 038D Signing time: Sun 27 Apr 2025 00:27:44 +0000 Manifest this update: Sun 27 Apr 2025 00:27:43 +0000 Manifest next update: Sun 04 May 2025 00:27:43 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: oI5lVT5ZO07o1z2uOGdv5awHEK7N49eJqBZ2PcryKuY=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Apr 27 00:27:43 2025 GMT Not After : May 4 00:27:43 2025 GMT Subject: CN=680d79ff-cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:f2:31:a8:16:fd:f2:af:7d:a6:c7:de:e0: 55:47:72:23:46:5e:41:50:62:4e:12:5e:79:8f:8d: 61:ad:d2:da:84:16:6b:39:04:e6:78:e8:7e:55:56: 5e:f0:2f:fe:1b:26:c1:8e:32:69:d0:ca:42:4a:e3: 0c:73:3c:7a:9d:79:93:62:24:74:b5:c8:f8:52:93: f4:cc:28:13:f2:39:69:c1:5f:18:4e:43:77:10:d7: 62:70:85:cd:f5:24:48:ee:ce:a8:52:c8:b8:72:63: 4b:f3:d8:53:8e:e6:26:a5:6b:68:66:2f:17:5d:1c: bb:8a:10:d2:b3:91:bd:d8:b3:87:9b:14:62:48:cc: a5:d1:4d:15:84:b2:e5:e3:ae:36:8f:f7:15:a1:29: eb:67:a3:f6:9c:ec:75:11:f2:4d:6d:38:c6:b0:cc: f8:18:3f:fa:8b:7a:6f:a3:2f:64:86:fe:6a:39:0b: b0:02:cd:48:22:b8:20:9e:44:3f:42:ab:e1:cb:83: 95:28:62:14:a5:83:85:ba:0c:94:7d:9f:23:42:c1: 35:34:26:f2:39:7b:6a:44:d1:73:25:98:05:20:78: cf:21:0e:f5:a5:fa:c3:c0:d0:9d:b2:77:9d:51:02: 32:a3:29:59:73:cf:3b:4a:d2:58:01:88:db:46:b5: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:E5:00:1A:23:6C:98:95:E0:F3:88:FC:FF:C2:3A:9B:1F:10:D3 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b3:13:07:ac:18:2b:65:1a:05:b1:ef:bf:c8:a6:cc:8a:60: 11:28:95:ad:53:10:72:de:5f:63:4f:39:3f:b3:8a:39:fa:e1: d1:ee:c6:4f:77:2e:67:e5:2d:03:fb:37:6b:55:a6:d6:68:d2: e7:64:84:65:63:5d:b4:06:e6:87:16:36:3d:da:95:db:a0:24: 92:2e:22:ad:15:75:67:cb:98:b9:e3:88:90:f0:f0:c5:ed:e9: 47:7b:5d:5d:7d:bb:0c:ee:79:58:0f:ff:bc:35:c0:5b:5e:39: c0:2b:12:29:50:ec:0f:bb:f4:4b:bd:2e:f5:ce:96:c7:ad:24: d2:a5:5e:1b:50:aa:0d:0e:82:37:47:61:a1:d7:f2:fb:ac:76: 65:23:5c:ac:f7:12:a1:4f:22:67:c4:86:c4:1a:f1:3e:54:ba: 98:62:72:97:57:ad:13:81:96:46:7e:58:91:c8:f7:c5:24:d8: ec:d3:ec:f8:3e:62:46:fc:e0:2c:97:f4:9f:6c:6e:e0:c5:60: f4:d7:61:24:fe:1a:80:de:8b:48:d0:42:4f:a7:0f:0b:9d:f8: ef:fd:1c:60:71:5b:41:9a:3d:88:a5:45:c0:60:90:3d:59:5a: 39:ba:7a:87:2f:7f:ce:30:61:0e:8f:7d:14:90:c5:11:aa:c7: 5c:83:66:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUwNDI3MDAyNzQzWhcNMjUwNTA0MDAyNzQzWjAYMRYwFAYD VQQDEw02ODBkNzlmZi1jZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunryMagW/fKvfabH3uBVR3IjRl5BUGJOEl55j41hrdLahBZrOQTmeOh+VVZe 8C/+GybBjjJp0MpCSuMMczx6nXmTYiR0tcj4UpP0zCgT8jlpwV8YTkN3ENdicIXN 9SRI7s6oUsi4cmNL89hTjuYmpWtoZi8XXRy7ihDSs5G92LOHmxRiSMyl0U0VhLLl 4642j/cVoSnrZ6P2nOx1EfJNbTjGsMz4GD/6i3pvoy9khv5qOQuwAs1IIrggnkQ/ Qqvhy4OVKGIUpYOFugyUfZ8jQsE1NCbyOXtqRNFzJZgFIHjPIQ71pfrDwNCdsned UQIyoylZc887StJYAYjbRrVKcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmQ5QAa I2yYleDziPz/wjqbHxDTMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrsxMHrBgrZRoFse+/yKbMimARKJWtUxBy3l9jTzk/s4o5+uHR7sZP dy5n5S0D+zdrVabWaNLnZIRlY120BuaHFjY92pXboCSSLiKtFXVny5i544iQ8PDF 7elHe11dfbsM7nlYD/+8NcBbXjnAKxIpUOwPu/RLvS71zpbHrSTSpV4bUKoNDoI3 R2Gh1/L7rHZlI1ys9xKhTyJnxIbEGvE+VLqYYnKXV60TgZZGfliRyPfFJNjs0+z4 PmJG/OAsl/SfbG7gxWD012Ek/hqA3otI0EJPpw8Lnfjv/RxgcVtBmj2IpUXAYJA9 WVo5unqHL3/OMGEOj30UkMURqsdcg2bd -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:46 2025 by rpki-client on console.sobornost.net