$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: LgnmU4trV/5rhOrHxC+QNwDjVNXUdXhIGnuIGfgDHB8= Subject key identifier: 57:BA:21:0C:F9:90:DB:74:D5:B5:00:AA:FC:86:25:4A:71:46:88:49 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 043D Signing time: Sat 26 Apr 2025 17:03:40 +0000 Manifest this update: Sat 26 Apr 2025 17:03:40 +0000 Manifest next update: Sat 03 May 2025 17:03:40 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: sD73XJgviZQuzmE8AZnWR2U2emWsecQ2n3BYanP0UIk=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: BSTa7sI/Wxp7paF8iFEhYcOXczYzjvqpGs3tFatgPsE=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: EM7EONiwHXhiPFzyfONkaOBX/AROwU9rjV4ETvuVQDQ=) 4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: TLiIvWlCkSUznKaCtTmASc45uAF4Q8KIvn7LhcKxI18=) 5: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HMDK7qPjAO3ncQEJzX6SKnODDt4e7glxidti8sfhV1k=) 6: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Z/SQA8GAHBj69mDXnfsLMK8qu+tlZ5LxlzdXDGduFGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Apr 26 17:03:40 2025 GMT Not After : May 3 17:03:40 2025 GMT Subject: CN=680d11ec-09b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:72:32:40:47:b5:aa:1f:73:a3:49:4f:b9: 4c:e8:6f:ce:2f:b5:90:a0:cb:52:67:76:36:43:5d: e1:08:03:af:5f:7b:7f:d8:86:c1:5f:a0:9e:70:06: a4:29:2d:ff:3f:93:84:22:ae:6c:cf:4f:34:96:ae: 6b:c7:ee:dd:54:ba:e8:4a:a3:7e:40:ef:7a:10:41: 77:0b:5e:6d:d7:4a:a9:cd:8b:d0:47:3e:dc:98:46: 64:9e:22:bd:63:11:60:4c:61:56:e6:50:9a:08:22: 02:dd:27:bd:f3:35:00:30:6e:8f:94:0b:8f:cb:4a: 57:c6:1c:66:85:5a:e6:e0:6f:1a:f4:00:15:9d:08: 56:04:0c:6c:c5:54:79:43:27:a7:bf:9b:a4:d0:18: 23:f4:9b:dc:96:51:73:7d:b9:41:41:31:cf:60:8b: e0:f0:f2:c9:c4:a3:41:a1:98:06:ac:c4:0b:05:0f: b9:06:c1:84:65:a8:79:07:80:cb:95:4e:a6:95:c9: 1a:ea:1d:a0:31:c5:9d:1c:fe:ac:fd:9f:ce:ec:c5: bf:7a:56:8d:70:1a:6c:9d:b2:76:1c:bc:10:c0:67: 97:33:b9:9b:d2:ed:fc:0a:20:78:f6:59:14:6d:fe: 86:62:1c:8d:19:8c:7c:09:07:f0:f7:f1:22:28:e2: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:21:0C:F9:90:DB:74:D5:B5:00:AA:FC:86:25:4A:71:46:88:49 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c7:86:1d:fe:ec:5a:f6:0d:c7:f9:6c:05:43:c5:fc:ce:08: 2b:63:dc:5a:8c:3f:d6:04:02:11:26:e9:3c:68:ac:b9:0a:40: 7a:47:23:02:6f:0a:8f:c9:14:f2:76:97:2c:0d:83:b5:2a:40: e9:65:2a:bf:04:e9:7d:de:62:ac:63:d0:d9:56:b7:d5:8a:91: 74:bf:dc:ee:44:17:b8:a0:32:cf:cb:75:6d:92:b4:67:35:7b: b0:00:35:32:7f:dc:d7:7f:8a:70:83:e0:b2:3e:7e:9d:d7:7e: 79:50:42:71:9a:ec:e0:54:29:47:8c:94:e9:ad:f9:93:a9:78: 53:78:85:6d:f9:b7:76:d7:4b:15:38:95:c1:b6:f1:5e:b7:3f: 5a:9e:f0:c2:6e:30:07:3e:da:af:80:e6:2d:08:c3:1f:bf:a1: 32:f4:15:31:95:c6:36:54:48:d6:63:e9:e5:26:81:9f:72:40: 5b:53:f6:e0:27:b9:03:bb:25:de:8e:ef:e7:b4:e0:c2:d7:16: fe:9f:dd:d3:07:c8:19:2a:16:4e:99:d4:ae:3d:c3:52:f8:70: 03:09:f8:87:cb:3f:29:1f:26:1b:2f:5d:f0:85:d8:c1:4e:62: 66:d6:cf:2f:62:ab:29:d6:c0:2a:7d:91:1e:dd:3d:8a:7a:b7: d3:05:f2:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUwNDI2MTcwMzQwWhcNMjUwNTAzMTcwMzQwWjAYMRYwFAYD VQQDEw02ODBkMTFlYy0wOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C9yMkBHtaofc6NJT7lM6G/OL7WQoMtSZ3Y2Q13hCAOvX3t/2IbBX6CecAak KS3/P5OEIq5sz080lq5rx+7dVLroSqN+QO96EEF3C15t10qpzYvQRz7cmEZkniK9 YxFgTGFW5lCaCCIC3Se98zUAMG6PlAuPy0pXxhxmhVrm4G8a9AAVnQhWBAxsxVR5 Qyenv5uk0Bgj9JvcllFzfblBQTHPYIvg8PLJxKNBoZgGrMQLBQ+5BsGEZah5B4DL lU6mlcka6h2gMcWdHP6s/Z/O7MW/elaNcBpsnbJ2HLwQwGeXM7mb0u38CiB49lkU bf6GYhyNGYx8CQfw9/EiKOJcUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe6IQz5 kNt01bUAqvyGJUpxRohJMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAix4Yd/uxa9g3H+WwFQ8X8zggrY9xajD/WBAIRJuk8aKy5CkB6RyMC bwqPyRTydpcsDYO1KkDpZSq/BOl93mKsY9DZVrfVipF0v9zuRBe4oDLPy3VtkrRn NXuwADUyf9zXf4pwg+CyPn6d1355UEJxmuzgVClHjJTprfmTqXhTeIVt+bd210sV OJXBtvFetz9anvDCbjAHPtqvgOYtCMMfv6Ey9BUxlcY2VEjWY+nlJoGfckBbU/bg J7kDuyXeju/ntODC1xb+n93TB8gZKhZOmdSuPcNS+HADCfiHyz8pHyYbL13whdjB TmJm1s8vYqsp1sAqfZEe3T2KerfTBfJJ -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:53 2025 by rpki-client on console.sobornost.net