$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: RFmbRa2IZ2m9aHuadsuBFPgHJf5kALfnkyPx2TJfklY= Subject key identifier: 05:B8:A7:75:97:DE:1F:54:71:53:25:31:CB:C4:9D:03:E4:B7:F3:17 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: 3D Signing time: Sun 27 Apr 2025 06:49:50 +0000 Manifest this update: Sun 27 Apr 2025 06:49:49 +0000 Manifest next update: Sun 04 May 2025 06:49:49 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: dnh2n3hatv88RZNRAYbXhmK3Mx1l7WwpOkbNfCqDXnQ=) 2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 9C2A80FA099011F08EA9F20BC4F9AE02.roa (hash: goFGLeo3cJQ5XXhESgnKHMy4NdQpSGyyQNhR1oIebe0=) 5: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Apr 27 06:49:49 2025 GMT Not After : May 4 06:49:49 2025 GMT Subject: CN=680dd38e-b9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:a0:9a:08:dd:ab:ca:47:0a:03:b3:52:50: c3:3b:57:92:a5:fc:e6:64:fc:a7:c6:9e:ae:e5:4d: 93:14:a1:1a:8b:09:4a:ba:ba:69:8d:87:13:dd:6a: ff:65:55:de:e2:10:1c:f0:69:e1:5f:10:9e:26:91: 51:4a:02:1e:66:13:87:89:1d:72:af:b7:41:50:a6: 17:fb:29:be:86:bf:4d:9b:04:7b:5e:47:2c:15:2a: b5:49:c8:83:5a:12:7c:e3:61:1d:78:bc:65:13:a5: 44:60:db:34:a3:1a:9e:4e:99:92:e1:94:28:2f:78: d3:53:e7:fc:f2:93:bf:a5:dd:29:cf:e1:a4:75:ae: eb:5f:cc:e8:bd:88:f3:77:e5:e6:3a:8b:a1:c8:c8: b9:b3:0c:1f:0e:3e:d3:ed:b3:8c:26:1c:ff:fa:34: 97:2f:1c:04:79:3c:d7:f9:d6:68:9b:c5:97:24:67: 4a:76:5f:77:ee:a6:10:a3:fe:1d:94:c1:1d:44:60: 6b:87:4b:99:0b:a7:81:40:db:8f:a3:c7:3e:6d:5f: 64:77:54:d1:89:68:d3:b5:f3:03:39:3f:15:be:9b: 04:56:41:d0:b6:c5:6f:c6:f1:ec:99:bf:63:93:46: 9c:9c:5c:09:cf:ae:62:4b:05:70:7d:10:d1:65:69: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B8:A7:75:97:DE:1F:54:71:53:25:31:CB:C4:9D:03:E4:B7:F3:17 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:96:83:34:cb:a2:89:6b:74:94:25:ee:11:6b:14:33:62:43: 28:6a:c7:c3:29:df:56:7d:77:47:f4:07:8c:b7:7b:a5:57:60: c1:1e:c3:52:02:ac:5c:ca:e3:49:d4:ce:a7:8b:c1:eb:56:91: 1c:98:7f:96:34:48:b5:73:fe:d7:a2:0e:fd:5b:7c:19:82:06: e7:ed:da:1a:21:dd:68:60:7e:08:2f:cd:4d:57:44:56:ae:4f: 4e:50:51:e5:61:e5:41:10:f1:a8:74:3a:a5:80:d4:e6:2f:08: 68:e2:91:59:54:e2:45:60:1e:31:92:a6:17:cc:ac:a1:b6:4e: 71:bb:31:11:77:eb:2a:6c:a8:68:f5:4d:2f:8d:be:33:32:b6: ac:4d:3f:ef:fb:18:b7:e5:92:a3:38:27:50:2a:6e:d6:0d:85: ff:5b:90:f2:33:64:35:21:57:c4:35:1f:56:46:4c:0a:4d:d2: 9f:74:a6:95:4b:3b:aa:10:49:27:5f:1e:98:cd:41:af:45:39: 67:18:68:83:14:bb:b7:25:23:ad:cd:83:6f:92:b9:15:4d:22: f6:8d:67:63:3e:9b:aa:45:ad:99:e7:0a:73:02:12:4d:b5:b7: ef:f7:0b:88:57:41:88:df:ef:8f:cd:1f:53:80:2e:42:e4:60: cb:83:a3:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM5ODExMC8GA1UEBRMoRkY4Q0NCRTYxODc1NUExRjUxOTlCRDBDODI3NjBFOEVE QjhGODVCQTAeFw0yNTA0MjcwNjQ5NDlaFw0yNTA1MDQwNjQ5NDlaMBgxFjAUBgNV BAMTDTY4MGRkMzhlLWI5ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWd6CaCN2rykcKA7NSUMM7V5Kl/OZk/KfGnq7lTZMUoRqLCUq6ummNhxPdav9l Vd7iEBzwaeFfEJ4mkVFKAh5mE4eJHXKvt0FQphf7Kb6Gv02bBHteRywVKrVJyINa EnzjYR14vGUTpURg2zSjGp5OmZLhlCgveNNT5/zyk7+l3SnP4aR1rutfzOi9iPN3 5eY6i6HIyLmzDB8OPtPts4wmHP/6NJcvHAR5PNf51mibxZckZ0p2X3fuphCj/h2U wR1EYGuHS5kLp4FA24+jxz5tX2R3VNGJaNO18wM5PxW+mwRWQdC2xW/G8eyZv2OT RpycXAnPrmJLBXB9ENFlaa/1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBbindZfe H1RxUyUxy8SdA+S38xcwHwYDVR0jBBgwFoAU/4zL5hh1Wh9Rmb0MgnYOjtuPhbow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzk4L0FCQUZGNUVBMDYx MjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhi by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzR6TDVoaDFXaDlSbWIwTWduWU9qdHVQaGJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC Qzk4L0FCQUZGNUVBMDYxMjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5 Um1iME1nbllPanR1UGhiby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMiWgzTLoolrdJQl7hFrFDNiQyhqx8Mp31Z9d0f0B4y3e6VXYMEew1IC rFzK40nUzqeLwetWkRyYf5Y0SLVz/teiDv1bfBmCBuft2hoh3WhgfggvzU1XRFau T05QUeVh5UEQ8ah0OqWA1OYvCGjikVlU4kVgHjGSphfMrKG2TnG7MRF36ypsqGj1 TS+NvjMytqxNP+/7GLflkqM4J1AqbtYNhf9bkPIzZDUhV8Q1H1ZGTApN0p90ppVL O6oQSSdfHpjNQa9FOWcYaIMUu7clI63Ng2+SuRVNIvaNZ2M+m6pFrZnnCnMCEk21 t+/3C4hXQYjf74/NH1OALkLkYMuDo44= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net