$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft File: 83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json) Hash identifier: tI6DcVSb7STlspwoHxrPXWsWa1YezaOpV5vQel5cbzc= Subject key identifier: 68:D1:0E:89:B8:60:20:8A:EE:77:D0:9A:CB:1F:2A:FE:8E:4A:64:03 Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft Manifest number: 2E Signing time: Sun 27 Apr 2025 06:34:17 +0000 Manifest this update: Sun 27 Apr 2025 06:34:17 +0000 Manifest next update: Sun 04 May 2025 06:34:17 +0000 Files and hashes: 1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: 9nXbhWbt3QXG0tRETwKweuVGbS6q2U0iHyFEqdg59Og=) 2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: rPwsbk1iK8m/wIOTQ5ToBttJBfvQLb/F94KXTbHXYq0=) 3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: J1402rtf9QBVmnV/qIlsF0PgfqX7oUx84mIB0uPW1NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Validity Not Before: Apr 27 06:34:17 2025 GMT Not After : May 4 06:34:17 2025 GMT Subject: CN=680dcfe9-86a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:8e:a8:9a:66:6b:d3:72:cc:81:01:7d:76: e8:fb:a2:6e:e5:04:60:62:fb:5b:fd:97:08:76:b9: b5:b3:50:48:7d:ca:ce:c2:fd:94:a2:0c:63:09:89: 54:ab:2d:79:e7:3a:66:92:f6:87:36:bb:4d:71:f0: e7:10:d9:13:81:d9:30:3c:eb:fb:0b:90:25:96:08: 02:60:46:67:c6:43:1e:1f:5e:10:aa:7c:c3:17:27: 67:25:1f:63:a2:d2:1e:08:a9:36:8b:a7:98:d5:21: 91:6a:b1:e0:c5:3a:00:be:8d:e9:78:a6:04:d1:de: 9f:84:d7:85:43:40:ab:4e:0e:8f:70:4d:ec:2b:0f: 6c:30:38:d1:c8:e9:80:c5:bb:f4:81:81:61:29:aa: f5:90:34:c3:3f:b3:d9:22:14:c8:fd:81:29:25:f6: cf:89:4f:6d:93:d0:07:55:0c:8f:87:18:58:20:67: 79:c0:73:f0:ac:eb:17:28:d2:32:b8:51:1e:a2:41: 77:94:9a:bc:00:f9:7c:ba:9d:a1:f1:e8:c0:2b:4d: 11:1f:66:7e:1d:6c:d4:8d:4b:a1:06:dd:96:c7:d0: 49:70:be:fb:fe:18:56:80:69:c8:f0:84:0b:46:02: 31:0e:13:70:2b:76:86:af:f7:6a:35:eb:25:b1:e2: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:0E:89:B8:60:20:8A:EE:77:D0:9A:CB:1F:2A:FE:8E:4A:64:03 X509v3 Authority Key Identifier: keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:76:8d:2f:18:73:5d:4f:67:40:53:15:d1:dc:41:4a:65:50: 3f:39:e4:f0:03:60:f8:9e:0b:48:df:66:83:f9:39:ed:e2:56: bf:03:6f:ec:c0:3a:92:ee:96:ea:94:05:65:49:cd:55:87:ac: f5:bf:3d:81:f3:c1:13:ae:d4:57:b9:52:fc:e7:e0:39:7e:f2: 54:44:3f:31:a4:9b:4a:21:02:b2:d9:6f:36:b9:77:18:2d:6a: 2d:f4:8c:c9:7e:7d:17:9d:d9:66:3a:6b:27:55:02:2e:96:7f: 6e:47:e7:99:e7:fb:af:ec:d5:79:d5:5c:b3:0e:79:06:29:31: 45:ae:c0:6a:a0:b0:f7:34:95:ed:ef:81:36:40:51:2d:f8:b9: 44:d5:d9:65:37:85:ee:fb:b5:b9:07:df:56:f5:b5:12:24:90: d5:b9:ce:c2:81:08:b0:e2:98:04:c4:c1:e3:f4:ad:77:2f:a5: e4:88:a3:ca:bf:21:5b:c2:3c:f3:d4:70:96:3b:c0:ee:61:23: 86:3b:48:f9:8b:32:7d:04:b9:f2:3a:45:45:40:bc:04:ef:7d: 0a:3e:ed:f2:31:34:5a:bf:a2:03:64:de:b0:f2:a5:69:c4:f4: 64:48:c9:71:ad:dd:19:85:e1:c1:06:5d:88:e5:7c:38:28:50: 4d:9a:bb:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjdGOTExMC8GA1UEBRMoRjM3NTQ3NkYzMjM1REMzRDUyNTE3MUUyQkU5MjExNjM4 RTQ5MDg0NzAeFw0yNTA0MjcwNjM0MTdaFw0yNTA1MDQwNjM0MTdaMBgxFjAUBgNV BAMTDTY4MGRjZmU5LTg2YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg7I6ommZr03LMgQF9duj7om7lBGBi+1v9lwh2ubWzUEh9ys7C/ZSiDGMJiVSr LXnnOmaS9oc2u01x8OcQ2ROB2TA86/sLkCWWCAJgRmfGQx4fXhCqfMMXJ2clH2Oi 0h4IqTaLp5jVIZFqseDFOgC+jel4pgTR3p+E14VDQKtODo9wTewrD2wwONHI6YDF u/SBgWEpqvWQNMM/s9kiFMj9gSkl9s+JT22T0AdVDI+HGFggZ3nAc/Cs6xco0jK4 UR6iQXeUmrwA+Xy6naHx6MArTREfZn4dbNSNS6EG3ZbH0Elwvvv+GFaAacjwhAtG AjEOE3Ardoav92o16yWx4i/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaNEOibhg IIrud9Cayx8q/o5KZAMwHwYDVR0jBBgwFoAU83VHbzI13D1SUXHivpIRY45JCEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyN0Y5LzI4OERGMTRBRTlD NDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0QxU1VYSGl2cElSWTQ1SkNF Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNWSGJ6STEzRDFTVVhIaXZwSVJZNDVKQ0VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy N0Y5LzI4OERGMTRBRTlDNDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0Qx U1VYSGl2cElSWTQ1SkNFYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMx2jS8Yc11PZ0BTFdHcQUplUD855PADYPieC0jfZoP5Oe3iVr8Db+zA OpLuluqUBWVJzVWHrPW/PYHzwROu1Fe5Uvzn4Dl+8lREPzGkm0ohArLZbza5dxgt ai30jMl+fRed2WY6aydVAi6Wf25H55nn+6/s1XnVXLMOeQYpMUWuwGqgsPc0le3v gTZAUS34uUTV2WU3he77tbkH31b1tRIkkNW5zsKBCLDimATEweP0rXcvpeSIo8q/ IVvCPPPUcJY7wO5hI4Y7SPmLMn0EufI6RUVAvATvfQo+7fIxNFq/ogNk3rDypWnE 9GRIyXGt3RmF4cEGXYjlfDgoUE2au1M= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net