$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: 7/r6hnzwdocH5EF1vNfeCncTgeFIcAAKp5YBRz9UIa8= Subject key identifier: E2:E2:EB:FD:24:A7:CE:67:B9:2C:3F:88:5D:33:4E:EF:7D:C6:97:B0 Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 0721 Signing time: Sat 26 Apr 2025 21:30:56 +0000 Manifest this update: Sat 26 Apr 2025 21:30:56 +0000 Manifest next update: Sat 03 May 2025 21:30:56 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: l5t4ETwikb7hBGYmMyJC57lOcPKN49ZmngmZ53JzKGM=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Apr 26 21:30:56 2025 GMT Not After : May 3 21:30:56 2025 GMT Subject: CN=680d5090-e54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:46:e3:19:3f:00:9c:b4:5c:d6:05:6c:00: af:93:62:2d:33:1f:b2:41:eb:e7:d4:0a:17:c2:03: fa:9a:5e:df:88:78:7c:3e:67:59:df:81:13:88:c1: 5e:1a:d2:1a:e4:4a:7f:bf:e3:30:46:00:26:ac:2e: 29:42:c1:ce:81:86:bc:b2:37:b7:bd:8c:8b:68:d4: 63:a9:6f:34:95:a6:d0:0b:43:c2:20:02:ee:bc:3f: 27:37:60:d7:d0:50:a7:42:7d:cc:41:a0:7d:22:1d: be:b9:a2:28:30:9b:b6:4f:87:e3:b0:78:ad:b3:cb: b6:1a:95:42:cc:1a:4d:29:55:89:82:30:b2:c5:58: 29:4e:1d:84:18:fc:db:ae:59:bf:71:5d:2d:7f:20: a5:35:be:4d:df:5e:06:82:0c:3a:58:35:45:43:36: 06:2d:b4:ee:d2:76:16:fc:58:3f:12:6d:95:c7:71: da:c7:b4:1f:2a:52:22:ed:f3:d2:b2:1c:99:7b:06: df:24:65:59:ef:40:b7:b1:c7:e8:e2:16:92:4e:e4: 1f:dd:a5:d4:2d:82:21:1a:1a:d2:08:c8:23:b4:3f: 75:d7:63:ac:6a:7a:a5:92:2c:77:88:e7:5c:33:26: 76:17:d4:fa:58:df:9e:d8:d8:5d:bb:f4:f3:2d:a0: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:EB:FD:24:A7:CE:67:B9:2C:3F:88:5D:33:4E:EF:7D:C6:97:B0 X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:57:43:21:57:2c:4f:fd:4e:6f:2e:92:75:52:58:48:33: a1:c1:12:76:38:47:d3:3f:e2:61:9b:3b:33:d8:cd:f2:40:24: 00:ac:38:db:a2:67:59:d9:6d:75:73:21:5b:26:85:b9:6a:a8: 56:a8:b4:54:07:ed:62:3e:e4:13:a1:62:b9:0b:ac:d9:22:89: 36:1a:4f:aa:17:5b:45:6b:6e:c7:db:74:3f:29:d0:98:6f:b5: ab:cf:d0:00:fa:31:de:c4:6c:c1:f2:5b:f1:ff:07:50:90:27: e7:91:b6:94:bf:8d:01:62:c6:d4:94:31:5d:da:d6:a4:6c:c4: 69:bc:0e:fe:ff:02:91:d9:1d:3d:db:b2:e9:fe:93:f5:e3:64: 84:6b:5c:c6:a1:27:81:9a:65:85:d5:45:aa:5a:f7:88:24:6d: cb:cb:36:8d:02:e3:27:50:23:a8:4a:58:6c:1a:f8:9f:28:5f: 0f:29:ff:51:09:09:c3:69:fa:b8:0e:ad:da:68:3a:ed:dd:76: 0e:70:a8:7b:64:51:3f:47:55:da:06:37:2c:7c:87:40:65:d2: b2:ef:01:1b:36:ae:ff:3c:81:1f:91:72:94:14:31:df:3b:41: cd:68:59:f8:88:fa:4f:68:b4:79:66:2e:8d:85:c1:cc:2f:68: f3:3d:b9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUwNDI2MjEzMDU2WhcNMjUwNTAzMjEzMDU2WjAYMRYwFAYD VQQDEw02ODBkNTA5MC1lNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XxG4xk/AJy0XNYFbACvk2ItMx+yQevn1AoXwgP6ml7fiHh8PmdZ34ETiMFe GtIa5Ep/v+MwRgAmrC4pQsHOgYa8sje3vYyLaNRjqW80labQC0PCIALuvD8nN2DX 0FCnQn3MQaB9Ih2+uaIoMJu2T4fjsHits8u2GpVCzBpNKVWJgjCyxVgpTh2EGPzb rlm/cV0tfyClNb5N314Gggw6WDVFQzYGLbTu0nYW/Fg/Em2Vx3Hax7QfKlIi7fPS shyZewbfJGVZ70C3scfo4haSTuQf3aXULYIhGhrSCMgjtD9112Osanqlkix3iOdc MyZ2F9T6WN+e2Nhdu/TzLaB/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLi6/0k p85nuSw/iF0zTu99xpewMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SVdDIVcsT/1Oby6SdVJYSDOhwRJ2OEfTP+Jhmzsz2M3yQCQArDjb omdZ2W11cyFbJoW5aqhWqLRUB+1iPuQToWK5C6zZIok2Gk+qF1tFa27H23Q/KdCY b7Wrz9AA+jHexGzB8lvx/wdQkCfnkbaUv40BYsbUlDFd2takbMRpvA7+/wKR2R09 27Lp/pP142SEa1zGoSeBmmWF1UWqWveIJG3LyzaNAuMnUCOoSlhsGvifKF8PKf9R CQnDafq4Dq3aaDrt3XYOcKh7ZFE/R1XaBjcsfIdAZdKy7wEbNq7/PIEfkXKUFDHf O0HNaFn4iPpPaLR5Zi6NhcHML2jzPblq -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net