$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: tU9ZfriI97lvWsbpAhHpinOkx1BaQn8ny/yaqJOVD0c= Subject key identifier: 7D:06:5C:82:D1:11:F1:7C:1E:06:A0:E6:E6:C9:B2:58:ED:B9:F6:53 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: 9F Signing time: Sun 27 Apr 2025 05:04:28 +0000 Manifest this update: Sun 27 Apr 2025 05:04:28 +0000 Manifest next update: Sun 04 May 2025 05:04:27 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: HHDHthlMWiwt5aAF2caIMsH4NbMYcPEonX3cetc3kMo=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Apr 27 05:04:28 2025 GMT Not After : May 4 05:04:27 2025 GMT Subject: CN=680dbadc-e4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:6d:fc:e3:3e:a6:7c:3b:c9:13:7b:61:d8: d9:18:48:ee:f0:82:ee:b9:50:5d:a8:2c:c5:2c:4a: a4:8f:2f:81:eb:b1:16:05:c0:6a:28:cc:60:6f:5a: 2f:d1:b4:a9:ae:5d:5e:08:bb:b8:c8:ce:9d:6e:aa: 5c:ab:4a:72:02:dc:fb:c5:13:d1:9e:a1:f7:8a:c0: a8:99:84:da:46:3f:f7:a6:0a:06:84:7d:fc:48:17: 2e:56:55:8f:94:f4:b7:e3:ef:c4:a4:6b:55:72:c9: ad:a8:54:20:23:ae:b7:63:19:de:95:99:ec:b7:12: fd:99:16:37:a2:95:cd:ce:5c:90:2b:ba:91:5b:10: d9:15:1a:8d:ea:9a:26:ee:e5:1c:01:50:f6:07:80: 6e:97:17:db:3b:46:35:10:49:d5:11:44:9c:3b:35: e3:a4:2c:d3:c1:77:3b:30:76:02:b3:b0:90:2a:ac: af:56:d1:6e:9a:6b:74:e0:13:51:4e:4e:f3:91:b0: e7:91:25:ae:51:8d:90:b6:8d:1e:97:b3:7f:65:f0: 03:5f:5e:91:3a:59:c1:b2:f7:c9:25:6d:20:e5:48: 9f:14:81:e8:62:a9:b7:21:08:e4:ef:de:8c:22:32: ee:ff:42:a5:c2:b2:96:09:25:3d:62:8e:e2:a6:8e: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:5C:82:D1:11:F1:7C:1E:06:A0:E6:E6:C9:B2:58:ED:B9:F6:53 X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:2a:51:80:4e:3f:cb:89:98:9e:9c:aa:fe:36:84:a5:d6: f6:b7:d0:9b:d3:69:5d:eb:61:0f:16:a8:9b:fd:f2:72:fe:42: 79:97:e3:09:98:99:64:d8:d8:cc:e6:2e:57:11:f6:b4:6a:70: 5e:ae:f0:1e:23:b5:b2:c9:43:49:7b:34:6e:e8:16:e2:11:5c: 1b:ab:46:20:38:29:ee:92:b1:f7:69:b4:42:5f:c2:2c:7c:5e: 31:c5:30:94:0a:a4:f3:b5:49:d7:66:df:0b:1b:1b:ad:6e:1f: 8e:35:29:e4:3b:02:ff:a6:bb:5e:ee:67:42:a2:e0:a8:ea:7f: 3b:28:cf:45:d0:6d:55:b5:1c:57:52:92:b8:54:58:23:bd:ea: 2d:ac:c0:a2:43:d1:fc:4e:87:af:ea:37:c7:78:11:56:31:e7: e3:21:17:5e:93:12:b2:38:20:8c:42:89:90:60:5b:f3:3a:da: ef:c8:f2:a8:94:f8:5d:ec:5f:d6:0c:d4:8e:21:45:13:10:8d: f8:7d:05:65:15:63:78:13:5c:f2:cd:84:a4:dd:8f:30:da:89: bc:55:cd:59:59:6a:3a:54:5b:f9:5d:df:0b:34:3b:23:a4:3c: 76:ba:50:b9:ed:8d:3c:7e:ae:8b:17:af:35:d2:db:1d:ce:44: 73:bc:74:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4 OTBFNzQwOTkwHhcNMjUwNDI3MDUwNDI4WhcNMjUwNTA0MDUwNDI3WjAYMRYwFAYD VQQDEw02ODBkYmFkYy1lNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWJt/OM+pnw7yRN7YdjZGEju8ILuuVBdqCzFLEqkjy+B67EWBcBqKMxgb1ov 0bSprl1eCLu4yM6dbqpcq0pyAtz7xRPRnqH3isComYTaRj/3pgoGhH38SBcuVlWP lPS34+/EpGtVcsmtqFQgI663YxnelZnstxL9mRY3opXNzlyQK7qRWxDZFRqN6pom 7uUcAVD2B4BulxfbO0Y1EEnVEUScOzXjpCzTwXc7MHYCs7CQKqyvVtFummt04BNR Tk7zkbDnkSWuUY2Qto0el7N/ZfADX16ROlnBsvfJJW0g5UifFIHoYqm3IQjk796M IjLu/0KlwrKWCSU9Yo7ipo7VZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0GXILR EfF8Hgag5ubJsljtufZTMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3 bEpyS0txekk1bDZKRG5RSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByGypRgE4/y4mYnpyq/jaEpdb2t9Cb02ld62EPFqib/fJy/kJ5l+MJ mJlk2NjM5i5XEfa0anBervAeI7WyyUNJezRu6BbiEVwbq0YgOCnukrH3abRCX8Is fF4xxTCUCqTztUnXZt8LGxutbh+ONSnkOwL/prte7mdCouCo6n87KM9F0G1VtRxX UpK4VFgjveotrMCiQ9H8Toev6jfHeBFWMefjIRdekxKyOCCMQomQYFvzOtrvyPKo lPhd7F/WDNSOIUUTEI34fQVlFWN4E1zyzYSk3Y8w2om8Vc1ZWWo6VFv5Xd8LNDsj pDx2ulC57Y08fq6LF6810tsdzkRzvHRT -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net