$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: 1qY5UnJKCAzv2gaIPju65tZA1FoAquXW/grqOd/NhTc= Subject key identifier: BE:B4:C9:0C:69:C1:4A:1B:1E:EA:88:03:13:73:31:06:31:57:B7:01 Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 096E Signing time: Mon 28 Apr 2025 16:56:01 +0000 Manifest this update: Mon 28 Apr 2025 16:56:01 +0000 Manifest next update: Mon 05 May 2025 16:56:01 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: QurvqweeBH8ITokka7yd6H4t4gI1FkNANpm5ARxB4fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Apr 28 16:56:01 2025 GMT Not After : May 5 16:56:01 2025 GMT Subject: CN=680fb321-12d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:49:6a:6e:41:d2:2d:f4:58:98:35:59:f5: 90:88:28:3c:e2:39:4f:14:e5:33:aa:06:33:6e:c8: 63:8a:ab:74:8f:9a:62:a6:69:93:4c:72:a0:de:94: c4:38:c8:66:6a:2b:e6:a4:17:38:b3:6b:42:24:97: 73:36:ae:81:1f:c4:58:d7:fc:8d:a6:d5:50:ff:2f: 2b:96:c1:88:5b:7f:f9:bd:16:ab:cf:d0:12:25:39: 5a:98:a5:3c:5f:0b:ac:a0:c3:cc:f5:aa:a7:0d:58: 12:97:45:4a:d2:a8:a2:fc:1e:d3:33:c0:25:c4:30: aa:2e:73:a8:2b:df:83:69:cb:20:d5:da:37:99:56: f4:09:0e:38:7f:ed:af:69:06:e1:b3:d5:5f:b6:00: ff:e0:5a:c7:bc:5b:09:47:02:5e:f5:9c:b0:b9:e7: eb:97:aa:f4:b7:7e:91:f0:16:29:01:f3:29:db:fa: 1f:68:f6:95:b7:2b:b8:5c:39:9c:44:f4:4f:82:4c: 75:e5:93:d0:d1:38:85:0a:0e:3a:42:9d:5e:12:b9: 95:2d:a2:93:14:8c:ce:ed:b3:e6:d4:5c:7d:43:4c: 7e:2f:17:58:ab:74:75:8d:67:dd:65:a1:c9:bf:77: 95:81:9e:28:f2:e4:13:db:34:f7:b4:d1:a5:88:2f: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:C9:0C:69:C1:4A:1B:1E:EA:88:03:13:73:31:06:31:57:B7:01 X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f6:4f:88:5c:0c:00:3f:16:0b:b3:ad:6e:b0:7f:f8:c6:88: 6a:ec:4f:08:f9:d7:95:1d:1a:38:49:9e:62:ed:95:23:9f:fe: 0a:50:05:df:c8:ea:86:5e:7d:34:bc:d7:15:f0:e4:e5:a6:9b: d6:2b:f0:d3:c6:dc:a0:f4:1e:8d:24:d7:9a:df:0d:f1:6c:60: 75:c9:c9:8a:3e:b4:a1:d4:65:a2:e7:e5:2b:76:d6:03:dd:d8: 99:67:7d:77:ce:61:db:2a:84:95:20:1e:10:ee:14:5d:cd:09: 17:7c:4e:8a:f4:d6:50:cb:35:83:08:11:28:1b:8b:da:ec:94: 1f:02:40:f4:0f:a0:99:51:a2:4a:07:93:65:de:cc:79:44:38: fa:d3:ac:45:f8:a7:8c:95:94:a8:56:ad:b4:46:8d:c4:33:f1: b2:50:5a:57:40:b9:c3:71:97:03:01:25:bc:3d:d0:4b:03:07: 38:77:88:8c:5a:83:b8:85:5b:4d:0f:df:22:cf:85:f1:a1:70: 70:c1:bd:72:b1:f4:e2:c6:a8:f5:5e:f9:ce:7c:14:7c:5d:16: 01:3a:aa:3e:8f:9d:c1:71:df:08:68:b1:65:63:3f:da:28:75: 41:6a:3b:b0:4d:9a:cb:fc:16:e2:01:14:e1:25:e1:da:62:d9: 48:62:a8:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwNDI4MTY1NjAxWhcNMjUwNTA1MTY1NjAxWjAYMRYwFAYD VQQDEw02ODBmYjMyMS0xMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcVJam5B0i30WJg1WfWQiCg84jlPFOUzqgYzbshjiqt0j5pipmmTTHKg3pTE OMhmaivmpBc4s2tCJJdzNq6BH8RY1/yNptVQ/y8rlsGIW3/5vRarz9ASJTlamKU8 XwusoMPM9aqnDVgSl0VK0qii/B7TM8AlxDCqLnOoK9+Dacsg1do3mVb0CQ44f+2v aQbhs9VftgD/4FrHvFsJRwJe9Zywuefrl6r0t36R8BYpAfMp2/ofaPaVtyu4XDmc RPRPgkx15ZPQ0TiFCg46Qp1eErmVLaKTFIzO7bPm1Fx9Q0x+LxdYq3R1jWfdZaHJ v3eVgZ4o8uQT2zT3tNGliC+9pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL60yQxp wUobHuqIAxNzMQYxV7cBMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9k+IXAwAPxYLs61usH/4xohq7E8I+deVHRo4SZ5i7ZUjn/4KUAXf yOqGXn00vNcV8OTlppvWK/DTxtyg9B6NJNea3w3xbGB1ycmKPrSh1GWi5+UrdtYD 3diZZ313zmHbKoSVIB4Q7hRdzQkXfE6K9NZQyzWDCBEoG4va7JQfAkD0D6CZUaJK B5Nl3sx5RDj606xF+KeMlZSoVq20Ro3EM/GyUFpXQLnDcZcDASW8PdBLAwc4d4iM WoO4hVtND98iz4XxoXBwwb1ysfTixqj1XvnOfBR8XRYBOqo+j53Bcd8IaLFlYz/a KHVBajuwTZrL/BbiARThJeHaYtlIYqjw -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:41 2025 by rpki-client on console.sobornost.net