$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: eMapU86MgCkUOOr+Qw7NLA+AM5BZ//+KsZ7KQWfLeio= Subject key identifier: 79:9A:78:4A:19:62:EA:6D:FA:00:E9:79:87:9B:F9:FE:E0:58:E4:E3 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 5D Signing time: Sun 27 Apr 2025 05:58:22 +0000 Manifest this update: Sun 27 Apr 2025 05:58:21 +0000 Manifest next update: Sun 04 May 2025 05:58:21 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: j3UKxcUBbGpg/MmT1FuQlt8LfoteVcbTFrWwgSt8O7c=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Apr 27 05:58:21 2025 GMT Not After : May 4 05:58:21 2025 GMT Subject: CN=680dc77e-044d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:8f:37:3f:14:32:f4:26:1f:61:e3:69:f5: 05:10:e4:78:23:68:b5:de:1e:3e:ce:a8:b5:2a:cd: 26:35:5b:8c:c5:72:e5:1c:1f:0b:46:11:8a:63:7b: 67:e0:08:17:67:10:9a:7c:b7:e2:60:3f:54:f5:1d: 33:18:63:c6:9e:f3:13:aa:67:5a:95:4a:e3:95:5c: 1c:7e:a9:24:92:0e:e8:b3:b7:1a:e0:d3:ed:ab:87: e4:5a:62:ad:04:58:a6:f8:0d:e0:b6:9f:6d:c3:df: 7a:48:aa:89:a6:60:25:a2:25:6b:46:10:01:fd:ce: f3:2a:24:d0:58:97:cd:38:67:7b:56:7a:6b:e8:a8: 32:f9:5f:99:4a:01:b9:b7:65:08:aa:29:1e:5f:a4: fb:1c:f2:47:e2:e1:fb:7f:ce:66:21:0a:09:f2:21: 1c:22:2a:a1:aa:c6:7d:34:8c:e3:83:d1:4f:e4:63: 65:b2:31:a0:80:c5:3d:fb:58:85:1a:a9:23:c2:0c: ac:62:cc:84:a6:9f:69:df:cd:04:63:f4:86:4e:3e: da:98:12:a6:71:32:1e:2b:d5:1b:f1:83:94:6b:82: 2e:11:5d:21:ac:d3:26:4a:fd:a6:41:49:5d:cc:ae: ef:0e:fa:3c:80:dc:71:a3:fe:42:08:55:8d:85:da: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:78:4A:19:62:EA:6D:FA:00:E9:79:87:9B:F9:FE:E0:58:E4:E3 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:00:7e:f2:de:23:18:a8:4a:8b:72:dd:8b:46:1e:bc:e2:cf: 63:9f:ad:29:a5:e1:f1:f3:90:9c:8a:1d:c7:6b:42:0b:2e:ad: 69:e0:97:9b:6a:1f:30:c1:fe:57:74:d7:fb:47:f2:ff:da:ea: 9b:ce:40:13:b7:e1:19:cd:9d:1a:8b:eb:a6:9a:c7:a0:17:69: 2a:1d:a9:14:f8:40:cb:b2:50:58:16:2e:50:cc:9a:d1:e7:4c: 6a:20:b1:5d:82:7a:90:ec:71:1f:90:d6:0a:22:38:e5:a2:d5: e2:4e:e3:74:66:a1:d2:38:24:1f:2a:39:d8:ab:ba:f8:c0:72: 4b:f8:10:ca:71:17:0d:90:7b:33:a5:c7:de:ca:e5:2c:b0:4c: 7e:2d:79:55:5f:b7:bf:e8:71:51:10:87:91:bb:54:8e:24:96: 44:b6:8c:d1:2e:d7:2a:5d:4e:75:8d:97:a5:0f:fe:7c:f8:5a: 66:0d:92:38:c5:7d:2e:39:aa:49:6d:65:ed:d1:a2:69:70:9d: 58:26:48:98:bb:a0:ab:9a:e4:3f:58:67:85:b4:ba:21:60:16: 56:5d:fc:f0:17:8e:87:b2:0a:19:a9:90:69:70:dd:95:af:5e: f8:bf:e3:79:29:18:85:0a:e5:1d:1f:b0:24:a3:3d:c2:ac:b0: d4:34:95:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjdCRTExMC8GA1UEBRMoMEY5QUE4REU1M0YwODVFRTg2NUExRTNERDJBMjM0NEUy MTMwQUYxNDAeFw0yNTA0MjcwNTU4MjFaFw0yNTA1MDQwNTU4MjFaMBgxFjAUBgNV BAMTDTY4MGRjNzdlLTA0NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClyI83PxQy9CYfYeNp9QUQ5HgjaLXeHj7OqLUqzSY1W4zFcuUcHwtGEYpje2fg CBdnEJp8t+JgP1T1HTMYY8ae8xOqZ1qVSuOVXBx+qSSSDuiztxrg0+2rh+RaYq0E WKb4DeC2n23D33pIqommYCWiJWtGEAH9zvMqJNBYl804Z3tWemvoqDL5X5lKAbm3 ZQiqKR5fpPsc8kfi4ft/zmYhCgnyIRwiKqGqxn00jOOD0U/kY2WyMaCAxT37WIUa qSPCDKxizISmn2nfzQRj9IZOPtqYEqZxMh4r1Rvxg5Rrgi4RXSGs0yZK/aZBSV3M ru8O+jyA3HGj/kIIVY2F2o9hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeZp4Shli 6m36AOl5h5v5/uBY5OMwHwYDVR0jBBgwFoAUD5qo3lPwhe6GWh490qI0TiEwrxQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGN0JFLzA5Q0UzMjY0OUNG RTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDVxbzNsUHdoZTZHV2g0OTBxSTBUaUV3cnhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG N0JFLzA5Q0UzMjY0OUNGRTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2 R1doNDkwcUkwVGlFd3J4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwAfvLeIxioSoty3YtGHrziz2OfrSml4fHzkJyKHcdrQgsurWngl5tq HzDB/ld01/tH8v/a6pvOQBO34RnNnRqL66aax6AXaSodqRT4QMuyUFgWLlDMmtHn TGogsV2CepDscR+Q1goiOOWi1eJO43RmodI4JB8qOdiruvjAckv4EMpxFw2QezOl x97K5SywTH4teVVft7/ocVEQh5G7VI4klkS2jNEu1ypdTnWNl6UP/nz4WmYNkjjF fS45qkltZe3RomlwnVgmSJi7oKua5D9YZ4W0uiFgFlZd/PAXjoeyChmpkGlw3ZWv Xvi/43kpGIUK5R0fsCSjPcKssNQ0lbM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net