$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: ll+RDcASmIF95v9QVYPIaCizi0FEdEojMV9PtuMo+og= Subject key identifier: 56:AB:53:D2:AF:A4:C1:A7:4B:77:72:09:D2:D2:7F:B9:44:28:D7:3C Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 01BB Signing time: Sun 27 Apr 2025 02:43:28 +0000 Manifest this update: Sun 27 Apr 2025 02:43:27 +0000 Manifest next update: Sun 04 May 2025 02:43:27 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: RojPlrFaucLeaOGZbWUjYHqQFfwq1JdPYQhntTUB1oc=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: Us38glA0PRb/dVpHLW6+MQj9tdG4tZeLrUJnViUxN+4=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: nvNzzZq+Ecqxgr++TobaSpU0AIRI4UzjKN1i1sjHamI=) 4: 05F505961AA311F0A475D464C4F9AE02.roa (hash: OSQRdlcQj6k764THSK6rh8dF7UxUy6xyA8imS71zqwM=) 5: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: zHCopvhlSI3/gyDKf4blYHqhGA6hr7IEtv0USDnvf9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Apr 27 02:43:27 2025 GMT Not After : May 4 02:43:27 2025 GMT Subject: CN=680d99d0-f35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:d7:64:a8:40:70:45:d0:eb:cb:02:ff:2d: 50:38:69:cd:85:b4:55:89:1c:4a:13:c2:f2:67:44: 27:80:42:31:e1:f8:93:25:85:54:96:9a:7e:d4:77: 86:56:0e:00:bd:c3:ef:8b:72:fe:77:7f:81:73:c3: e2:7f:89:31:e9:96:44:c2:a5:9f:e3:77:52:3c:04: b5:f1:14:02:f6:42:70:bf:44:85:1c:e5:9b:79:11: 3c:cb:09:ae:83:ea:8d:aa:a5:e3:fb:21:e4:8b:f2: 91:0c:47:1d:77:0a:89:a6:ff:06:ba:2f:6b:fa:95: ea:37:8b:1f:c2:43:eb:2b:3a:6c:73:e8:a1:00:a1: 4e:1d:19:0c:a5:60:60:94:eb:d1:bc:ff:7a:52:7c: 26:72:74:67:b5:ad:c9:21:41:29:bc:dd:97:a1:29: 9e:35:d6:65:fa:a2:1d:12:72:3c:fc:85:80:9e:4d: 21:44:73:33:fd:4d:a8:3f:b8:63:21:9f:47:95:e5: 8c:0a:c3:57:f3:a6:e7:59:96:f7:54:b1:7a:73:5f: 4e:b9:8b:9f:41:36:9e:22:e9:ea:8f:ce:71:84:90: 82:ee:65:1d:d9:28:51:a8:22:78:60:d8:2a:75:0c: a9:2c:2d:06:21:9e:47:79:bb:49:8d:38:60:11:43: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AB:53:D2:AF:A4:C1:A7:4B:77:72:09:D2:D2:7F:B9:44:28:D7:3C X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:64:50:8e:63:c4:ec:d3:dd:52:3d:c8:12:63:e9:25:ef:3f: be:25:d2:b2:7e:d9:57:fd:32:3b:86:9f:f4:e8:04:7c:21:fc: 81:67:ea:11:10:88:66:74:3e:96:ee:76:4a:64:8d:3f:62:d7: 84:10:53:33:40:20:54:65:5e:1e:d1:a9:c5:6e:68:5a:d1:ed: 4a:54:08:a3:81:98:6c:1a:82:10:54:5a:7a:5a:28:9d:83:af: 35:04:2b:0d:3a:37:84:27:f0:55:1e:6f:4f:33:7d:ad:66:72: 7e:9e:47:72:9c:1b:50:ee:b8:12:ef:13:4c:89:79:a9:2e:77: 7c:f0:1b:8c:2f:7a:22:6c:cd:93:56:50:bb:23:c4:5f:9a:88: 1c:4a:28:c4:dd:cf:e2:d2:17:20:d8:a3:e2:83:6f:0c:92:fd: f4:9b:5d:b2:bb:32:08:73:54:98:d6:61:d1:83:33:3b:52:99: 05:51:d5:46:19:4b:de:ad:9a:84:59:35:dc:f8:d3:4a:14:42: 7d:71:fc:0f:46:28:40:e4:38:fe:db:61:cc:7a:cc:92:75:f8: 71:6c:17:d9:e4:73:0e:20:76:f7:54:83:d8:93:d4:2f:f7:fa: a2:96:b0:ad:9f:59:95:e2:0d:92:3f:51:95:94:a4:6a:22:5b: a7:8c:f2:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUwNDI3MDI0MzI3WhcNMjUwNTA0MDI0MzI3WjAYMRYwFAYD VQQDEw02ODBkOTlkMC1mMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3fXZKhAcEXQ68sC/y1QOGnNhbRViRxKE8LyZ0QngEIx4fiTJYVUlpp+1HeG Vg4AvcPvi3L+d3+Bc8Pif4kx6ZZEwqWf43dSPAS18RQC9kJwv0SFHOWbeRE8ywmu g+qNqqXj+yHki/KRDEcddwqJpv8Gui9r+pXqN4sfwkPrKzpsc+ihAKFOHRkMpWBg lOvRvP96UnwmcnRnta3JIUEpvN2XoSmeNdZl+qIdEnI8/IWAnk0hRHMz/U2oP7hj IZ9HleWMCsNX86bnWZb3VLF6c19OuYufQTaeIunqj85xhJCC7mUd2ShRqCJ4YNgq dQypLC0GIZ5HebtJjThgEUMxpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFarU9Kv pMGnS3dyCdLSf7lEKNc8MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ZFCOY8Ts091SPcgSY+kl7z++JdKyftlX/TI7hp/06AR8IfyBZ+oR EIhmdD6W7nZKZI0/YteEEFMzQCBUZV4e0anFbmha0e1KVAijgZhsGoIQVFp6Wiid g681BCsNOjeEJ/BVHm9PM32tZnJ+nkdynBtQ7rgS7xNMiXmpLnd88BuML3oibM2T VlC7I8RfmogcSijE3c/i0hcg2KPig28Mkv30m12yuzIIc1SY1mHRgzM7UpkFUdVG GUverZqEWTXc+NNKFEJ9cfwPRihA5Dj+22HMesySdfhxbBfZ5HMOIHb3VIPYk9Qv 9/qilrCtn1mV4g2SP1GVlKRqIlunjPLg -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net