$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: oaIFa3Adi58+j3gRtMaNJxa5cwXiF/zBHNyWg60+XMU= Subject key identifier: 08:79:50:DA:23:34:2E:D2:03:F6:18:F6:1F:42:6A:88:BD:C0:0E:36 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 055C Signing time: Mon 28 Apr 2025 20:04:22 +0000 Manifest this update: Mon 28 Apr 2025 20:04:21 +0000 Manifest next update: Mon 05 May 2025 20:04:21 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: XjFh+hJv9VpdrUjaj0M7CA5PBF85OswuhWP7olm1sZs=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: +5HXeZzaqL8Fd/KKvyuXF2mNME+6yWjEsjlZ9TCANS8=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: k1c7GSyH3WoRbwuja3aZP/eqPGFzjIJTKfDzkLI42LM=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: WDAtZkvVBWCh4sdS393tb7mD2RpYvoRQQWQo7es9q/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Apr 28 20:04:21 2025 GMT Not After : May 5 20:04:21 2025 GMT Subject: CN=680fdf45-96d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:1e:15:e0:85:51:cb:3f:57:e9:e3:4b:2b: d1:b9:1b:33:6e:d9:1f:80:82:5f:4e:f9:c6:a2:72: 07:79:a6:fd:df:c9:82:d1:ff:6f:ff:df:26:d3:a7: 2f:ee:72:25:27:71:cb:c6:b5:ab:3d:53:e4:cd:bb: 1e:6f:ce:ff:e7:8b:df:0b:29:29:01:12:c7:99:3a: 47:d7:97:48:65:63:6f:d3:37:6b:79:a9:eb:bd:d7: 5a:8e:7e:b2:7b:ea:c4:d7:3f:20:91:2c:73:52:44: 23:f9:1c:1e:80:50:99:e5:63:1e:01:f0:39:c0:37: e4:00:5c:d3:e9:f9:d7:d0:ad:fa:24:19:f3:7f:8b: d5:1a:6d:b2:f1:06:ef:37:eb:4f:95:d1:69:fe:e6: 96:53:db:68:6d:36:4d:c8:96:ac:4b:22:6c:fa:9e: 55:e9:52:c7:1a:f0:17:6b:f9:8c:50:46:3d:45:79: 4c:a0:6c:56:33:64:83:b1:b3:b5:48:a0:ba:eb:af: a3:79:28:98:a0:19:a2:bd:cd:16:ee:be:b4:26:05: 07:91:1b:66:eb:73:75:85:0e:55:d6:eb:66:f8:a7: 72:67:17:ea:3b:fd:eb:54:59:47:ea:b8:8d:a2:f1: 5a:85:3d:48:04:6b:5c:e2:ae:ce:8d:a1:fa:2f:ef: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:79:50:DA:23:34:2E:D2:03:F6:18:F6:1F:42:6A:88:BD:C0:0E:36 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:72:fa:2f:b2:aa:66:8f:ec:2f:0a:5c:c4:31:f0:54:68:52: 94:7c:d1:70:97:07:45:0e:f7:5e:4c:cd:01:3b:ab:3a:25:68: 97:60:08:58:01:37:0b:29:20:da:93:0d:d6:04:a9:f5:3c:ef: 55:96:7b:85:77:1e:79:23:c0:af:90:e3:6b:56:1f:36:c0:80: e6:59:04:e5:20:13:bd:ad:07:5b:5f:7c:44:2d:0e:19:9b:8b: fe:db:51:cb:3e:3b:a0:55:5a:82:63:ca:2e:35:63:41:d2:eb: b5:e3:d0:f1:9c:46:4f:a7:97:41:77:6f:7b:c0:b1:ed:32:aa: aa:93:15:52:17:a9:65:cc:55:63:c2:a4:72:9c:a1:6c:71:92: 09:77:42:a8:cd:dc:db:31:f0:77:07:e1:dc:13:59:b8:1b:c1: a0:68:06:d8:9b:11:91:c3:dc:37:e0:99:8a:54:a1:6b:b2:d0: 70:f8:da:ce:26:8d:28:ed:51:c5:64:09:5c:3f:27:9d:28:22: be:72:fc:dc:4f:4d:74:54:4a:3e:8a:4d:02:4d:26:ec:e8:1b: 65:42:a5:97:98:27:fa:d7:4c:86:2c:0b:13:32:e2:b0:66:c0: 4f:40:aa:e8:55:da:14:2a:6a:83:0f:e8:97:87:bc:64:95:dd: d4:5c:ea:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNDI4MjAwNDIxWhcNMjUwNTA1MjAwNDIxWjAYMRYwFAYD VQQDEw02ODBmZGY0NS05NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIoeFeCFUcs/V+njSyvRuRszbtkfgIJfTvnGonIHeab938mC0f9v/98m06cv 7nIlJ3HLxrWrPVPkzbseb87/54vfCykpARLHmTpH15dIZWNv0zdreanrvddajn6y e+rE1z8gkSxzUkQj+RwegFCZ5WMeAfA5wDfkAFzT6fnX0K36JBnzf4vVGm2y8Qbv N+tPldFp/uaWU9tobTZNyJasSyJs+p5V6VLHGvAXa/mMUEY9RXlMoGxWM2SDsbO1 SKC666+jeSiYoBmivc0W7r60JgUHkRtm63N1hQ5V1utm+KdyZxfqO/3rVFlH6riN ovFahT1IBGtc4q7OjaH6L+8HDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh5UNoj NC7SA/YY9h9Caoi9wA42MB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtcvovsqpmj+wvClzEMfBUaFKUfNFwlwdFDvdeTM0BO6s6JWiXYAhY ATcLKSDakw3WBKn1PO9VlnuFdx55I8CvkONrVh82wIDmWQTlIBO9rQdbX3xELQ4Z m4v+21HLPjugVVqCY8ouNWNB0uu149DxnEZPp5dBd297wLHtMqqqkxVSF6llzFVj wqRynKFscZIJd0KozdzbMfB3B+HcE1m4G8GgaAbYmxGRw9w34JmKVKFrstBw+NrO Jo0o7VHFZAlcPyedKCK+cvzcT010VEo+ik0CTSbs6BtlQqWXmCf610yGLAsTMuKw ZsBPQKroVdoUKmqDD+iXh7xkld3UXOqj -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:31 2025 by rpki-client on console.sobornost.net