$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: doORZXXee1McfuN409sLCPuzKEV/2dbynsOs28p8USg= Subject key identifier: 47:D9:19:03:98:FF:26:0D:0A:04:5E:AB:75:1B:45:9C:1A:39:C1:D6 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03B4 Signing time: Sun 27 Apr 2025 00:22:08 +0000 Manifest this update: Sun 27 Apr 2025 00:22:07 +0000 Manifest next update: Sun 04 May 2025 00:22:07 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: rgC9hypIK0SjF8UkAkQ6lH0BcalzShuq2Q9MvPDEOBQ=) 2: CA2F11AE8F0511ECB2497B14C4F9AE02.roa (hash: 2wBvjopI6Vu44IOAbgZoKB38msMcdFtbrAtro1uYtcs=) 3: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) 4: C99952B88F0511ECB2497B14C4F9AE02.roa (hash: lMMU3olW5BuoTZQ6q1+8/uYyxoqh/0x3DcqtcEwX+/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Apr 27 00:22:07 2025 GMT Not After : May 4 00:22:07 2025 GMT Subject: CN=680d78af-974b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:fa:b7:3c:30:9c:1f:16:45:a1:07:83:8f: 08:7d:a3:af:af:ac:9d:c1:f8:78:f8:22:0c:c9:a9: 1a:6b:a0:02:23:0a:c0:44:13:fa:b1:87:0a:d1:6d: 19:e5:ee:cb:32:d6:ea:b7:8e:31:a8:c4:a5:07:d5: f0:2c:9b:b1:4b:9c:78:c7:43:8c:fb:30:61:d5:98: 56:2b:8c:17:c4:89:c4:dd:a4:ab:e0:37:e0:9f:d7: a0:cf:d5:28:49:30:db:0e:c8:c8:75:29:e4:13:04: 79:1a:2f:67:b2:3e:e1:37:90:81:61:04:70:bf:8e: 94:cb:be:ee:6a:b6:38:e9:3e:5f:67:48:58:0d:b6: 3b:24:11:6c:0b:e9:ae:34:f3:f3:cd:7f:ac:16:2a: 9c:20:c1:11:8e:ef:a8:9c:c6:c7:11:48:55:83:f6: b7:1c:4e:e1:b0:e7:b8:ec:b2:03:8b:2d:a7:85:c4: c8:15:3c:c4:b0:a8:3e:85:cd:ee:43:fd:4f:57:48: 6c:62:98:49:0e:6f:09:6b:11:ac:c3:b9:5e:4e:d9: 07:ba:9d:2c:b2:a7:d6:6a:cb:a9:12:e7:ba:e6:48: c9:45:e8:ec:55:fa:7d:7b:fa:78:78:1a:42:f1:d9: 8d:18:95:ad:ea:07:f7:b5:7d:4c:bf:09:37:8a:5f: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:19:03:98:FF:26:0D:0A:04:5E:AB:75:1B:45:9C:1A:39:C1:D6 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e3:b1:cf:7b:af:1e:4c:60:a0:cb:9f:a7:d9:b6:80:d0:69: e4:f1:9e:91:c2:65:27:73:83:75:52:df:67:4f:59:97:de:64: eb:57:b3:a4:ce:f5:96:8a:19:5a:b1:fd:2b:4e:32:7c:e5:37: d4:cb:bc:8a:d6:1b:ad:30:1b:aa:a4:cf:2f:af:1e:cd:f7:51: 05:2f:65:b3:28:cf:93:ac:10:93:40:95:a3:9b:5e:cb:5f:11: af:60:f0:27:e5:fd:7a:11:e2:32:7f:de:5c:56:09:07:78:d4: 94:24:a2:c4:4e:e4:71:f8:28:e0:41:e9:a0:53:3d:3c:e3:9e: 8a:2d:c5:20:03:e8:4f:4b:06:c9:25:c4:dc:4d:10:b5:d6:a3: ce:ba:f8:53:05:5f:00:ac:07:6c:98:3e:eb:b9:30:41:05:16: 93:51:b8:06:d8:df:35:cc:45:85:88:04:d7:73:f7:a0:65:2a: 33:48:ba:3f:03:e5:52:c0:b6:70:2a:bd:78:d2:bd:be:9d:5c: 54:ca:4b:7e:24:8e:0c:53:b2:bb:c2:87:4b:e3:3f:00:25:dd: a2:3c:31:3f:35:7d:17:77:27:d7:3e:f9:44:a3:3d:fb:2e:92: 11:ae:18:c7:27:cc:8a:89:8a:d0:0e:d0:af:1f:c1:0a:2a:7f: f3:25:a3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwNDI3MDAyMjA3WhcNMjUwNTA0MDAyMjA3WjAYMRYwFAYD VQQDEw02ODBkNzhhZi05NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDf6tzwwnB8WRaEHg48IfaOvr6ydwfh4+CIMyakaa6ACIwrARBP6sYcK0W0Z 5e7LMtbqt44xqMSlB9XwLJuxS5x4x0OM+zBh1ZhWK4wXxInE3aSr4Dfgn9egz9Uo STDbDsjIdSnkEwR5Gi9nsj7hN5CBYQRwv46Uy77uarY46T5fZ0hYDbY7JBFsC+mu NPPzzX+sFiqcIMERju+onMbHEUhVg/a3HE7hsOe47LIDiy2nhcTIFTzEsKg+hc3u Q/1PV0hsYphJDm8JaxGsw7leTtkHup0ssqfWasupEue65kjJRejsVfp9e/p4eBpC 8dmNGJWt6gf3tX1Mvwk3il/nbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfZGQOY /yYNCgReq3UbRZwaOcHWMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw47HPe68eTGCgy5+n2baA0Gnk8Z6RwmUnc4N1Ut9nT1mX3mTrV7Ok zvWWihlasf0rTjJ85TfUy7yK1hutMBuqpM8vrx7N91EFL2WzKM+TrBCTQJWjm17L XxGvYPAn5f16EeIyf95cVgkHeNSUJKLETuRx+CjgQemgUz08456KLcUgA+hPSwbJ JcTcTRC11qPOuvhTBV8ArAdsmD7ruTBBBRaTUbgG2N81zEWFiATXc/egZSozSLo/ A+VSwLZwKr140r2+nVxUykt+JI4MU7K7wodL4z8AJd2iPDE/NX0XdyfXPvlEoz37 LpIRrhjHJ8yKiYrQDtCvH8EKKn/zJaOv -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net