$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json) Hash identifier: iQZetLStooSE+rd5Aja7YfkPrZUnybQHZMTpm9rr2RQ= Subject key identifier: 91:9E:98:88:9B:53:38:F4:A9:39:20:AC:5D:98:7B:2A:AC:3E:44:13 Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft Manifest number: 06A4 Signing time: Sat 26 Apr 2025 21:53:27 +0000 Manifest this update: Sat 26 Apr 2025 21:53:27 +0000 Manifest next update: Sat 03 May 2025 21:53:27 +0000 Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: qzXxBwGDJP9AFU1FxZMajDN5oQ9pBfBFNzfvQntlTzo=) 2: 05F05106586011EE9399A92EC4F9AE02.roa (hash: ZoyzDGshP3Xcoohd0LXUFxcHdBCls9Mtr+7VfTCfHng=) 3: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: atNvogMajVgrPoutiUYnbQeZE/aQ+6Wia9GfoJ31M8o=) 4: 34956990D75511EF80E68A39C4F9AE02.roa (hash: h81pLQ3f9taD4ZqBYBRt4RndKbd9f7ld0NnWuyDorBE=) 5: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: Ugt+4UcuNweFOll74GevcYAxRnvyyr25SWxXtIDRBOs=) 6: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: OJZvptd+tocMmJD9s/jElE2hQgWZLbxuwcVBqNbj/eE=) 7: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: 1+LvjWYI9J8a4Eg8H2uslKbRbyLwQqWNXS1h5+rfIco=) 8: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: KBvqkQdj5OAEkzL6ogJ3+9HoBsBkMOAMwsqEyeP/iq8=) 9: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: +GfFG8a92/6/e1SPONilMIvPHcJ1t193OnonNOBg/KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Apr 26 21:53:27 2025 GMT Not After : May 3 21:53:27 2025 GMT Subject: CN=680d55d7-ff92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:4c:1f:72:ff:e3:17:a4:56:af:0a:e1:40: 90:c3:5b:f5:f8:37:83:90:ab:bd:d4:25:36:cc:cb: 59:9d:95:1b:44:fb:5e:48:de:66:50:c2:d7:3f:39: 3b:f2:3e:cc:cb:82:0e:28:4a:e5:b4:9d:41:45:62: cb:1f:d5:45:a8:b7:15:cb:a2:cc:7a:f1:94:3d:66: 70:7d:4e:c2:cd:f6:ed:71:6a:2d:5c:c9:48:95:3c: 61:e2:0c:4b:d6:34:ab:6d:cd:b5:ed:43:ea:08:36: 7a:e3:11:1a:e7:09:0f:49:c7:e1:59:95:d3:53:3e: 50:8d:57:a6:0b:2f:88:89:6e:84:11:61:be:d6:3c: b9:34:b5:7b:0a:ee:48:48:b9:85:a4:33:09:75:fc: ed:58:28:a5:b2:a9:a0:ef:9e:fb:39:3b:5b:49:83: cc:2c:85:69:50:15:1b:23:de:83:9d:cd:10:2d:81: f4:fe:ed:70:7f:39:fa:55:11:4a:3d:f6:f8:c9:da: b0:21:29:95:98:43:51:a5:6c:78:61:9e:5d:a8:6a: ab:44:28:97:30:69:a1:f5:be:45:91:c5:30:61:cc: 93:11:38:61:7a:35:e0:35:c8:3c:98:b4:9a:6b:e2: e2:b0:58:fa:49:ad:c3:aa:22:f6:55:1c:d7:a7:cd: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:98:88:9B:53:38:F4:A9:39:20:AC:5D:98:7B:2A:AC:3E:44:13 X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a3:34:42:3b:ff:58:8c:2a:45:f9:59:92:b3:ac:79:a8:7d: 0f:12:c1:03:e6:42:52:55:37:20:6e:51:93:48:59:58:96:c7: 3a:fb:e9:88:71:e7:c1:29:e1:10:30:eb:56:1a:af:3b:fb:b4: 24:fc:d9:d5:e0:68:58:bc:3a:72:fc:bd:c7:bc:14:dd:a5:b4: 9f:9e:71:99:b2:16:9e:1a:6a:33:fa:b6:10:af:69:34:c3:70: d6:d1:ca:50:b5:91:e3:9b:b4:ef:75:6f:a7:81:3b:24:ac:0e: 8f:a9:e6:1f:29:c7:7f:dc:9d:5e:08:a4:2b:08:42:c4:59:8f: 37:55:87:dd:ce:21:91:1e:c8:6d:90:7b:3c:52:0a:f7:9e:0e: af:58:95:5d:78:42:b8:e0:92:70:56:9c:41:06:66:ae:3d:40: 39:cb:31:2a:70:ce:a2:9f:b3:0c:ab:b8:f9:97:a0:a3:24:76: 4e:5e:42:99:18:ca:49:9a:e3:b9:d1:9b:47:9f:1c:e9:4d:e4: 07:80:42:76:e2:af:93:81:00:5b:04:60:bc:2e:30:6d:70:56: 08:4f:0c:b9:c5:15:a9:40:c7:0b:b7:e6:66:b7:6f:e0:80:b0: e3:47:65:82:f7:12:ed:2d:3c:ca:8c:a2:40:88:26:83:5d:3f: c0:34:ca:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwNDI2MjE1MzI3WhcNMjUwNTAzMjE1MzI3WjAYMRYwFAYD VQQDEw02ODBkNTVkNy1mZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GdMH3L/4xekVq8K4UCQw1v1+DeDkKu91CU2zMtZnZUbRPteSN5mUMLXPzk7 8j7My4IOKErltJ1BRWLLH9VFqLcVy6LMevGUPWZwfU7CzfbtcWotXMlIlTxh4gxL 1jSrbc217UPqCDZ64xEa5wkPScfhWZXTUz5QjVemCy+IiW6EEWG+1jy5NLV7Cu5I SLmFpDMJdfztWCilsqmg7577OTtbSYPMLIVpUBUbI96Dnc0QLYH0/u1wfzn6VRFK Pfb4ydqwISmVmENRpWx4YZ5dqGqrRCiXMGmh9b5FkcUwYcyTEThhejXgNcg8mLSa a+LisFj6Sa3DqiL2VRzXp81YbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGemIib Uzj0qTkgrF2YeyqsPkQTMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DQTU2M0JFODY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlL NXRuV0l2bXVfWHBNa1ZUeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFozRCO/9YjCpF+VmSs6x5qH0PEsED5kJSVTcgblGTSFlYlsc6++mI cefBKeEQMOtWGq87+7Qk/NnV4GhYvDpy/L3HvBTdpbSfnnGZshaeGmoz+rYQr2k0 w3DW0cpQtZHjm7TvdW+ngTskrA6PqeYfKcd/3J1eCKQrCELEWY83VYfdziGRHsht kHs8Ugr3ng6vWJVdeEK44JJwVpxBBmauPUA5yzEqcM6in7MMq7j5l6CjJHZOXkKZ GMpJmuO50ZtHnxzpTeQHgEJ24q+TgQBbBGC8LjBtcFYITwy5xRWpQMcLt+Zmt2/g gLDjR2WC9xLtLTzKjKJAiCaDXT/ANMrZ -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net