$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: bGmvj2z2W5pdIeRM7lCXGIaLuaknx+jhD61qnd7YyBA= Subject key identifier: B0:48:76:24:6F:3B:B9:E0:98:1D:02:6F:DF:FC:6A:32:9A:EE:B4:28 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 05C6 Signing time: Sat 26 Apr 2025 22:43:48 +0000 Manifest this update: Sat 26 Apr 2025 22:43:47 +0000 Manifest next update: Sat 03 May 2025 22:43:47 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: uCicOHXWxEek8XiBTwZt6X9OFiLR/emroyeVb6KGYIw=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: Sk3MXf9hmKLKaZp7ZXhyP99sQACjplOfFz1EgPLs6Ek=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: BQWLLp5AImfbBq763vvDpgX+6Q3xmVvjxSK4ih5JSF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Apr 26 22:43:47 2025 GMT Not After : May 3 22:43:47 2025 GMT Subject: CN=680d61a3-2220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:61:d2:17:b8:9c:24:d2:4d:d0:d1:04:99: d9:6e:db:66:58:4a:4f:72:9a:6f:3b:b8:f4:5f:c4: 21:86:fb:89:6f:74:f3:8b:46:ac:4f:a4:77:da:c5: 7e:0d:b6:6e:ad:8e:db:5e:cb:2f:78:e1:87:6a:cd: 16:02:99:d8:68:a1:7b:83:1b:2e:ea:0e:71:42:ae: 24:b7:db:a6:15:52:71:45:c0:94:97:6e:12:4f:3f: 0d:67:35:b0:b2:90:8a:ba:01:19:fe:f8:a9:ac:88: 02:64:47:b3:7c:ca:c8:46:af:3f:ae:a0:6b:aa:fa: 97:66:b3:8d:94:dd:d3:c5:e9:b6:5b:08:69:39:72: d0:65:9b:b6:99:db:e3:40:07:20:ca:ab:9c:4b:d6: 10:2a:92:a3:d9:f3:6d:07:2e:af:d1:39:39:0a:ce: ce:02:e6:61:6e:62:a3:ad:fb:da:4e:e1:1d:4a:19: 79:15:fb:3e:9a:bf:0f:b9:f2:65:2b:5c:95:50:e0: aa:ba:cb:7f:ac:ba:80:47:e8:f2:c4:3b:f8:f9:bd: 17:e2:84:df:82:2a:5c:24:06:2a:42:cd:f7:ca:a7: d4:99:85:82:0c:80:2a:da:d2:fa:a1:0c:72:6e:63: f6:bf:ea:70:c6:24:2c:e2:e6:e4:60:ae:3d:69:ff: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:76:24:6F:3B:B9:E0:98:1D:02:6F:DF:FC:6A:32:9A:EE:B4:28 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:66:18:82:13:fe:c4:9c:88:d9:dc:bb:f8:8b:3a:e7:4a:0f: 28:54:8f:f7:4c:fc:e8:f4:ab:31:46:99:31:62:1c:20:a4:69: e8:b3:b7:9e:c0:11:b8:10:62:9f:ba:8e:f3:70:f0:c1:76:c7: 1f:19:10:cf:03:ce:4c:f6:83:6e:43:d7:de:8d:dd:43:9f:c9: 3e:2e:2a:86:d6:d2:24:07:7d:7e:3e:5b:93:60:0c:54:b6:25: df:b9:4c:27:5c:1c:97:b6:47:8f:c8:ad:e2:ee:01:59:81:cd: 8a:23:dd:b2:17:46:9d:46:00:39:b2:bb:f2:c3:88:2a:72:e8: 0c:25:f1:39:22:35:26:e0:9b:95:d4:13:32:1f:5f:e4:89:d8: 96:7c:e7:62:ed:fa:9e:9a:8d:12:15:77:6a:33:32:2a:61:8d: ed:44:3c:42:ea:e7:f3:e0:5c:07:97:3d:55:29:64:ce:aa:a1: 60:a3:84:96:9c:37:d5:79:31:c4:db:fe:d8:55:7a:ce:28:ac: cb:b8:26:90:d2:7a:fa:e4:00:5d:c8:9d:54:40:76:02:45:f0: b9:28:4e:91:6e:00:d9:15:cd:66:5e:6a:9b:e8:d0:9b:32:ab: 4e:65:72:a8:6f:ec:0f:5a:37:a0:d5:7d:90:a2:68:29:61:81: e6:80:19:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUwNDI2MjI0MzQ3WhcNMjUwNTAzMjI0MzQ3WjAYMRYwFAYD VQQDEw02ODBkNjFhMy0yMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3hh0he4nCTSTdDRBJnZbttmWEpPcppvO7j0X8QhhvuJb3Tzi0asT6R32sV+ DbZurY7bXssveOGHas0WApnYaKF7gxsu6g5xQq4kt9umFVJxRcCUl24STz8NZzWw spCKugEZ/viprIgCZEezfMrIRq8/rqBrqvqXZrONlN3Txem2WwhpOXLQZZu2mdvj QAcgyqucS9YQKpKj2fNtBy6v0Tk5Cs7OAuZhbmKjrfvaTuEdShl5Ffs+mr8PufJl K1yVUOCqust/rLqAR+jyxDv4+b0X4oTfgipcJAYqQs33yqfUmYWCDIAq2tL6oQxy bmP2v+pwxiQs4ubkYK49af+qXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBIdiRv O7ngmB0Cb9/8ajKa7rQoMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATZhiCE/7EnIjZ3Lv4izrnSg8oVI/3TPzo9KsxRpkxYhwgpGnos7ee wBG4EGKfuo7zcPDBdscfGRDPA85M9oNuQ9fejd1Dn8k+LiqG1tIkB31+PluTYAxU tiXfuUwnXByXtkePyK3i7gFZgc2KI92yF0adRgA5srvyw4gqcugMJfE5IjUm4JuV 1BMyH1/kidiWfOdi7fqemo0SFXdqMzIqYY3tRDxC6ufz4FwHlz1VKWTOqqFgo4SW nDfVeTHE2/7YVXrOKKzLuCaQ0nr65ABdyJ1UQHYCRfC5KE6RbgDZFc1mXmqb6NCb MqtOZXKob+wPWjeg1X2QomgpYYHmgBms -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net