$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json) Hash identifier: PTggWo0nX+qN9TsGVXYTqYFx9ZN+eyQ5nfpr/32f9FI= Subject key identifier: D7:4F:4B:59:17:F5:1F:F3:F1:6D:EC:B6:8D:84:18:0B:36:84:E2:DA Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft Manifest number: 0841 Signing time: Sat 26 Apr 2025 20:32:29 +0000 Manifest this update: Sat 26 Apr 2025 20:32:29 +0000 Manifest next update: Sat 03 May 2025 20:32:29 +0000 Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: mBUuzFg/HcoQA8nKDtQmpIP49XB/+aAswglwQOAsdFE=) 2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: N273KJZBVvsgocX2roxdV3igs8iuW9HGezq7GTon2t0=) 3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 3WiuON+DZCyyzbg9J4hxbgh73YCM3rOmSlSP3M274IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Validity Not Before: Apr 26 20:32:29 2025 GMT Not After : May 3 20:32:29 2025 GMT Subject: CN=680d42dd-b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:61:40:60:52:f8:d4:8b:db:91:ba:04:49:a1: 72:14:a4:d4:89:ca:26:a1:6b:6b:9f:04:e0:e8:5c: 79:6b:66:98:4f:1b:38:ed:a1:7f:90:58:38:e4:f7: 78:99:aa:12:4b:c1:9b:1e:5b:e3:05:37:cf:7c:fd: 7f:56:fc:3e:15:a8:43:cc:71:4d:9f:cf:7f:e6:f6: e4:db:0f:47:14:1f:e3:b2:51:e0:80:e6:b6:3b:c5: 65:01:6f:7b:da:f5:01:20:1c:f3:de:4c:ac:3f:47: 15:d3:5e:f8:28:dd:46:ab:7d:f4:1d:98:fc:51:b8: b3:04:42:ec:5b:52:db:5f:38:2d:73:6e:df:9e:f4: 37:27:b2:5f:53:32:36:fc:86:ef:04:4d:f2:93:55: f4:71:02:07:12:15:02:b2:ea:45:1f:06:fb:bc:6e: 58:1c:a5:dc:5d:2e:9b:25:42:2a:d5:0f:a2:15:59: 99:6e:d7:fe:c6:24:64:e2:a0:f3:a9:10:f5:bc:a1: a5:33:a8:f5:61:0e:ef:f9:3d:af:13:a9:4c:fa:01: 9d:d7:98:c3:a3:2a:a1:75:c7:0a:40:e8:57:eb:cf: 7e:d6:97:9b:ef:43:38:fa:22:dc:73:36:4c:ed:c0: 4f:70:ce:26:d1:90:00:7e:26:fd:01:cd:ae:94:07: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4F:4B:59:17:F5:1F:F3:F1:6D:EC:B6:8D:84:18:0B:36:84:E2:DA X509v3 Authority Key Identifier: keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2e:9a:e9:5a:58:7a:01:f3:68:52:c5:68:c8:df:2e:15:77: 0c:9e:60:6a:cb:2b:9b:e0:db:81:45:16:57:1c:30:b2:90:af: 3e:06:36:63:e0:85:43:cd:1e:6e:3f:9b:64:7c:1c:a5:c8:10: d2:ca:ca:a6:8b:70:69:7f:33:4a:e2:e0:ef:16:19:3c:31:03: 9e:29:0b:c3:e9:7c:56:80:8d:d3:4f:e7:56:4a:a3:0a:9a:b0: 6b:75:b4:63:5f:25:9b:b8:69:90:34:2f:0f:97:05:e8:2c:78: d3:da:a3:a3:b5:c5:48:e8:59:b5:09:5b:fc:3a:fc:a7:bf:35: 85:2e:b3:9a:5c:de:c5:18:a8:79:58:21:6c:a9:bd:ef:10:6f: b4:52:09:df:c2:4e:78:c4:79:e1:53:96:24:ec:7a:f0:f8:e7: 6d:b1:61:35:a5:7d:07:23:61:49:52:e0:bc:96:97:b4:ce:2f: 7f:30:45:77:82:9d:5b:2a:f9:a2:9d:12:59:26:24:39:d8:70: 1d:c5:d4:fc:a4:12:ec:75:73:79:96:dd:51:0c:f2:0c:0d:16: 2a:49:d3:59:c2:33:c2:a0:99:5f:e2:52:96:a0:35:27:f5:1a: bf:80:c9:c5:14:1c:2f:12:5a:cd:99:dc:d1:29:ce:49:cd:57: 5c:8a:ef:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2 MUI2RDM4M0IwHhcNMjUwNDI2MjAzMjI5WhcNMjUwNTAzMjAzMjI5WjAYMRYwFAYD VQQDEw02ODBkNDJkZC1iMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WFAYFL41IvbkboESaFyFKTUicomoWtrnwTg6Fx5a2aYTxs47aF/kFg45Pd4 maoSS8GbHlvjBTfPfP1/Vvw+FahDzHFNn89/5vbk2w9HFB/jslHggOa2O8VlAW97 2vUBIBzz3kysP0cV0174KN1Gq330HZj8UbizBELsW1LbXzgtc27fnvQ3J7JfUzI2 /IbvBE3yk1X0cQIHEhUCsupFHwb7vG5YHKXcXS6bJUIq1Q+iFVmZbtf+xiRk4qDz qRD1vKGlM6j1YQ7v+T2vE6lM+gGd15jDoyqhdccKQOhX689+1peb70M4+iLcczZM 7cBPcM4m0ZAAfib9Ac2ulAdULwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdPS1kX 9R/z8W3sto2EGAs2hOLaMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2 aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDLprpWlh6AfNoUsVoyN8uFXcMnmBqyyub4NuBRRZXHDCykK8+BjZj 4IVDzR5uP5tkfBylyBDSysqmi3BpfzNK4uDvFhk8MQOeKQvD6XxWgI3TT+dWSqMK mrBrdbRjXyWbuGmQNC8PlwXoLHjT2qOjtcVI6Fm1CVv8OvynvzWFLrOaXN7FGKh5 WCFsqb3vEG+0Ugnfwk54xHnhU5Yk7Hrw+OdtsWE1pX0HI2FJUuC8lpe0zi9/MEV3 gp1bKvminRJZJiQ52HAdxdT8pBLsdXN5lt1RDPIMDRYqSdNZwjPCoJlf4lKWoDUn 9Rq/gMnFFBwvElrNmdzRKc5JzVdciu81 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net