$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: g94M4PkbUbDIquWE3R8HLBy6gu49kdqNl/XiRe9oxug= Subject key identifier: D5:74:EF:75:41:71:E5:F9:64:AA:A4:C0:24:BC:68:1B:7E:A8:12:1B Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 1048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 103D Signing time: Mon 28 Apr 2025 17:38:28 +0000 Manifest this update: Mon 28 Apr 2025 17:38:27 +0000 Manifest next update: Mon 05 May 2025 17:38:27 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: 4Ija6lcyZeIN7czMFHT9x4yxKBIQTDpTL4R6w2cOXZY=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: FBjiENDexTIY9F8hqJiP3C+uJeH57VnMwir8al3nYvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4168 (0x1048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Apr 28 17:38:27 2025 GMT Not After : May 5 17:38:27 2025 GMT Subject: CN=680fbd14-498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:23:a2:d6:9d:2b:5b:a0:8f:cc:15:5c:ae: 67:a4:d3:87:1c:20:d8:55:7d:9f:a6:8c:7f:80:88: 2b:9c:6c:82:4e:f8:49:fa:23:be:72:da:2a:55:01: 4f:5b:33:8c:ab:ed:91:5f:79:5f:aa:ed:c5:ba:e8: ba:d4:34:3f:c7:b0:b9:29:aa:62:36:2b:86:26:75: 74:0d:0d:b0:71:0b:97:a2:66:f0:db:90:7c:d1:4c: 71:65:3a:59:53:50:b0:65:f0:df:3f:7e:45:9c:3f: fd:26:b8:7f:be:72:ca:17:c6:28:82:e4:19:1e:2e: 3c:34:37:29:2a:cf:60:69:19:d7:2a:15:cf:69:4e: f3:88:28:3a:b5:ea:43:bb:37:4c:a6:3f:f4:b4:c1: 4a:ae:07:58:a1:37:18:a3:57:9b:80:16:fa:21:d7: d5:c3:f9:2a:01:2e:40:9c:11:5c:82:5e:8e:d4:cb: 5d:2b:12:81:38:e5:20:1f:06:9e:69:4d:1e:01:0e: de:e9:d6:d1:f9:07:de:49:74:bb:83:67:95:8f:fa: 5c:45:7a:7a:5a:a0:8f:27:d6:93:23:29:07:42:bc: b3:f3:ae:ba:9f:05:0a:a1:0a:4a:c3:04:a9:48:0a: 7f:52:cf:6a:db:bd:93:02:1b:22:94:31:4c:25:1e: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:EF:75:41:71:E5:F9:64:AA:A4:C0:24:BC:68:1B:7E:A8:12:1B X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0d:ae:8e:95:d6:9d:02:5b:a2:39:32:13:8a:fb:30:85:6f: ed:47:69:b0:2d:7e:70:e9:e8:23:95:e6:63:7f:75:46:37:fd: c6:2f:90:01:80:26:74:30:a6:66:87:6f:8c:3c:36:61:ac:23: d3:43:19:95:fd:e8:82:dd:27:76:fc:dd:d0:e2:e1:7e:ae:a4: 37:27:a8:ab:40:99:b8:c1:30:8f:bf:7c:43:97:4b:ff:37:bd: d7:34:67:9c:54:89:9b:6e:99:0f:98:5e:e6:76:b9:6d:f3:3d: 2b:4b:b7:14:4d:91:29:e9:ce:16:a7:8a:bd:08:f2:41:39:d3: c0:f8:56:15:f6:f3:4f:95:ab:6f:8f:28:b5:b7:ad:1c:e7:4e: ba:bb:5f:f2:ec:25:54:9d:98:06:f5:e2:5c:31:2c:66:33:f4: 39:55:31:0a:cf:f5:a6:4e:8e:e9:2d:c5:f3:48:9c:04:7e:e0: 24:8d:a5:7d:f5:62:89:2a:47:ec:fd:15:11:5a:53:f8:0c:b5: c2:83:21:de:73:17:7c:00:98:2a:c0:72:1b:82:d9:94:2c:e5: 2f:fd:56:3e:9b:8d:b7:eb:8b:8c:3d:d0:6a:23:76:0f:6b:c3: ce:3a:30:f3:e9:00:e7:ea:bf:a3:a3:bf:75:38:45:8a:57:28: 30:cd:7f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwNDI4MTczODI3WhcNMjUwNTA1MTczODI3WjAYMRYwFAYD VQQDEw02ODBmYmQxNC00OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmocjotadK1ugj8wVXK5npNOHHCDYVX2fpox/gIgrnGyCTvhJ+iO+ctoqVQFP WzOMq+2RX3lfqu3Fuui61DQ/x7C5KapiNiuGJnV0DQ2wcQuXombw25B80UxxZTpZ U1CwZfDfP35FnD/9Jrh/vnLKF8YoguQZHi48NDcpKs9gaRnXKhXPaU7ziCg6tepD uzdMpj/0tMFKrgdYoTcYo1ebgBb6IdfVw/kqAS5AnBFcgl6O1MtdKxKBOOUgHwae aU0eAQ7e6dbR+QfeSXS7g2eVj/pcRXp6WqCPJ9aTIykHQryz8666nwUKoQpKwwSp SAp/Us9q272TAhsilDFMJR5q7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV073VB ceX5ZKqkwCS8aBt+qBIbMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeDa6OldadAluiOTITivswhW/tR2mwLX5w6egjleZjf3VGN/3GL5AB gCZ0MKZmh2+MPDZhrCPTQxmV/eiC3Sd2/N3Q4uF+rqQ3J6irQJm4wTCPv3xDl0v/ N73XNGecVImbbpkPmF7mdrlt8z0rS7cUTZEp6c4Wp4q9CPJBOdPA+FYV9vNPlatv jyi1t60c5066u1/y7CVUnZgG9eJcMSxmM/Q5VTEKz/WmTo7pLcXzSJwEfuAkjaV9 9WKJKkfs/RURWlP4DLXCgyHecxd8AJgqwHIbgtmULOUv/VY+m42364uMPdBqI3YP a8POOjDz6QDn6r+jo791OEWKVygwzX9w -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net