$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json) Hash identifier: sC/iJYzo6cNRNENlCnFQrIKBYTuzERuxgiYczqJTUE8= Subject key identifier: 78:F9:32:E6:A9:19:1D:47:61:6F:C3:48:25:57:63:4C:95:F5:0E:56 Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft Manifest number: A8 Signing time: Sun 27 Apr 2025 05:01:21 +0000 Manifest this update: Sun 27 Apr 2025 05:01:21 +0000 Manifest next update: Sun 04 May 2025 05:01:20 +0000 Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: tYI0zLTE66W0FBnizVdjnqHteTfZ4D0B+S0YkEe5Rs0=) 2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=) 3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Validity Not Before: Apr 27 05:01:21 2025 GMT Not After : May 4 05:01:20 2025 GMT Subject: CN=680dba21-33fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:10:da:31:cb:e9:78:ab:84:76:9a:8e:c8: 31:a4:bf:09:4a:1c:79:e5:08:2c:ef:9d:a8:f2:81: f2:3a:69:be:eb:55:1e:db:13:90:df:4f:61:fc:47: 05:67:e1:da:cd:0a:ee:a6:d7:62:18:b0:cd:f2:dd: e2:45:d8:1c:ab:5e:0d:6f:46:01:7b:92:aa:64:2e: 28:e9:db:c7:ca:b4:f5:a0:ce:a9:1a:b1:d7:08:b8: 21:14:cd:c8:2b:18:4b:4b:68:b2:c8:bc:04:79:33: 99:4a:c3:c7:86:f2:41:cf:4e:1d:c4:55:7b:8b:c1: c0:6c:67:e0:dd:b7:f9:18:c2:7f:18:75:4c:f7:84: 8a:76:b8:cf:98:89:f0:3e:02:7a:63:e3:d5:6d:2b: cb:c3:98:9e:b8:74:e8:9a:c3:02:37:63:c8:25:10: 44:f8:9b:4e:f5:2b:3a:38:bf:16:d9:51:2f:e3:ee: 4a:62:00:6d:62:8c:80:d1:80:3c:7e:30:bd:ee:92: 17:c2:40:fd:a9:ab:e7:b5:f6:3e:d0:e5:38:62:49: 2d:da:cd:5e:e1:5e:d1:40:96:4e:cb:1f:aa:11:c8: 0a:8a:fb:08:58:02:6e:8c:ea:dc:02:0d:f4:c5:cd: c4:fa:1f:00:be:4c:b7:e9:4d:5f:ff:15:32:ae:35: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F9:32:E6:A9:19:1D:47:61:6F:C3:48:25:57:63:4C:95:F5:0E:56 X509v3 Authority Key Identifier: keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:8b:0b:ac:bb:19:14:04:17:de:7f:42:66:8c:25:c6:3f: 07:08:64:01:d7:1e:d9:7b:38:bb:c1:ad:04:b6:ad:c3:26:f2: eb:cf:57:b5:5e:c5:0f:e9:ab:ec:0c:20:45:bc:22:cd:c8:c7: 2b:9c:f3:ea:89:2a:98:31:bf:c8:a5:42:aa:43:c0:bb:57:bc: d5:63:da:06:6b:b7:aa:e3:87:19:37:ea:24:a5:99:12:0f:fa: 58:10:0c:a8:4e:cb:29:69:97:28:5d:48:7c:2a:5a:31:5e:01: 26:75:ab:b6:33:b3:ab:15:0b:f9:1a:95:37:4f:2e:e7:23:f5: da:f8:e9:63:ec:7f:db:73:81:29:3e:5a:0b:6f:ba:fb:88:c3: f0:c7:76:8e:fe:1e:cd:32:c4:fb:29:f7:46:2e:41:fa:0f:98: 5e:d2:4f:1d:6c:fb:01:cf:52:3c:b9:45:2f:6e:84:08:5d:36: 84:91:99:60:05:bf:22:98:36:3c:28:c9:4a:e2:29:a1:f5:38: 8c:d4:f5:e8:83:23:89:6b:ed:27:69:49:85:7f:0a:08:3f:91: 9b:ce:2a:bc:26:23:57:2b:7f:60:3c:dc:67:65:5b:17:a2:7e: bc:eb:03:27:c7:e2:39:a6:80:ff:02:cb:dd:40:d7:3c:f6:09: fd:1d:dd:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0 ODNBQTI3OUEwHhcNMjUwNDI3MDUwMTIxWhcNMjUwNTA0MDUwMTIwWjAYMRYwFAYD VQQDEw02ODBkYmEyMS0zM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0csQ2jHL6XirhHaajsgxpL8JShx55Qgs752o8oHyOmm+61Ue2xOQ309h/EcF Z+HazQruptdiGLDN8t3iRdgcq14Nb0YBe5KqZC4o6dvHyrT1oM6pGrHXCLghFM3I KxhLS2iyyLwEeTOZSsPHhvJBz04dxFV7i8HAbGfg3bf5GMJ/GHVM94SKdrjPmInw PgJ6Y+PVbSvLw5ieuHTomsMCN2PIJRBE+JtO9Ss6OL8W2VEv4+5KYgBtYoyA0YA8 fjC97pIXwkD9qavntfY+0OU4Ykkt2s1e4V7RQJZOyx+qEcgKivsIWAJujOrcAg30 xc3E+h8Avky36U1f/xUyrjWMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj5Muap GR1HYW/DSCVXY0yV9Q5WMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqvIsLrLsZFAQX3n9CZowlxj8HCGQB1x7Zezi7wa0Etq3DJvLrz1e1 XsUP6avsDCBFvCLNyMcrnPPqiSqYMb/IpUKqQ8C7V7zVY9oGa7eq44cZN+okpZkS D/pYEAyoTsspaZcoXUh8KloxXgEmdau2M7OrFQv5GpU3Ty7nI/Xa+Olj7H/bc4Ep PloLb7r7iMPwx3aO/h7NMsT7KfdGLkH6D5he0k8dbPsBz1I8uUUvboQIXTaEkZlg Bb8imDY8KMlK4imh9TiM1PXogyOJa+0naUmFfwoIP5Gbziq8JiNXK39gPNxnZVsX on686wMnx+I5poD/AsvdQNc89gn9Hd0P -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net