$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: u5a3Ex2lY00b64QYbgzFh7lN2ONGx1se1iT4oObU680= Subject key identifier: 50:A4:46:CD:DE:0A:8E:C3:F8:71:AC:75:66:51:08:8C:7A:72:6C:79 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B08 Signing time: Mon 28 Apr 2025 16:24:11 +0000 Manifest this update: Mon 28 Apr 2025 16:24:10 +0000 Manifest next update: Mon 05 May 2025 16:24:10 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: W40YhZJlUyBourWA/mV7KqhVVe9SwhrZKicyfUSIctA=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6986 (0x1b4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Apr 28 16:24:10 2025 GMT Not After : May 5 16:24:10 2025 GMT Subject: CN=680fabab-c93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:dc:3f:72:ac:a1:25:c3:9e:60:39:61:06: 4f:8d:a3:39:a5:0f:ac:0e:65:ad:a5:bf:f4:d9:00: 4b:89:c2:a4:ea:a9:5f:e2:46:c2:b0:8d:e7:07:ef: 82:c3:a8:89:3b:f4:4e:cc:1b:f9:87:5b:6c:b5:4d: 7f:87:96:76:70:d1:64:06:56:f9:a3:c3:7e:28:ea: fd:84:7a:c4:73:7e:87:60:21:91:5e:4c:97:ce:73: 1f:5e:96:1f:a2:d5:c0:22:9a:81:3c:8b:d3:06:08: c1:2b:41:e7:78:c8:6c:c0:bb:22:09:c0:92:86:6b: 49:73:db:4f:a8:d3:a3:fc:fa:8c:bb:49:74:4e:75: 11:74:6d:39:02:46:19:37:3c:1f:9d:83:0b:e6:12: a7:3f:8a:9a:a8:03:63:a7:be:ce:44:13:e1:bf:3b: b0:78:d6:84:9c:bf:bf:47:79:46:bd:f7:88:18:c9: 73:31:e1:58:d3:3c:87:4b:3f:6a:28:72:ab:91:64: 1f:7c:c0:bb:99:8d:c5:8e:50:31:b3:44:d2:14:61: f7:cb:d7:4c:7b:81:42:19:e5:ff:45:f7:a2:22:b9: 34:1b:33:08:24:fd:ac:61:2e:d8:a7:4a:0e:6d:cc: f9:3a:f5:f6:71:3a:ee:67:93:34:3f:0c:bb:20:88: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:46:CD:DE:0A:8E:C3:F8:71:AC:75:66:51:08:8C:7A:72:6C:79 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:86:dd:c9:95:d1:76:34:81:48:a0:b0:3b:e1:99:cf:67:76: b4:0a:a2:bf:67:5f:a8:57:23:5a:d9:bc:91:be:21:81:4d:5b: 47:dc:22:c3:62:12:30:ba:4e:b7:76:1d:24:8a:1c:7f:d7:87: b0:2e:59:21:9d:4f:35:a6:25:4f:69:8d:f6:45:90:3e:66:7c: b1:76:78:da:43:43:21:25:e1:ee:cf:15:a6:2f:4a:d3:24:d9: cc:c1:1d:df:96:50:cc:85:49:a5:fa:be:d4:75:e6:ac:c9:53: 6e:b3:1e:aa:00:2d:b8:0f:b2:1c:4f:37:74:ce:da:ae:29:73: f1:b4:1c:ae:08:33:49:ee:4d:79:d1:06:7f:78:32:4f:71:45: 4f:a8:d1:f5:1a:08:98:1c:42:3e:45:85:8d:96:6a:da:42:03: 7c:bd:3f:d7:07:f5:71:28:46:4a:ca:1b:04:97:94:81:8b:cf: e9:c1:0f:f1:49:3f:b3:3c:70:af:bb:10:de:be:35:4d:e9:f9: 8b:68:51:7f:12:4f:4b:77:ea:7d:4c:1e:28:5c:df:0b:f3:42: cd:ac:17:7a:96:8f:f7:b9:3a:a5:88:f3:34:c9:33:22:75:a4: 43:18:8f:dc:51:96:50:12:66:d8:f1:79:1c:d8:32:74:d7:35: 82:0a:52:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNDI4MTYyNDEwWhcNMjUwNTA1MTYyNDEwWjAYMRYwFAYD VQQDEw02ODBmYWJhYi1jOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNjcP3KsoSXDnmA5YQZPjaM5pQ+sDmWtpb/02QBLicKk6qlf4kbCsI3nB++C w6iJO/ROzBv5h1tstU1/h5Z2cNFkBlb5o8N+KOr9hHrEc36HYCGRXkyXznMfXpYf otXAIpqBPIvTBgjBK0HneMhswLsiCcCShmtJc9tPqNOj/PqMu0l0TnURdG05AkYZ NzwfnYML5hKnP4qaqANjp77ORBPhvzuweNaEnL+/R3lGvfeIGMlzMeFY0zyHSz9q KHKrkWQffMC7mY3FjlAxs0TSFGH3y9dMe4FCGeX/RfeiIrk0GzMIJP2sYS7Yp0oO bcz5OvX2cTruZ5M0Pwy7IIhyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCkRs3e Co7D+HGsdWZRCIx6cmx5MB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxht3JldF2NIFIoLA74ZnPZ3a0CqK/Z1+oVyNa2byRviGBTVtH3CLD YhIwuk63dh0kihx/14ewLlkhnU81piVPaY32RZA+ZnyxdnjaQ0MhJeHuzxWmL0rT JNnMwR3fllDMhUml+r7UdeasyVNusx6qAC24D7IcTzd0ztquKXPxtByuCDNJ7k15 0QZ/eDJPcUVPqNH1GgiYHEI+RYWNlmraQgN8vT/XB/VxKEZKyhsEl5SBi8/pwQ/x ST+zPHCvuxDevjVN6fmLaFF/Ek9Ld+p9TB4oXN8L80LNrBd6lo/3uTqliPM0yTMi daRDGI/cUZZQEmbY8Xkc2DJ01zWCClJY -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:50 2025 by rpki-client on console.sobornost.net