$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: f4ryFQEdz0y/AXWkZp/CFjVL8JutUcmm0OB8tvYh854= Subject key identifier: 97:A4:9E:07:AB:F2:FF:33:EB:B5:07:26:ED:33:87:AE:0A:82:3E:38 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03A7 Signing time: Sun 27 Apr 2025 00:22:33 +0000 Manifest this update: Sun 27 Apr 2025 00:22:32 +0000 Manifest next update: Sun 04 May 2025 00:22:32 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: WpQByF/mHPmN0GIb9r0mvQXv85t4GKCCYtK6nC3hT9s=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Apr 27 00:22:32 2025 GMT Not After : May 4 00:22:32 2025 GMT Subject: CN=680d78c9-8103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:51:ec:f2:77:80:fc:43:87:ba:63:1d:9e: f1:c0:b9:b4:c1:fc:b6:57:05:33:93:8b:7e:e3:a7: 8f:0c:bd:4c:18:22:12:7c:8f:e5:c4:ba:0e:74:7f: be:b7:3a:bf:80:f2:56:d5:2b:33:79:39:e7:66:80: ce:1f:bc:71:d0:96:82:7d:7a:00:14:12:44:ce:be: 66:75:aa:1c:f1:bd:9e:0e:8d:01:ea:6c:e3:b6:99: a6:ad:d7:0c:ba:fd:7f:1a:d2:13:98:7f:96:75:b6: 40:d8:24:5a:ef:c4:ad:21:cf:a5:d2:1c:a1:6a:be: 70:cc:7a:c6:45:cd:55:81:bd:7c:ba:24:1b:08:1b: 0b:b4:da:d3:10:35:ba:24:e5:a4:12:68:39:c0:85: ba:0c:d5:8f:d8:08:c2:0e:e4:05:e3:ec:3b:89:5c: 53:f2:d7:ab:15:7d:8c:c2:96:05:1e:35:a3:81:75: a8:7b:b0:00:ec:f3:04:f3:4d:45:8b:61:1e:b5:eb: 9b:96:0f:cf:61:13:de:7b:d3:6c:bb:f0:e8:75:96: 0c:81:7d:03:af:9b:6a:ab:59:bb:fa:ab:ce:b6:f5: 9d:50:d1:d5:36:f8:95:f4:16:51:72:31:a7:15:53: a9:d3:10:22:6f:96:14:09:39:be:a4:56:95:94:d9: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A4:9E:07:AB:F2:FF:33:EB:B5:07:26:ED:33:87:AE:0A:82:3E:38 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:67:e9:dd:5a:2e:7d:6b:ba:26:13:e4:03:4a:7b:42:a6:7a: 9a:68:b2:b6:2d:ed:00:e7:55:18:97:8c:19:24:8f:5c:84:d6: ca:b2:4f:e1:85:77:5b:9c:37:20:42:cf:51:b7:67:04:3a:5a: 86:6d:be:fe:a8:41:f1:fa:76:79:31:75:62:1f:6a:c2:9c:b4: b2:ee:99:9e:6f:36:54:d8:90:67:dc:13:8e:1c:7d:49:f9:e6: 60:36:c6:4d:40:a3:f2:da:ff:9a:1c:3f:19:01:74:ab:52:92: 56:d3:f4:7b:48:65:62:73:ad:da:01:20:b9:49:82:79:de:f6: ac:a2:1c:6f:99:d8:6c:59:b7:c8:d7:4c:b8:37:4b:63:35:75: 1b:c0:a3:17:ae:19:2b:f9:cd:ca:22:e0:44:21:8b:79:8d:94: fd:58:7d:03:2a:db:7a:36:aa:f4:eb:ba:19:6f:d9:37:c1:aa: 40:10:6f:18:24:84:35:ed:36:58:a9:7f:6d:46:16:b5:32:0b: 2f:45:33:b2:d6:5c:34:df:20:0e:84:31:e4:7e:0c:e7:09:5c: b9:a9:49:6c:98:f1:89:53:87:07:e6:7c:38:67:dc:96:ae:6e: 0c:73:fb:de:7b:99:0c:fa:f0:5d:a5:d8:06:3c:89:fd:aa:cd: 59:b8:b9:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNDI3MDAyMjMyWhcNMjUwNTA0MDAyMjMyWjAYMRYwFAYD VQQDEw02ODBkNzhjOS04MTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuxR7PJ3gPxDh7pjHZ7xwLm0wfy2VwUzk4t+46ePDL1MGCISfI/lxLoOdH++ tzq/gPJW1SszeTnnZoDOH7xx0JaCfXoAFBJEzr5mdaoc8b2eDo0B6mzjtpmmrdcM uv1/GtITmH+WdbZA2CRa78StIc+l0hyhar5wzHrGRc1Vgb18uiQbCBsLtNrTEDW6 JOWkEmg5wIW6DNWP2AjCDuQF4+w7iVxT8terFX2MwpYFHjWjgXWoe7AA7PME801F i2Eeteublg/PYRPee9Nsu/DodZYMgX0Dr5tqq1m7+qvOtvWdUNHVNviV9BZRcjGn FVOp0xAib5YUCTm+pFaVlNna1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeknger 8v8z67UHJu0zh64Kgj44MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Z+ndWi59a7omE+QDSntCpnqaaLK2Le0A51UYl4wZJI9chNbKsk/h hXdbnDcgQs9Rt2cEOlqGbb7+qEHx+nZ5MXViH2rCnLSy7pmebzZU2JBn3BOOHH1J +eZgNsZNQKPy2v+aHD8ZAXSrUpJW0/R7SGVic63aASC5SYJ53vasohxvmdhsWbfI 10y4N0tjNXUbwKMXrhkr+c3KIuBEIYt5jZT9WH0DKtt6Nqr067oZb9k3wapAEG8Y JIQ17TZYqX9tRha1MgsvRTOy1lw03yAOhDHkfgznCVy5qUlsmPGJU4cH5nw4Z9yW rm4Mc/vee5kM+vBdpdgGPIn9qs1ZuLmW -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net