$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: QHpto8aBi/8yHqhrMElW2CFZOT84Ag0wjem3cXiPBJA= Subject key identifier: 73:C2:35:5B:3E:09:12:51:A1:9E:9B:68:87:06:29:FC:E1:EF:F1:BB Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 165A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 162B Signing time: Sat 26 Apr 2025 16:41:10 +0000 Manifest this update: Sat 26 Apr 2025 16:41:10 +0000 Manifest next update: Sat 03 May 2025 16:41:10 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: bPEos8CpoAEHaTDnuNRxh0vrWiUX+v9yFQphullkS0o=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: j99DqXIlX/DsX6CAhLDODI4Li/SA5fMocxzYjvHfoI0=) 3: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: 8Wwh2LGsfMleJz4kPXncR947wixaVvdi2YpWJ6WAnNA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: /AMe5fWdVkNbiDNAX3rxonqHX2GWCAFeTm3WBDEgams=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5722 (0x165a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Apr 26 16:41:10 2025 GMT Not After : May 3 16:41:10 2025 GMT Subject: CN=680d0ca6-d525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:57:64:1c:ec:1d:09:9e:e5:bf:9a:8a:9c: 64:ed:c9:2c:25:34:54:9f:99:41:4c:04:60:d7:fa: ae:50:b8:ee:bb:12:2a:7a:5b:80:bd:e9:95:b1:b8: 29:70:ac:4a:55:0c:db:2a:d8:e2:0e:e3:ec:0b:4d: dd:b2:51:ba:0a:58:ad:38:a0:ab:4c:68:ae:67:92: 41:da:35:4b:c2:f0:a9:0e:f4:c8:6c:88:75:56:17: d0:b6:e7:c8:08:9d:be:e8:a6:3b:79:b7:cf:32:fd: 07:29:a4:29:2e:32:03:b9:a5:09:3d:e1:14:69:6e: 03:1a:93:ce:55:71:36:74:a5:71:f2:54:46:65:8b: 3f:b8:3c:15:d0:04:ff:25:0f:19:27:94:52:92:d5: 30:1e:45:d5:34:f5:e8:ef:80:68:0c:82:ff:09:43: 34:6a:79:73:44:f1:e9:8e:eb:b0:45:f9:ce:c4:20: aa:6e:72:0a:68:59:65:d7:ad:38:a1:75:32:cf:78: cb:45:94:d7:4c:4a:ea:0d:fe:f2:b8:9d:1e:bb:61: 75:2e:57:c8:8f:46:3c:aa:ee:39:78:11:d9:84:6e: 6b:bc:a9:a2:d7:d4:59:c5:57:88:b4:6e:f3:3f:67: 4a:81:5a:cd:d6:38:c6:60:c7:2d:1f:ac:e3:8e:fb: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C2:35:5B:3E:09:12:51:A1:9E:9B:68:87:06:29:FC:E1:EF:F1:BB X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8b:e4:99:0d:55:9c:97:f4:47:83:d6:b9:7d:c6:d8:bd:a9: d5:58:8f:c3:05:39:f2:6a:61:e7:f5:52:1c:33:cc:d3:59:ac: 7a:64:b4:d4:76:e0:de:a3:c1:99:3d:42:50:42:10:72:25:c2: 55:01:f2:19:c2:53:85:d0:1a:fe:e3:67:3e:b9:b2:36:e2:a4: 22:b3:00:08:43:ac:1a:bf:4a:76:59:42:f5:6f:d8:f4:95:b6: 3c:ed:26:71:af:f5:58:e4:a6:96:74:f3:3b:5a:0f:07:fd:ac: 59:05:0e:e0:9f:9a:e1:1f:84:8a:1d:13:ff:7a:d8:72:db:ac: 01:63:e1:cf:a7:80:a1:7f:2b:7e:68:b4:b2:48:8b:62:83:3b: f9:c5:eb:4e:77:32:fe:bc:cd:fe:cb:1a:c4:f5:4e:c7:9c:ff: 0a:99:44:8a:32:34:cc:81:25:80:ab:75:23:43:04:53:a9:b4: c9:c5:1e:e9:62:dd:ac:2d:69:c1:ab:77:be:cf:b2:38:a5:69: 8b:45:3e:c0:91:8e:b8:72:77:12:1c:8e:0b:a0:02:19:72:4b: 87:8a:58:5c:92:c0:b9:46:0e:fa:30:f2:50:89:4a:c2:1b:72: 3e:3b:17:93:5b:e1:02:ba:91:d0:bb:45:8e:39:ff:ef:a9:54: 59:7a:dd:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUwNDI2MTY0MTEwWhcNMjUwNTAzMTY0MTEwWjAYMRYwFAYD VQQDEw02ODBkMGNhNi1kNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs15XZBzsHQme5b+aipxk7cksJTRUn5lBTARg1/quULjuuxIqeluAvemVsbgp cKxKVQzbKtjiDuPsC03dslG6ClitOKCrTGiuZ5JB2jVLwvCpDvTIbIh1VhfQtufI CJ2+6KY7ebfPMv0HKaQpLjIDuaUJPeEUaW4DGpPOVXE2dKVx8lRGZYs/uDwV0AT/ JQ8ZJ5RSktUwHkXVNPXo74BoDIL/CUM0anlzRPHpjuuwRfnOxCCqbnIKaFll1604 oXUyz3jLRZTXTErqDf7yuJ0eu2F1LlfIj0Y8qu45eBHZhG5rvKmi19RZxVeItG7z P2dKgVrN1jjGYMctH6zjjvskvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPCNVs+ CRJRoZ6baIcGKfzh7/G7MB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzi+SZDVWcl/RHg9a5fcbYvanVWI/DBTnyamHn9VIcM8zTWax6ZLTU duDeo8GZPUJQQhByJcJVAfIZwlOF0Br+42c+ubI24qQiswAIQ6wav0p2WUL1b9j0 lbY87SZxr/VY5KaWdPM7Wg8H/axZBQ7gn5rhH4SKHRP/ethy26wBY+HPp4Chfyt+ aLSySItigzv5xetOdzL+vM3+yxrE9U7HnP8KmUSKMjTMgSWAq3UjQwRTqbTJxR7p Yt2sLWnBq3e+z7I4pWmLRT7AkY64cncSHI4LoAIZckuHilhcksC5Rg76MPJQiUrC G3I+OxeTW+ECupHQu0WOOf/vqVRZet3v -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:59 2025 by rpki-client on console.sobornost.net