$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: mVnbIe2NFSpGxkfDW+wcGQJXrwf/GaGKRV/KL8py6D0= Subject key identifier: CB:EE:C6:77:3C:42:66:AC:C7:C5:FE:05:52:6A:D9:78:57:1B:A7:72 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 097F Signing time: Mon 28 Apr 2025 20:34:39 +0000 Manifest this update: Mon 28 Apr 2025 20:34:38 +0000 Manifest next update: Mon 05 May 2025 20:34:38 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: NNPkiZYUcllojJdfNAUmWKX3ZgChU5ldiz/LRS/yQOk=) 2: 6569BF24997F11ECA6C7F481C4F9AE02.roa (hash: ihZ46zaKKgYFbsQZJpUcfwGNcLq0WYivOzEHAfXlcfs=) 3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: 2HuzCk6S18IuIuNY88Jnmogc9ez8HXD2AaJ8nr4dsM0=) 4: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 2XvjAuC6Hirm3HWv88SHGUEeMWi9XgXjvYQVlXNxZVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Apr 28 20:34:38 2025 GMT Not After : May 5 20:34:38 2025 GMT Subject: CN=680fe65e-6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:0c:bc:f8:c7:fa:0b:c9:ae:40:bb:39:99: 87:8b:5e:cf:a9:bb:79:b1:a6:8e:a6:0e:a7:80:25: 77:20:4f:91:8f:96:8f:ba:57:4c:8d:a2:8e:dd:b4: 51:40:47:f4:0c:ca:26:6d:66:97:50:1f:59:60:07: b5:d9:77:27:f6:d7:72:19:9a:65:e1:91:11:c1:a3: 99:06:4e:fc:74:9a:9e:d2:c8:20:aa:b6:39:bc:49: 30:99:c3:d8:f5:19:54:98:db:43:b6:69:22:15:c3: b3:a2:23:cb:ee:26:96:bb:9c:98:33:32:d5:2f:66: e8:e2:a2:1b:5c:94:22:f4:07:2e:bd:f9:4c:93:9d: 1f:da:ea:97:ef:16:ab:a8:04:bf:18:b4:5f:42:45: 74:48:75:90:af:ae:e1:2f:cc:c8:16:0f:ca:e6:61: b6:a3:49:b4:2a:a1:58:1d:78:86:e7:de:da:b1:42: e6:a7:fc:37:b6:0c:fc:7e:89:81:5c:b5:2d:b2:d9: 45:92:c8:b7:05:0d:78:17:f6:e9:4c:94:31:73:10: 71:04:38:c9:7c:e3:15:28:56:71:4b:c8:c6:0e:93: 98:56:00:01:50:9d:bb:e8:cc:cf:ae:c6:d7:4d:1b: 94:4a:af:41:54:24:65:53:e8:90:51:4c:e4:5f:24: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:C6:77:3C:42:66:AC:C7:C5:FE:05:52:6A:D9:78:57:1B:A7:72 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8c:b0:fe:6f:5e:fe:5e:51:59:13:b0:41:e9:c4:69:70:7f: 0f:4d:df:36:88:07:1e:2b:13:2e:9a:f3:ef:3e:5d:55:6c:49: f1:00:b2:4b:62:c9:45:d8:fe:0a:74:01:6b:08:19:dd:59:16: f2:6f:b3:ae:0c:c1:c5:9b:0f:a1:ad:b9:e9:3d:67:5a:30:ab: fc:43:98:14:e4:26:c9:11:a9:be:b1:42:16:1a:73:1b:64:11: 87:a3:90:47:ae:bd:0a:aa:28:2c:5a:74:e9:6e:66:d4:f1:bd: 2b:c8:98:97:6d:1a:42:a2:ea:23:06:d4:88:64:ce:dd:24:e0: 79:4c:74:ce:fc:6d:62:5e:63:c1:22:65:10:97:6e:f3:fd:b2: a7:f2:99:fd:0e:ad:45:2d:f5:36:45:9f:0a:6b:65:79:b1:3d: e3:20:22:2b:83:ae:e8:ad:63:55:3c:82:15:7b:12:32:fd:47: f6:c7:5a:ca:62:18:8e:47:f8:40:eb:b3:b9:a0:fa:0b:aa:2a: eb:12:f0:cb:1c:f1:7c:16:4b:59:a6:f2:d9:4e:df:85:81:a0: 2c:c1:12:4e:35:26:e6:8c:73:2c:84:19:53:1b:b2:5b:05:c1: 7c:94:30:6d:af:0a:08:44:74:ef:a7:59:4e:fb:6e:5b:c2:b4: 46:2d:4c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjUwNDI4MjAzNDM4WhcNMjUwNTA1MjAzNDM4WjAYMRYwFAYD VQQDEw02ODBmZTY1ZS02MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv40MvPjH+gvJrkC7OZmHi17Pqbt5saaOpg6ngCV3IE+Rj5aPuldMjaKO3bRR QEf0DMombWaXUB9ZYAe12Xcn9tdyGZpl4ZERwaOZBk78dJqe0sggqrY5vEkwmcPY 9RlUmNtDtmkiFcOzoiPL7iaWu5yYMzLVL2bo4qIbXJQi9AcuvflMk50f2uqX7xar qAS/GLRfQkV0SHWQr67hL8zIFg/K5mG2o0m0KqFYHXiG597asULmp/w3tgz8fomB XLUtstlFksi3BQ14F/bpTJQxcxBxBDjJfOMVKFZxS8jGDpOYVgABUJ276MzPrsbX TRuUSq9BVCRlU+iQUUzkXySFEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvuxnc8 Qmasx8X+BVJq2XhXG6dyMB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnjLD+b17+XlFZE7BB6cRpcH8PTd82iAceKxMumvPvPl1VbEnxALJL YslF2P4KdAFrCBndWRbyb7OuDMHFmw+hrbnpPWdaMKv8Q5gU5CbJEam+sUIWGnMb ZBGHo5BHrr0KqigsWnTpbmbU8b0ryJiXbRpCouojBtSIZM7dJOB5THTO/G1iXmPB ImUQl27z/bKn8pn9Dq1FLfU2RZ8Ka2V5sT3jICIrg67orWNVPIIVexIy/Uf2x1rK YhiOR/hA67O5oPoLqirrEvDLHPF8FktZpvLZTt+FgaAswRJONSbmjHMshBlTG7Jb BcF8lDBtrwoIRHTvp1lO+25bwrRGLUzA -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:48 2025 by rpki-client on console.sobornost.net