$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: o5/GD9FsozP1w5J9Eb9wdHHE+/pk66Qhb0WVZH7VQP4= Subject key identifier: 00:14:38:65:B4:9F:D8:B4:37:B1:AD:D5:67:B0:65:A2:95:3E:4B:26 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0148 Signing time: Sun 27 Apr 2025 03:11:53 +0000 Manifest this update: Sun 27 Apr 2025 03:11:52 +0000 Manifest next update: Sun 04 May 2025 03:11:52 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: BjwyzMeJvuxODPNABKE/lJIDIKdvySCpDOeCcAUFZT0=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Apr 27 03:11:52 2025 GMT Not After : May 4 03:11:52 2025 GMT Subject: CN=680da078-7551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:d4:69:70:57:2c:bc:08:49:45:79:b9:c9: 79:6b:50:13:48:95:f6:95:3c:25:14:0e:a7:39:dc: 87:93:28:fd:f7:62:75:29:01:85:dd:82:41:da:12: 2d:17:16:fa:62:9a:88:2a:90:c7:62:e2:c0:6d:61: 9c:2f:6a:23:6b:be:2d:ba:00:cc:ef:61:5d:41:9e: a0:fc:9a:d9:cb:21:49:f0:49:cd:13:21:05:4e:d9: c7:72:68:a6:9d:04:96:45:ac:2a:d4:cd:30:07:bf: d5:00:e7:a6:0d:6b:49:21:71:ab:16:fd:da:bf:84: dd:71:0d:ae:68:e0:ba:fc:0f:81:fe:af:cf:54:ee: 70:ae:f1:97:10:df:5f:c2:02:20:c2:2c:d5:0a:c0: ff:cc:af:ff:d7:38:a7:11:1d:0d:c0:5f:8f:fa:89: 85:9b:11:cb:18:2a:e3:52:a4:85:90:3d:2c:7f:c1: 50:7f:4c:4a:64:0c:0b:70:1f:3b:58:9b:37:75:9b: 3c:61:0c:15:b4:55:cb:fe:04:e8:34:8c:58:18:ad: 88:fc:db:f4:ce:7c:d1:0a:9e:c6:f1:0f:b2:44:fd: 71:52:f8:1d:5c:60:16:a7:e2:75:6e:8f:f3:4c:89: 61:fa:8f:c0:a3:31:f2:c5:8c:f7:95:06:33:bb:9d: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:14:38:65:B4:9F:D8:B4:37:B1:AD:D5:67:B0:65:A2:95:3E:4B:26 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:43:03:4b:43:32:5e:2a:f5:4c:fa:ce:c1:ba:32:00:a0:4a: a4:db:a1:3f:5d:a7:eb:ca:c0:a9:76:48:46:4f:fb:45:a2:fe: b4:58:17:23:64:ff:43:de:5e:47:d3:c5:9e:a5:a8:4a:ea:c7: 6c:33:bd:8d:98:b3:c1:f0:5e:03:2f:b9:16:50:17:24:e9:0c: 9f:78:98:1b:49:bf:58:1d:e8:fe:6c:c2:7e:00:07:11:57:4a: 20:01:36:2b:ae:2b:13:8f:e3:5e:0e:15:83:23:1b:e0:51:12: fe:48:20:70:64:1a:04:18:e6:ce:78:4f:d6:d0:e6:28:de:05: 69:7b:65:87:50:a6:86:09:46:a4:fb:a8:79:23:dc:86:9c:70: 99:72:95:76:92:64:c6:bf:85:70:66:af:93:fe:6a:c1:20:d6: 60:22:03:28:c5:3f:ed:43:c1:d5:34:65:8a:92:50:03:70:ec: e9:12:aa:60:cb:28:09:e2:e5:96:b6:a5:b7:57:14:db:71:0d: a5:b4:9d:c6:2a:3b:32:f8:ad:76:81:a4:68:72:d9:4e:b8:ec: 51:cb:f6:2a:fe:59:26:04:e1:5b:7a:80:c2:02:d7:67:bb:88: fa:af:5b:56:ff:cd:a4:ae:3e:57:69:65:39:06:96:4d:77:68: 07:22:fb:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNDI3MDMxMTUyWhcNMjUwNTA0MDMxMTUyWjAYMRYwFAYD VQQDEw02ODBkYTA3OC03NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5fUaXBXLLwISUV5ucl5a1ATSJX2lTwlFA6nOdyHkyj992J1KQGF3YJB2hIt Fxb6YpqIKpDHYuLAbWGcL2oja74tugDM72FdQZ6g/JrZyyFJ8EnNEyEFTtnHcmim nQSWRawq1M0wB7/VAOemDWtJIXGrFv3av4TdcQ2uaOC6/A+B/q/PVO5wrvGXEN9f wgIgwizVCsD/zK//1zinER0NwF+P+omFmxHLGCrjUqSFkD0sf8FQf0xKZAwLcB87 WJs3dZs8YQwVtFXL/gToNIxYGK2I/Nv0znzRCp7G8Q+yRP1xUvgdXGAWp+J1bo/z TIlh+o/AozHyxYz3lQYzu513kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAUOGW0 n9i0N7Gt1WewZaKVPksmMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4QwNLQzJeKvVM+s7BujIAoEqk26E/XafrysCpdkhGT/tFov60WBcj ZP9D3l5H08WepahK6sdsM72NmLPB8F4DL7kWUBck6QyfeJgbSb9YHej+bMJ+AAcR V0ogATYrrisTj+NeDhWDIxvgURL+SCBwZBoEGObOeE/W0OYo3gVpe2WHUKaGCUak +6h5I9yGnHCZcpV2kmTGv4VwZq+T/mrBINZgIgMoxT/tQ8HVNGWKklADcOzpEqpg yygJ4uWWtqW3VxTbcQ2ltJ3GKjsy+K12gaRoctlOuOxRy/Yq/lkmBOFbeoDCAtdn u4j6r1tW/82krj5XaWU5BpZNd2gHIvs3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net