$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: qm5yT458nB1TdNjnaGMVPxaYTkTHhFZR9WTDIOThKsw= Subject key identifier: 80:DC:EC:AB:C6:76:90:DB:08:D0:A2:2B:D4:59:4A:22:A2:42:99:51 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 117F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 116A Signing time: Mon 28 Apr 2025 17:27:55 +0000 Manifest this update: Mon 28 Apr 2025 17:27:54 +0000 Manifest next update: Mon 05 May 2025 17:27:54 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 0/BQ42VNHWO2ihVl4B/UmM0SnWglZYkmwDinGcvod1Y=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4479 (0x117f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Apr 28 17:27:54 2025 GMT Not After : May 5 17:27:54 2025 GMT Subject: CN=680fba9b-d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:e7:17:38:6b:f3:26:68:e9:23:4e:56:8d: 89:b1:01:5f:32:4c:51:a7:72:d0:db:1d:43:73:0d: d5:20:43:0a:74:63:90:57:8d:74:42:b5:23:2a:64: ce:b7:75:0e:36:be:51:a2:68:dc:eb:5d:1f:07:a4: 60:7a:1a:9c:cf:e2:68:30:b0:68:4c:c9:9d:d6:4c: 2e:de:05:5f:cd:06:8b:5b:31:9a:9b:23:45:a8:8c: 2e:02:ad:22:a6:28:7c:46:58:2a:84:3b:a5:94:88: 93:8a:a1:86:42:eb:d4:1f:aa:a9:0b:41:28:3a:85: 9e:3e:01:a5:77:1b:3d:6a:90:52:91:a6:92:6e:e0: 1a:8d:12:c3:72:e2:ef:6f:94:5a:f7:f4:9e:66:84: 89:74:6d:58:63:b7:ec:1f:ec:85:5b:94:8f:36:ed: bf:4f:7e:e0:8f:44:0a:a0:c9:8b:39:08:08:a6:13: 1f:8f:57:1f:e3:07:8b:06:c5:35:ba:a5:82:95:bc: 9e:3b:ec:39:e5:81:e8:0c:82:3a:69:93:1a:c2:5a: 02:13:0a:7a:53:74:b0:23:60:98:64:f1:da:ee:c0: 02:6c:fe:da:91:ec:39:21:90:9e:46:63:b8:a5:d5: 96:28:2e:c9:57:00:c1:91:1b:c4:e6:bd:34:d8:bd: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DC:EC:AB:C6:76:90:DB:08:D0:A2:2B:D4:59:4A:22:A2:42:99:51 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9c:1e:da:31:71:45:09:83:a5:03:0d:c5:39:c3:37:96:1c: 55:3c:e3:ee:aa:33:ad:9e:88:4e:c5:04:a6:a2:8d:d4:4e:fe: f1:b9:1c:9a:a4:76:19:75:bb:bb:c2:43:86:4e:2d:6c:cb:b7: 91:6d:6f:3d:ab:8e:3c:d6:1d:b7:40:72:68:85:0a:15:07:65: 57:e1:08:cd:00:32:17:78:53:1f:da:19:f4:24:7f:c6:c4:1a: fe:ae:25:98:80:ed:8f:72:5c:ad:02:44:60:9d:09:d4:50:97: 22:28:c9:a6:f2:79:c5:4c:3e:9a:46:b4:58:00:cc:a9:45:d0: a5:89:ed:ad:a4:95:84:8a:29:95:6d:53:30:cc:68:20:2b:66: df:b9:f4:3a:81:91:e2:6d:2a:3a:57:e7:c2:85:c8:dc:e1:6b: d6:5b:b3:41:7c:2d:04:a5:55:d0:b6:ea:57:a0:c6:04:17:83: f5:80:41:eb:43:a3:0c:a5:5f:a7:a4:4f:8d:b3:ed:9d:4f:08: d9:75:38:eb:9d:0f:9c:19:77:4b:af:4c:1c:ac:e4:c4:1c:fa: e8:e0:7f:3c:9d:7b:fc:02:49:76:e4:a8:c2:8b:7b:ed:94:80: 7f:84:7c:38:e0:50:58:68:2d:fa:04:a2:2f:ab:fb:e6:32:07: da:af:eb:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwNDI4MTcyNzU0WhcNMjUwNTA1MTcyNzU0WjAYMRYwFAYD VQQDEw02ODBmYmE5Yi1kNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaPnFzhr8yZo6SNOVo2JsQFfMkxRp3LQ2x1Dcw3VIEMKdGOQV410QrUjKmTO t3UONr5Romjc610fB6Rgehqcz+JoMLBoTMmd1kwu3gVfzQaLWzGamyNFqIwuAq0i pih8RlgqhDullIiTiqGGQuvUH6qpC0EoOoWePgGldxs9apBSkaaSbuAajRLDcuLv b5Ra9/SeZoSJdG1YY7fsH+yFW5SPNu2/T37gj0QKoMmLOQgIphMfj1cf4weLBsU1 uqWClbyeO+w55YHoDII6aZMawloCEwp6U3SwI2CYZPHa7sACbP7akew5IZCeRmO4 pdWWKC7JVwDBkRvE5r002L1ZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDc7KvG dpDbCNCiK9RZSiKiQplRMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCenB7aMXFFCYOlAw3FOcM3lhxVPOPuqjOtnohOxQSmoo3UTv7xuRya pHYZdbu7wkOGTi1sy7eRbW89q4481h23QHJohQoVB2VX4QjNADIXeFMf2hn0JH/G xBr+riWYgO2PclytAkRgnQnUUJciKMmm8nnFTD6aRrRYAMypRdClie2tpJWEiimV bVMwzGggK2bfufQ6gZHibSo6V+fChcjc4WvWW7NBfC0EpVXQtupXoMYEF4P1gEHr Q6MMpV+npE+Ns+2dTwjZdTjrnQ+cGXdLr0wcrOTEHPro4H88nXv8Akl25KjCi3vt lIB/hHw44FBYaC36BKIvq/vmMgfar+ss -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:55 2025 by rpki-client on console.sobornost.net