$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: yDvev3LR4sF91IJQr65OTyLuGAMnnn/9weAOB37Iyq8= Subject key identifier: 08:CF:08:5B:2A:8C:1B:64:5C:20:E0:F7:57:0E:82:FE:D5:5C:C8:05 Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 0248 Signing time: Sun 27 Apr 2025 01:30:47 +0000 Manifest this update: Sun 27 Apr 2025 01:30:47 +0000 Manifest next update: Sun 04 May 2025 01:30:47 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: Ejd0PgIz8qM6WVCwTEExVa0PYyZCKrP9OSdPgrivdP8=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: bzrwDCcFjUbW1ddYfzBH2lmiEyj4Sa0r3rrfjXsh0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Apr 27 01:30:47 2025 GMT Not After : May 4 01:30:47 2025 GMT Subject: CN=680d88c7-1322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:b7:83:a2:86:c2:b4:a6:ec:de:cc:5a:e8: ac:ae:9f:b8:8e:0a:42:92:90:19:5d:96:04:4e:7e: 9e:df:f7:79:f5:41:a3:c7:c2:73:ca:4b:f6:ff:1d: 66:64:f8:3a:c7:44:cd:1a:a7:33:a1:0b:0c:e0:c3: 12:86:0f:3a:af:77:e5:b5:48:11:ba:71:80:80:96: b6:84:1c:3a:e4:f4:d1:ca:70:2d:16:c5:bf:0f:76: 43:08:cd:34:be:7e:f0:89:d2:31:dd:07:e4:3e:8b: 6d:5a:69:dd:5d:10:52:de:6f:e6:d9:d0:73:59:89: 4e:04:1c:e7:14:74:e8:ea:d9:f4:42:26:d8:cb:af: b3:8b:d6:c7:89:da:d2:50:b2:92:03:64:a1:4d:bf: d6:a3:13:e5:ac:d2:cf:0a:ef:7b:d7:90:e4:a0:58: ba:e9:b5:34:1c:3c:c9:b4:38:80:e2:4f:b8:53:b1: 20:c4:0e:5b:e3:26:6b:ae:95:e6:0a:7b:53:01:97: 28:b6:d6:6a:50:de:bd:01:d5:4f:82:07:b3:2b:84: 55:fe:8a:69:0d:00:16:45:2e:80:42:68:d6:21:3f: 17:d1:6b:09:68:9a:8e:23:ae:75:d8:5e:f8:69:43: d1:6f:42:ad:09:64:81:7e:6a:89:4c:33:c7:50:a5: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:08:5B:2A:8C:1B:64:5C:20:E0:F7:57:0E:82:FE:D5:5C:C8:05 X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:4e:c5:9b:a3:84:a3:46:c1:fa:e5:f5:90:cc:49:34:ef: b9:1d:11:fb:81:ca:3c:28:8a:c5:b0:0f:51:e8:0b:5b:3b:e7: 11:76:9d:53:f6:d1:82:10:54:50:59:22:dd:99:8c:c8:c8:20: f5:83:29:3e:01:48:c7:55:f8:10:59:6e:d4:16:6a:e1:fb:f6: a4:eb:df:3f:55:41:76:c0:01:25:ca:12:bb:1f:a2:67:f5:26: 7b:1e:5d:ff:a8:20:c7:f9:f0:07:3e:21:3e:46:2f:5c:0a:8f: f9:40:5e:7f:f8:73:99:84:93:16:09:db:03:80:d5:29:78:15: 27:03:74:30:2c:7f:22:5e:c5:fc:d5:38:c0:c3:82:2b:96:6c: 67:82:32:c0:16:2f:e1:05:81:f6:95:1b:38:70:05:d9:60:3b: 75:8d:36:3c:ef:68:94:7f:d1:a7:d1:55:5e:da:4c:6f:4d:59: 67:be:15:43:65:8d:70:6a:e5:e8:8e:9c:36:dc:01:38:c9:1f: 59:59:bb:fa:11:6f:6f:8a:c0:9e:e8:65:13:a9:f6:57:a2:67: b4:80:d2:39:7e:9b:87:44:f6:5d:3b:ac:d3:23:79:7b:46:9f: 85:65:f3:6f:ad:6c:c5:d1:d4:5c:51:0d:c1:a8:8c:53:46:04: 18:e4:c8:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjUwNDI3MDEzMDQ3WhcNMjUwNTA0MDEzMDQ3WjAYMRYwFAYD VQQDEw02ODBkODhjNy0xMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qa3g6KGwrSm7N7MWuisrp+4jgpCkpAZXZYETn6e3/d59UGjx8Jzykv2/x1m ZPg6x0TNGqczoQsM4MMShg86r3fltUgRunGAgJa2hBw65PTRynAtFsW/D3ZDCM00 vn7widIx3QfkPottWmndXRBS3m/m2dBzWYlOBBznFHTo6tn0QibYy6+zi9bHidrS ULKSA2ShTb/WoxPlrNLPCu9715DkoFi66bU0HDzJtDiA4k+4U7EgxA5b4yZrrpXm CntTAZcottZqUN69AdVPggezK4RV/oppDQAWRS6AQmjWIT8X0WsJaJqOI6512F74 aUPRb0KtCWSBfmqJTDPHUKXgdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjPCFsq jBtkXCDg91cOgv7VXMgFMB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByx07Fm6OEo0bB+uX1kMxJNO+5HRH7gco8KIrFsA9R6AtbO+cRdp1T 9tGCEFRQWSLdmYzIyCD1gyk+AUjHVfgQWW7UFmrh+/ak698/VUF2wAElyhK7H6Jn 9SZ7Hl3/qCDH+fAHPiE+Ri9cCo/5QF5/+HOZhJMWCdsDgNUpeBUnA3QwLH8iXsX8 1TjAw4IrlmxngjLAFi/hBYH2lRs4cAXZYDt1jTY872iUf9Gn0VVe2kxvTVlnvhVD ZY1wauXojpw23AE4yR9ZWbv6EW9visCe6GUTqfZXome0gNI5fpuHRPZdO6zTI3l7 Rp+FZfNvrWzF0dRcUQ3BqIxTRgQY5Miz -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net