$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: qLkXN3w+bT90RU5GYv+VeHI0CJWFk80IYd5kOOFefDM= Subject key identifier: 59:7E:A4:99:AA:0A:08:CB:15:DB:00:F2:06:BC:C8:E7:50:5E:96:22 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 1296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 1288 Signing time: Mon 28 Apr 2025 17:18:47 +0000 Manifest this update: Mon 28 Apr 2025 17:18:46 +0000 Manifest next update: Mon 05 May 2025 17:18:46 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: 65yFx6nrGNGJuAlADSIlzRWeuAaGMjZspH9LOn/1InE=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4758 (0x1296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Apr 28 17:18:46 2025 GMT Not After : May 5 17:18:46 2025 GMT Subject: CN=680fb877-d4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:1b:59:5f:dd:54:b0:72:8c:8d:82:e0:de: 68:30:9f:25:c4:54:f1:fb:74:42:03:49:97:84:8d: d5:1c:da:69:37:93:f4:28:ec:b5:6c:f2:cb:04:82: 7e:cb:55:fb:89:8e:3c:e0:eb:d5:52:16:df:69:c9: 89:09:76:f7:74:55:da:e8:88:40:ce:7d:e9:d8:8d: 3d:0c:dc:7d:0f:58:d1:8b:9f:08:de:72:b6:ee:9e: 8b:7c:9a:7e:37:45:82:6b:66:49:b1:59:b9:cd:8c: 7a:88:34:f2:8b:ab:8b:d2:9f:3e:40:18:59:70:ab: d2:72:2c:12:62:97:66:f8:1f:4e:87:a1:20:77:fc: 4c:4f:c8:e3:dc:0b:ce:60:39:6c:38:08:87:69:0d: e8:42:6e:d3:f2:77:68:d2:a9:34:1c:83:53:ff:00: 97:e6:a8:0a:73:85:39:d9:9c:a9:e4:8e:96:8f:fd: 73:93:2a:00:1c:0b:33:7f:40:42:dd:87:c2:8c:de: a7:47:7f:86:5d:32:b8:cb:4e:74:7c:97:87:28:99: ac:f8:fa:df:76:73:23:83:19:60:39:2d:dc:3a:50: a7:1a:c6:22:8c:ee:96:f4:ac:c0:c5:63:cd:71:11: 6b:d1:9b:07:ab:a9:47:f2:59:74:c6:55:20:90:4e: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7E:A4:99:AA:0A:08:CB:15:DB:00:F2:06:BC:C8:E7:50:5E:96:22 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8a:3c:66:b8:d4:3d:6e:7e:14:e2:82:8f:4f:7e:25:7a:54: c0:f4:29:71:1b:d8:de:89:60:3a:af:a9:22:54:fd:fe:93:32: a0:56:1c:65:98:66:d5:60:78:f2:50:7f:d3:06:bd:37:34:17: f2:20:5b:45:ca:ab:80:83:a7:69:cb:44:29:b6:7c:b8:61:e2: 6f:63:f1:e4:1b:14:3f:d0:04:53:53:5c:4e:38:74:29:42:cd: 7a:57:ad:4e:f7:a1:d6:cc:a9:72:5a:e5:ee:c3:90:81:5b:7a: dd:61:6d:b8:4b:09:17:d3:32:59:d1:de:c9:4e:20:26:6d:aa: 33:09:a1:ee:8b:d2:e8:a5:95:13:e6:84:49:33:28:13:80:9a: e9:ef:60:2c:08:63:f5:b2:a8:e7:9b:38:0d:a0:f5:d4:e6:f7: 08:ca:0e:d3:13:b0:3d:e0:81:fe:ee:a7:0f:28:61:d6:4c:70: 8e:e1:3b:66:cf:4d:14:9d:7e:e1:2c:c9:fa:f5:a3:89:3f:57: 46:6e:b3:5d:e8:78:74:e5:ff:e5:af:be:3d:0d:62:8f:51:8c: e9:4f:da:f8:08:26:42:b1:50:4b:17:dd:0c:ee:0f:a7:09:9f: 50:03:40:67:09:02:b5:c6:0d:89:f9:2c:82:47:36:f8:a7:c7: c8:f0:64:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwNDI4MTcxODQ2WhcNMjUwNTA1MTcxODQ2WjAYMRYwFAYD VQQDEw02ODBmYjg3Ny1kNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aQbWV/dVLByjI2C4N5oMJ8lxFTx+3RCA0mXhI3VHNppN5P0KOy1bPLLBIJ+ y1X7iY484OvVUhbfacmJCXb3dFXa6IhAzn3p2I09DNx9D1jRi58I3nK27p6LfJp+ N0WCa2ZJsVm5zYx6iDTyi6uL0p8+QBhZcKvSciwSYpdm+B9Oh6Egd/xMT8jj3AvO YDlsOAiHaQ3oQm7T8ndo0qk0HINT/wCX5qgKc4U52Zyp5I6Wj/1zkyoAHAszf0BC 3YfCjN6nR3+GXTK4y050fJeHKJms+PrfdnMjgxlgOS3cOlCnGsYijO6W9KzAxWPN cRFr0ZsHq6lH8ll0xlUgkE5R8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl+pJmq CgjLFdsA8ga8yOdQXpYiMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMijxmuNQ9bn4U4oKPT34lelTA9ClxG9jeiWA6r6kiVP3+kzKgVhxl mGbVYHjyUH/TBr03NBfyIFtFyquAg6dpy0Qptny4YeJvY/HkGxQ/0ARTU1xOOHQp Qs16V61O96HWzKlyWuXuw5CBW3rdYW24SwkX0zJZ0d7JTiAmbaozCaHui9LopZUT 5oRJMygTgJrp72AsCGP1sqjnmzgNoPXU5vcIyg7TE7A94IH+7qcPKGHWTHCO4Ttm z00UnX7hLMn69aOJP1dGbrNd6Hh05f/lr749DWKPUYzpT9r4CCZCsVBLF90M7g+n CZ9QA0BnCQK1xg2J+SyCRzb4p8fI8GT/ -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:55 2025 by rpki-client on console.sobornost.net