$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json) Hash identifier: yxOEHuCqHs/LuGdL3MkDZQtqLg9D1wvPnzN+6ZxW39M= Subject key identifier: CE:ED:34:1B:45:2D:71:5A:0F:A5:23:22:E7:8A:DF:1F:80:E6:52:02 Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft Manifest number: 0410 Signing time: Sun 27 Apr 2025 00:05:30 +0000 Manifest this update: Sun 27 Apr 2025 00:05:30 +0000 Manifest next update: Sun 04 May 2025 00:05:30 +0000 Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: u03Tjg14R7Uwk7Mh+/OFfv8yi3IH7Qm60Wn6keDqEnI=) 2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Validity Not Before: Apr 27 00:05:30 2025 GMT Not After : May 4 00:05:30 2025 GMT Subject: CN=680d74ca-ba2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:89:5e:d7:ce:18:89:9f:cf:62:b2:54:84: bf:73:9a:53:ef:ac:63:a9:62:7f:c3:9a:6c:73:22: 33:03:88:1b:d4:66:1f:6d:4f:38:8f:19:42:27:59: 9f:1b:fc:f8:3f:0f:1a:54:d9:5a:21:d7:98:3a:35: 95:29:69:dd:86:8c:6c:7e:08:92:82:a8:54:eb:23: 4c:20:9c:01:3d:10:07:f5:7e:9a:e8:b0:b1:cf:17: 15:33:42:58:a3:71:f8:66:cd:d9:c4:d2:39:f6:0a: 59:0f:0d:58:2d:d5:10:54:f6:57:e3:aa:e5:cb:88: 29:9f:76:15:20:92:09:f0:9a:6f:81:12:be:b6:83: 2a:a2:6a:f2:01:62:62:11:4f:cd:f4:9c:10:e0:32: 7d:a9:d9:cc:cf:26:e1:67:e2:d6:11:56:c9:91:36: 5e:66:3c:72:55:af:e9:21:e6:39:8e:03:f5:13:06: e6:24:39:ac:f9:e9:49:a5:de:2e:86:10:38:df:0e: 96:54:c3:55:d5:99:97:c5:08:dc:11:fd:21:fa:6b: 22:56:5b:d5:ec:20:68:95:66:71:a6:0b:4e:4e:63: 6e:47:af:03:24:5a:06:5d:be:5c:5b:8d:6b:3f:4f: 4d:19:b6:5f:1e:c3:0b:c5:45:d9:11:65:e2:9e:ba: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:34:1B:45:2D:71:5A:0F:A5:23:22:E7:8A:DF:1F:80:E6:52:02 X509v3 Authority Key Identifier: keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:51:02:5f:ef:c5:ff:44:c5:25:6a:35:be:f2:72:d6:50:fe: 2d:77:9e:66:0e:7b:08:f9:22:42:69:38:bd:97:43:b3:9c:dd: 52:76:26:b6:a7:1a:d9:80:22:d7:f9:a8:b5:02:98:e4:bc:7d: 26:af:9d:23:e7:a5:dd:e6:e8:13:2e:9f:77:c7:5f:98:73:1c: 5d:16:21:3c:61:72:93:54:84:96:8d:27:b4:92:c2:3a:c1:fe: ab:ba:bf:e8:a7:50:6a:cf:12:66:e7:bf:4c:c8:18:66:11:da: 60:a7:6a:fd:cc:ee:b0:da:c9:d1:9e:84:26:a4:b9:f1:42:53: ef:9d:6b:05:92:cc:e2:16:19:6d:a5:81:cc:d0:96:ac:ae:8e: 34:2c:4c:fc:06:72:20:ca:5b:e1:61:bd:f0:10:5e:a5:fd:5f: 04:f8:c5:bc:d6:95:89:92:95:f4:34:54:9c:1f:56:4b:21:24: 71:0f:12:fe:83:1e:71:32:72:34:14:24:06:ba:bf:59:c8:f0: 96:50:93:e9:04:b2:83:5b:11:1c:a9:24:dc:1d:1a:a6:9a:8b: 2e:23:91:ab:75:a5:e8:72:7b:7d:ad:0b:a5:4e:88:fd:3f:2f: 41:4e:bf:79:90:49:39:d1:ce:50:4b:25:19:b3:b5:b4:3d:5d: cd:e1:46:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5 OTczOTE0QUIwHhcNMjUwNDI3MDAwNTMwWhcNMjUwNTA0MDAwNTMwWjAYMRYwFAYD VQQDEw02ODBkNzRjYS1iYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRiJXtfOGImfz2KyVIS/c5pT76xjqWJ/w5pscyIzA4gb1GYfbU84jxlCJ1mf G/z4Pw8aVNlaIdeYOjWVKWndhoxsfgiSgqhU6yNMIJwBPRAH9X6a6LCxzxcVM0JY o3H4Zs3ZxNI59gpZDw1YLdUQVPZX46rly4gpn3YVIJIJ8JpvgRK+toMqomryAWJi EU/N9JwQ4DJ9qdnMzybhZ+LWEVbJkTZeZjxyVa/pIeY5jgP1EwbmJDms+elJpd4u hhA43w6WVMNV1ZmXxQjcEf0h+msiVlvV7CBolWZxpgtOTmNuR68DJFoGXb5cW41r P09NGbZfHsMLxUXZEWXinrq+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7tNBtF LXFaD6UjIueK3x+A5lICMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2 QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4 MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkUQJf78X/RMUlajW+8nLWUP4td55mDnsI+SJCaTi9l0OznN1Sdia2 pxrZgCLX+ai1ApjkvH0mr50j56Xd5ugTLp93x1+YcxxdFiE8YXKTVISWjSe0ksI6 wf6rur/op1BqzxJm579MyBhmEdpgp2r9zO6w2snRnoQmpLnxQlPvnWsFksziFhlt pYHM0Jasro40LEz8BnIgylvhYb3wEF6l/V8E+MW81pWJkpX0NFScH1ZLISRxDxL+ gx5xMnI0FCQGur9ZyPCWUJPpBLKDWxEcqSTcHRqmmosuI5GrdaXocnt9rQulToj9 Py9BTr95kEk50c5QSyUZs7W0PV3N4UaW -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net