$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: 0/MlzQvGuaSJCdIo0sVv5KrNysihHpfTLiubDCjqTpM= Subject key identifier: 2A:E4:A8:4A:3B:21:B1:02:10:6F:F2:C6:C0:FC:73:F7:B3:56:EE:B6 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 0579 Signing time: Thu 24 Apr 2025 23:04:20 +0000 Manifest this update: Thu 24 Apr 2025 23:04:19 +0000 Manifest next update: Thu 01 May 2025 23:04:19 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: IWiVlZd9o8fD73yaF0dUEGnJYoN1hSG1yWzyITNn/KE=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: QfVYtd7FvBpsR5Tca8bnLg+O7UqwB1xI72oRETrqTpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Apr 24 23:04:19 2025 GMT Not After : May 1 23:04:19 2025 GMT Subject: CN=680ac374-d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:9a:dd:f1:5e:94:35:3d:d3:af:e8:39:ba: 23:51:3f:b6:d9:f1:61:a1:7d:61:7c:56:e6:ad:25: 78:1e:ce:a4:41:a2:de:ba:cc:10:5c:f6:bb:26:e3: a2:4b:16:61:15:3e:e1:43:35:25:dc:9d:4a:c9:97: 4e:2e:bb:8c:e4:ec:d3:11:73:78:f7:14:ba:07:aa: 76:a7:67:40:40:2f:82:94:70:6b:3a:6c:a1:9d:12: 9d:8b:e0:ff:59:d7:de:95:e3:f6:2a:b4:58:0c:d7: af:15:be:c9:63:55:ca:b7:05:7b:2d:93:85:fc:bb: cf:d3:c0:2a:67:a4:4f:47:31:bc:d2:1b:62:0b:2c: b3:88:e5:d3:6c:be:36:1b:b2:7c:aa:27:a0:34:b0: 66:71:30:33:46:56:3e:28:25:f8:b7:24:e1:20:c5: e7:a0:d0:cd:84:48:62:c3:e2:6a:75:00:a6:71:bb: 85:76:78:25:2a:49:26:a8:60:c5:ff:71:dc:a4:9f: 67:61:7c:65:60:e3:cd:4e:c1:50:0d:52:f7:ab:c4: 9d:d4:2f:c1:c3:3f:2d:77:1e:31:0d:22:7a:e1:b5: b8:fe:24:f9:00:29:ac:fe:d8:0f:19:0a:a8:73:d3: ab:82:59:d3:df:fc:80:58:2b:0f:96:10:71:4b:92: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:A8:4A:3B:21:B1:02:10:6F:F2:C6:C0:FC:73:F7:B3:56:EE:B6 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:61:50:70:06:ad:3f:a4:73:be:f5:76:e4:d8:cb:a3:19:47: 60:c6:b2:80:d8:0b:67:c9:f7:83:f6:98:dd:83:52:cf:90:89: 72:ac:50:76:1b:a7:2a:8e:f9:6b:59:2b:ba:3e:3d:7e:33:5c: 9e:5f:44:75:01:77:33:d6:ce:04:0c:20:ba:d8:fd:d8:be:a8: 1c:50:d3:24:48:82:0e:ba:c5:3c:8e:62:ae:73:7f:d9:ae:ba: 74:21:ac:03:13:d1:ce:7f:44:91:c2:02:da:d3:38:dc:36:ea: 8d:61:9d:66:8d:d4:d5:44:fd:c5:1c:0e:2d:f3:3c:40:d5:55: 3c:3f:bc:c3:d6:82:59:fd:21:eb:55:9e:61:c6:c7:79:0b:5a: 28:1e:87:93:71:c1:9c:a0:e6:94:39:74:95:1d:46:ce:de:22: 09:d0:d6:d0:42:60:87:60:57:d4:84:44:d9:cf:7b:36:75:1f: b9:a2:55:b5:f2:3f:8d:8c:e5:7f:20:3b:7d:23:2c:08:d1:55: ba:fa:f0:b1:b4:3a:e8:89:5f:58:ec:63:c9:02:e5:56:8f:71: 1c:fb:3a:42:da:61:da:13:45:23:39:67:ad:e7:1b:d9:32:1e: f9:58:6d:55:6d:92:09:c2:d3:1d:f9:1d:c5:fb:e9:fe:1b:87: 8f:0a:4f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjUwNDI0MjMwNDE5WhcNMjUwNTAxMjMwNDE5WjAYMRYwFAYD VQQDEw02ODBhYzM3NC1kOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yWa3fFelDU906/oObojUT+22fFhoX1hfFbmrSV4Hs6kQaLeuswQXPa7JuOi SxZhFT7hQzUl3J1KyZdOLruM5OzTEXN49xS6B6p2p2dAQC+ClHBrOmyhnRKdi+D/ WdfeleP2KrRYDNevFb7JY1XKtwV7LZOF/LvP08AqZ6RPRzG80htiCyyziOXTbL42 G7J8qiegNLBmcTAzRlY+KCX4tyThIMXnoNDNhEhiw+JqdQCmcbuFdnglKkkmqGDF /3HcpJ9nYXxlYOPNTsFQDVL3q8Sd1C/Bwz8tdx4xDSJ64bW4/iT5ACms/tgPGQqo c9OrglnT3/yAWCsPlhBxS5LN6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrkqEo7 IbECEG/yxsD8c/ezVu62MB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiYVBwBq0/pHO+9Xbk2MujGUdgxrKA2AtnyfeD9pjdg1LPkIlyrFB2 G6cqjvlrWSu6Pj1+M1yeX0R1AXcz1s4EDCC62P3YvqgcUNMkSIIOusU8jmKuc3/Z rrp0IawDE9HOf0SRwgLa0zjcNuqNYZ1mjdTVRP3FHA4t8zxA1VU8P7zD1oJZ/SHr VZ5hxsd5C1ooHoeTccGcoOaUOXSVHUbO3iIJ0NbQQmCHYFfUhETZz3s2dR+5olW1 8j+NjOV/IDt9IywI0VW6+vCxtDroiV9Y7GPJAuVWj3Ec+zpC2mHaE0UjOWet5xvZ Mh75WG1VbZIJwtMd+R3F++n+G4ePCk/E -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:00 2025 by rpki-client on console.sobornost.net