$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: Ls/RDJrfTUOKiFUtP4ftbY/2VXHhs/cNSvuSLkVQhRU= Subject key identifier: A3:11:0B:8A:E4:44:8F:86:7D:A3:38:A6:E9:78:FC:DA:B4:F0:4A:CD Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 3D Signing time: Sun 27 Apr 2025 06:19:54 +0000 Manifest this update: Sun 27 Apr 2025 06:19:53 +0000 Manifest next update: Sun 04 May 2025 06:19:53 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: H0p/A39xr12TdEEiIK9KXZvIOrG1pA0T6LI59x2B514=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: KQyWlLwg95xKEA7eXDtYxt189xq6hS1CzXkzk6a37uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Apr 27 06:19:53 2025 GMT Not After : May 4 06:19:53 2025 GMT Subject: CN=680dcc8a-a039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:2a:68:0a:6c:f7:76:88:f9:60:b3:bb:9e: 1b:71:8f:f6:1b:68:db:9a:c1:bb:2a:06:8c:d7:f2: a3:d3:2b:c2:42:c8:da:5e:b9:b3:61:74:8b:b7:95: 87:29:6c:67:13:8d:db:41:90:d1:d6:87:cd:37:48: 1d:8e:a7:c0:05:e4:1d:7d:a6:30:07:c7:a9:36:47: ec:58:71:9f:e9:1d:17:01:22:96:a0:e4:95:8a:d0: e2:3e:43:76:4d:c7:a6:23:0f:c3:81:d4:e6:3d:16: be:8f:fb:89:98:c2:06:f5:a9:98:91:75:60:ce:a6: 50:47:9a:ba:5a:5e:a1:d8:58:43:fc:32:64:57:97: a2:a9:73:c7:0c:24:30:23:98:b1:d9:b6:0d:53:d2: 60:39:91:62:8c:bd:8e:b8:11:68:78:bd:c4:e6:ca: 44:ca:32:fe:76:c3:e3:a1:28:02:65:27:85:a2:85: 5a:32:42:74:a5:0c:6b:4e:40:d9:e6:7f:03:1b:b8: bc:6b:9a:65:f1:26:2b:7c:b9:f7:86:75:20:83:7a: 8a:76:35:1a:19:a1:72:fa:45:c8:44:af:47:8b:7d: 8b:4b:96:e1:e7:b5:25:b8:6e:c5:36:a1:a3:a0:24: 8e:37:ea:f0:c9:82:ac:5c:f8:11:e1:79:ec:0b:00: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:0B:8A:E4:44:8F:86:7D:A3:38:A6:E9:78:FC:DA:B4:F0:4A:CD X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:70:f3:00:00:e0:1e:4c:27:e8:ed:28:a7:e0:8a:1e:2f:5d: b7:dd:20:a3:eb:73:b5:4a:a1:36:a1:25:37:27:3a:46:27:42: 0e:69:e4:76:2d:01:f0:72:57:3b:dd:f7:8a:7c:d1:c0:7b:74: d0:a2:e6:00:03:f4:21:f0:f2:b9:df:df:4e:1d:b5:0d:3f:48: 11:58:28:19:b3:16:a4:ca:ca:5b:91:c4:66:26:92:16:c5:c3: ee:54:25:55:66:b7:f8:36:2c:8e:da:89:55:84:d0:0c:c1:2f: aa:97:0f:da:69:e4:67:a0:27:5d:fb:67:be:27:9f:48:b1:e7: 85:12:27:7a:ae:62:5e:b3:12:47:59:49:3a:87:4c:a2:95:8d: 92:7f:d0:7b:cf:32:ab:f1:71:3d:34:25:39:57:8c:6c:0f:e2: 73:2d:2b:9c:30:1e:fb:cb:88:0c:de:47:06:f4:21:d5:97:ac: cd:75:ce:a4:9c:2c:6e:c6:a7:2a:32:7c:42:e8:35:4e:14:2b: 60:e9:7c:3d:05:62:6f:d2:8f:76:c1:6e:7c:16:8e:fa:89:57: b2:b7:be:bd:7c:98:a9:c2:76:0a:7f:de:52:8e:d7:2d:bb:82: 2b:d4:b5:f0:68:52:7d:4f:27:b0:45:ac:02:88:6e:41:e8:fa: 74:47:df:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA0MjcwNjE5NTNaFw0yNTA1MDQwNjE5NTNaMBgxFjAUBgNV BAMTDTY4MGRjYzhhLWEwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCZipoCmz3doj5YLO7nhtxj/YbaNuawbsqBozX8qPTK8JCyNpeubNhdIu3lYcp bGcTjdtBkNHWh803SB2Op8AF5B19pjAHx6k2R+xYcZ/pHRcBIpag5JWK0OI+Q3ZN x6YjD8OB1OY9Fr6P+4mYwgb1qZiRdWDOplBHmrpaXqHYWEP8MmRXl6Kpc8cMJDAj mLHZtg1T0mA5kWKMvY64EWh4vcTmykTKMv52w+OhKAJlJ4WihVoyQnSlDGtOQNnm fwMbuLxrmmXxJit8ufeGdSCDeop2NRoZoXL6RchEr0eLfYtLluHntSW4bsU2oaOg JI436vDJgqxc+BHheewLAMzjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoxELiuRE j4Z9ozim6Xj82rTwSs0wHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1w8wAA4B5MJ+jtKKfgih4vXbfdIKPrc7VKoTahJTcnOkYnQg5p5HYt AfByVzvd94p80cB7dNCi5gAD9CHw8rnf304dtQ0/SBFYKBmzFqTKyluRxGYmkhbF w+5UJVVmt/g2LI7aiVWE0AzBL6qXD9pp5GegJ137Z74nn0ix54USJ3quYl6zEkdZ STqHTKKVjZJ/0HvPMqvxcT00JTlXjGwP4nMtK5wwHvvLiAzeRwb0IdWXrM11zqSc LG7GpyoyfELoNU4UK2DpfD0FYm/Sj3bBbnwWjvqJV7K3vr18mKnCdgp/3lKO1y27 givUtfBoUn1PJ7BFrAKIbkHo+nRH30w= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net