$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: nyLhYVKNKfOvLldBKlFydA+NkVPkyr+8d5j7VntJRsA= Subject key identifier: 62:93:BD:6D:C6:91:EE:99:47:28:9A:A9:36:99:E2:8E:62:74:52:00 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 0FB5 Signing time: Sat 10 May 2025 17:34:48 +0000 Manifest this update: Sat 10 May 2025 17:34:47 +0000 Manifest next update: Sat 17 May 2025 17:34:47 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: EMtDBptpv0IZbRtyUATWZJdm3xpt93n1txM//KBhG3g=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: tVncRVnPr+nSHEeWNP/pEvYFdoB6fcCQNCn7dCwbFNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: May 10 17:34:47 2025 GMT Not After : May 17 17:34:47 2025 GMT Subject: CN=681f8e38-5def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:a2:76:21:95:7b:f2:05:e2:26:de:d4:97: 26:51:b6:97:f5:98:d2:7a:03:e6:45:21:c9:cd:81: fd:98:0c:98:8f:a7:87:cd:66:41:10:65:6f:31:f0: d1:a8:a6:0b:0e:cf:aa:2f:55:25:d1:95:f9:db:35: d0:30:b5:e4:5e:0f:81:f0:89:e1:21:cb:cf:2c:18: 1a:ed:b8:47:26:ca:58:62:ac:5f:dd:36:89:62:ce: 6c:59:c7:d2:b4:86:79:d6:73:8b:61:4a:72:c2:07: b5:0e:69:a5:2e:1a:3a:dc:63:8f:64:d8:c3:e4:aa: 11:69:5c:1d:f4:12:a8:1f:4f:ff:1f:53:fa:12:64: d3:eb:41:15:bb:45:a4:58:9d:dd:10:2e:05:b6:19: 14:4b:76:79:70:a2:ac:97:5e:64:a1:da:74:0b:91: 14:b1:1b:11:19:0d:33:09:6c:72:55:18:84:dd:85: 60:bc:b5:b5:c6:7e:1c:94:c3:5d:6d:55:f7:20:1b: ef:54:a3:c6:03:2d:21:28:3f:1a:38:0c:1d:e3:f5: ff:f4:b2:6c:1f:69:cd:7b:9f:28:bf:05:c1:fe:d0: d7:95:fa:60:6c:e8:3f:f8:5d:76:10:d4:65:f1:02: 2a:02:48:82:83:d7:db:01:12:11:3d:c6:e9:b2:64: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:BD:6D:C6:91:EE:99:47:28:9A:A9:36:99:E2:8E:62:74:52:00 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:43:c1:18:4a:48:46:9b:9c:41:53:9e:98:62:58:a7:95:42: e5:7b:26:c1:08:d5:a5:0b:ce:4c:37:9a:8f:0a:c8:f4:aa:f9: d6:b8:8d:23:80:86:d4:83:22:e6:01:07:1b:21:25:ba:82:a7: 50:24:38:d4:01:22:86:8b:1b:7e:2d:d7:8a:0d:d6:23:af:05: da:ee:d5:f7:73:72:0d:53:a8:9e:80:f2:8d:d9:d4:32:fd:05: 75:01:70:18:66:40:ba:ca:a0:39:f4:69:59:1c:b1:26:88:89: 4e:bd:10:9e:db:14:ba:59:8e:46:a2:9a:34:c4:1d:e2:40:71: ec:33:23:96:1b:44:19:d0:5f:7c:ab:cc:d3:a4:70:5d:fb:09: c9:c3:ba:b9:fc:8f:50:45:a6:0f:61:6c:8a:1d:aa:db:a7:3b: 9a:73:88:48:f6:b9:f0:c3:7b:4a:7a:28:58:d5:5d:cf:fd:29: f3:25:2a:7d:33:a6:aa:df:43:db:a2:41:54:bf:a9:fc:09:0e: 58:b6:33:6a:cf:c2:21:65:6b:88:6b:70:85:7c:41:39:b1:ae: 73:d2:9d:72:d7:69:15:67:ca:c9:5d:7d:20:4d:ef:82:59:25: 6a:7e:0a:96:27:c7:a4:26:0b:11:5a:7c:1b:f0:c8:2e:68:44: 0e:14:78:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNTEwMTczNDQ3WhcNMjUwNTE3MTczNDQ3WjAYMRYwFAYD VQQDEw02ODFmOGUzOC01ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXeidiGVe/IF4ibe1JcmUbaX9ZjSegPmRSHJzYH9mAyYj6eHzWZBEGVvMfDR qKYLDs+qL1Ul0ZX52zXQMLXkXg+B8InhIcvPLBga7bhHJspYYqxf3TaJYs5sWcfS tIZ51nOLYUpywge1DmmlLho63GOPZNjD5KoRaVwd9BKoH0//H1P6EmTT60EVu0Wk WJ3dEC4FthkUS3Z5cKKsl15kodp0C5EUsRsRGQ0zCWxyVRiE3YVgvLW1xn4clMNd bVX3IBvvVKPGAy0hKD8aOAwd4/X/9LJsH2nNe58ovwXB/tDXlfpgbOg/+F12ENRl 8QIqAkiCg9fbARIRPcbpsmR76QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKTvW3G ke6ZRyiaqTaZ4o5idFIAMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQ8EYSkhGm5xBU56YYlinlULleybBCNWlC85MN5qPCsj0qvnWuI0j gIbUgyLmAQcbISW6gqdQJDjUASKGixt+LdeKDdYjrwXa7tX3c3INU6iegPKN2dQy /QV1AXAYZkC6yqA59GlZHLEmiIlOvRCe2xS6WY5Gopo0xB3iQHHsMyOWG0QZ0F98 q8zTpHBd+wnJw7q5/I9QRaYPYWyKHarbpzuac4hI9rnww3tKeihY1V3P/SnzJSp9 M6aq30PbokFUv6n8CQ5YtjNqz8IhZWuIa3CFfEE5sa5z0p1y12kVZ8rJXX0gTe+C WSVqfgqWJ8ekJgsRWnwb8MguaEQOFHh9 -----END CERTIFICATE-----Generated at Sat May 10 20:02:17 2025 by rpki-client on console.sobornost.net