$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: Tsep8WQAQaco0zNT2h4J+hcuAZGK0+4AuXZgMmcoz1Y= Subject key identifier: 0F:18:A3:B2:53:7E:E6:C6:94:F7:99:2C:33:21:57:36:51:16:41:29 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 151A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1512 Signing time: Mon 28 Apr 2025 17:02:29 +0000 Manifest this update: Mon 28 Apr 2025 17:02:29 +0000 Manifest next update: Mon 05 May 2025 17:02:29 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: crnOSYQFgBSRvgBk5x3t2mC2c6Pu+s2lZpTzhVu1KeU=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5402 (0x151a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Apr 28 17:02:29 2025 GMT Not After : May 5 17:02:29 2025 GMT Subject: CN=680fb4a5-be34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:6f:f3:d8:73:80:6d:2a:2b:31:96:0f:98: 5e:02:dd:73:9b:e4:2c:f2:aa:9f:c5:d3:27:a5:c9: 66:bc:e5:5a:a2:57:2d:ca:1d:18:7b:3c:92:21:fe: d4:3f:1f:0b:56:a0:20:85:27:e2:c4:d2:c5:48:3a: 5b:0a:32:53:66:17:d0:f1:20:27:52:fe:2d:41:f9: b3:2d:87:0a:14:36:59:ef:08:b6:2f:5b:6c:48:88: ab:53:8b:35:24:93:6c:1d:e8:22:60:09:2f:01:17: fb:e7:60:33:7c:4f:12:65:8c:73:f9:9c:a4:ba:7a: 9b:97:9f:95:30:01:fe:92:92:fb:a2:bb:f8:95:46: 76:92:36:6b:6e:4f:74:1f:cc:71:26:2e:be:a5:a3: 78:ec:a6:eb:e7:57:5b:96:79:20:50:fc:c0:ef:d7: 17:1d:7e:a7:e5:1d:cb:e5:e7:2c:61:62:be:4b:5e: a9:6a:c5:42:3a:78:1b:c5:77:9c:12:98:cd:6a:f6: 35:ae:83:b5:2a:21:73:8f:94:d2:20:09:d7:4e:7e: f3:77:eb:ed:29:9b:c9:b7:66:e7:28:51:af:7f:34: ef:2d:a5:5c:ad:20:b1:19:76:a7:71:49:bc:37:c1: d8:c4:0f:27:bf:f4:8e:de:71:dd:37:c0:f2:c7:2d: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:18:A3:B2:53:7E:E6:C6:94:F7:99:2C:33:21:57:36:51:16:41:29 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2f:36:5e:fe:2f:bd:33:7d:6e:4a:81:98:b7:28:de:b1:22: 59:a6:4b:cd:1d:d1:c2:f5:f4:0c:7f:61:d4:28:04:15:f9:64: 0c:74:d4:4e:a5:a4:4f:d2:53:54:91:26:a5:98:00:13:59:9e: c3:de:79:b2:ac:cd:3d:11:8b:c6:ac:57:e0:35:ea:97:ab:12: d5:3e:13:d3:90:e3:c2:d8:a3:f5:29:d4:5c:a6:c1:f1:33:7d: da:ff:d9:6c:d2:7a:25:c0:fe:71:7d:e0:23:6f:c0:16:2d:52: bf:86:4e:fd:f9:0d:27:c6:e0:ec:8e:bd:e1:20:31:44:c6:7c: 13:c9:83:11:5d:05:d3:d5:61:8d:94:b7:9f:5f:48:aa:fa:50: 76:d8:00:e3:ea:bc:e3:1a:c7:a7:79:1f:6a:68:96:d4:18:da: 46:07:5d:d5:af:60:4e:0c:fd:c5:a0:e9:3e:49:a6:fc:b7:26: 62:f4:d9:39:2e:b3:e8:93:f2:ce:74:0b:c5:de:c3:fe:fd:7d: ef:df:0d:d4:b4:58:d0:7d:72:c4:89:a8:1b:8d:3c:70:04:0c: 58:81:a1:1c:35:e5:3e:3c:85:57:49:85:b1:22:45:ad:9f:39: 82:d5:3b:b2:28:c4:22:a4:d0:b9:47:6e:b6:a8:76:67:c3:e3: 22:f8:10:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNDI4MTcwMjI5WhcNMjUwNTA1MTcwMjI5WjAYMRYwFAYD VQQDEw02ODBmYjRhNS1iZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37Bv89hzgG0qKzGWD5heAt1zm+Qs8qqfxdMnpclmvOVaolctyh0YezySIf7U Px8LVqAghSfixNLFSDpbCjJTZhfQ8SAnUv4tQfmzLYcKFDZZ7wi2L1tsSIirU4s1 JJNsHegiYAkvARf752AzfE8SZYxz+Zykunqbl5+VMAH+kpL7orv4lUZ2kjZrbk90 H8xxJi6+paN47Kbr51dblnkgUPzA79cXHX6n5R3L5ecsYWK+S16pasVCOngbxXec EpjNavY1roO1KiFzj5TSIAnXTn7zd+vtKZvJt2bnKFGvfzTvLaVcrSCxGXancUm8 N8HYxA8nv/SO3nHdN8Dyxy2/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8Yo7JT fubGlPeZLDMhVzZRFkEpMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvLzZe/i+9M31uSoGYtyjesSJZpkvNHdHC9fQMf2HUKAQV+WQMdNRO paRP0lNUkSalmAATWZ7D3nmyrM09EYvGrFfgNeqXqxLVPhPTkOPC2KP1KdRcpsHx M33a/9ls0nolwP5xfeAjb8AWLVK/hk79+Q0nxuDsjr3hIDFExnwTyYMRXQXT1WGN lLefX0iq+lB22ADj6rzjGseneR9qaJbUGNpGB13Vr2BODP3FoOk+Sab8tyZi9Nk5 LrPok/LOdAvF3sP+/X3v3w3UtFjQfXLEiagbjTxwBAxYgaEcNeU+PIVXSYWxIkWt nzmC1TuyKMQipNC5R262qHZnw+Mi+BBR -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:56 2025 by rpki-client on console.sobornost.net