$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: XLckW7P7W/bwvaE57gnZX89DtrnMi4AzVXdLBJytcME= Subject key identifier: 17:5C:3A:B8:DD:E3:69:68:E5:D8:79:6F:72:0B:2B:06:13:A4:F2:C8 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 59 Signing time: Sun 27 Apr 2025 05:58:29 +0000 Manifest this update: Sun 27 Apr 2025 05:58:29 +0000 Manifest next update: Sun 04 May 2025 05:58:29 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: WhwlAoMo/UgAZ+tzf+ITqLxKNLnwDUWRLnSJdnAHL9c=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Apr 27 05:58:29 2025 GMT Not After : May 4 05:58:29 2025 GMT Subject: CN=680dc785-9fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:cf:1e:3f:b3:76:dd:d4:49:5a:8f:c8:f5: f0:0c:c3:74:f8:d1:d3:26:be:d5:dc:33:e5:1f:90: b4:f0:f2:48:f2:cb:c4:cc:35:93:49:db:35:84:3d: cc:ba:d1:ea:14:7a:03:7c:1d:58:ba:97:4f:7f:b1: 86:7c:22:b3:94:83:ab:c2:ec:02:b8:03:27:44:09: 10:bb:9c:05:fb:8c:4e:9a:51:af:70:46:7a:37:55: 19:7e:2e:2e:b5:80:fe:82:42:1b:2a:d6:63:a9:9d: 55:2a:a7:36:6b:01:d2:07:20:20:c0:a3:18:42:3b: 05:09:aa:74:fb:eb:55:02:b9:51:d4:86:b2:9f:39: 97:d6:91:e6:36:29:4e:47:6a:40:67:69:05:b3:4d: 63:98:9c:90:a0:0b:7f:18:3b:00:83:7d:62:77:ee: 0e:b6:42:73:8b:c4:79:0d:b9:f4:5e:3d:2b:9f:50: 9d:9d:9c:ca:e1:44:a7:df:21:03:dd:ef:f3:9a:d7: 58:d1:8b:e4:97:db:89:f4:b1:23:22:99:70:3d:d7: 3e:56:38:40:ae:11:58:ce:1d:53:92:e1:3a:37:36: d1:5f:7e:4b:ab:7a:e3:00:4d:e8:21:fe:6b:b2:56: 71:08:c0:c9:c3:5f:40:d6:e8:87:1d:b6:31:89:53: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5C:3A:B8:DD:E3:69:68:E5:D8:79:6F:72:0B:2B:06:13:A4:F2:C8 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:de:30:f9:88:ac:5a:28:10:25:7e:ac:b6:bc:2f:fe:2a:b2: b9:2b:63:d5:7d:a2:bf:2c:63:1c:50:19:38:20:f7:f0:62:75: ee:61:35:34:ea:12:3a:90:f2:aa:8e:db:c1:74:6b:d0:56:ab: a8:e9:8a:ce:7d:a7:ee:40:8c:54:4a:b9:b0:7d:8f:7f:50:99: bb:0a:2b:fa:c4:93:8b:4d:bb:6a:dc:a9:b8:54:40:56:49:84: 06:ef:d1:83:e2:94:fa:37:06:92:b1:ee:16:e2:42:da:c1:d7: d0:ea:3c:a3:78:9a:c4:93:ea:ae:cd:67:23:58:06:68:87:c0: 3c:b2:2a:76:41:09:5c:d7:50:33:80:65:a6:e3:7e:7c:16:48: db:8c:29:fe:5e:3c:21:ea:2a:e6:a4:72:3e:05:02:f1:b4:69: 55:6e:5e:5e:38:de:20:64:db:1e:34:8f:70:e2:d4:40:89:93: db:de:4a:fe:e1:77:d5:48:c1:cd:59:69:2f:f3:24:92:74:e8: 95:b8:3e:4c:fd:0e:75:19:57:56:b7:61:82:e5:8b:9a:8e:2d: ba:50:24:bb:20:03:83:cf:4e:2e:97:3c:7c:d5:f6:47:27:39: 9d:d6:4c:2d:4d:94:27:c2:0d:26:cc:1b:84:7a:06:07:19:7d: 9a:ec:0a:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkZCRTExMC8GA1UEBRMoN0Y5NkFFMEEyMkNBOTM4QkQ1RjlEOUE3MzI4QUY1ODM2 MkVCMjJDMTAeFw0yNTA0MjcwNTU4MjlaFw0yNTA1MDQwNTU4MjlaMBgxFjAUBgNV BAMTDTY4MGRjNzg1LTlmZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH588eP7N23dRJWo/I9fAMw3T40dMmvtXcM+UfkLTw8kjyy8TMNZNJ2zWEPcy6 0eoUegN8HVi6l09/sYZ8IrOUg6vC7AK4AydECRC7nAX7jE6aUa9wRno3VRl+Li61 gP6CQhsq1mOpnVUqpzZrAdIHICDAoxhCOwUJqnT761UCuVHUhrKfOZfWkeY2KU5H akBnaQWzTWOYnJCgC38YOwCDfWJ37g62QnOLxHkNufRePSufUJ2dnMrhRKffIQPd 7/Oa11jRi+SX24n0sSMimXA91z5WOECuEVjOHVOS4To3NtFffkureuMATegh/muy VnEIwMnDX0DW6IcdtjGJU6F5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF1w6uN3j aWjl2HlvcgsrBhOk8sgwHwYDVR0jBBgwFoAUf5auCiLKk4vV+dmnMor1g2LrIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRkJFLzQyMTU5RjVBOUQw MjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjVhdUNpTEtrNHZWLWRtbk1vcjFnMkxySXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RkJFLzQyMTU5RjVBOUQwMjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2 Vi1kbW5Nb3IxZzJMcklzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABveMPmIrFooECV+rLa8L/4qsrkrY9V9or8sYxxQGTgg9/Bide5hNTTq EjqQ8qqO28F0a9BWq6jpis59p+5AjFRKubB9j39QmbsKK/rEk4tNu2rcqbhUQFZJ hAbv0YPilPo3BpKx7hbiQtrB19DqPKN4msST6q7NZyNYBmiHwDyyKnZBCVzXUDOA ZabjfnwWSNuMKf5ePCHqKuakcj4FAvG0aVVuXl443iBk2x40j3Di1ECJk9veSv7h d9VIwc1ZaS/zJJJ06JW4Pkz9DnUZV1a3YYLli5qOLbpQJLsgA4PPTi6XPHzV9kcn OZ3WTC1NlCfCDSbMG4R6BgcZfZrsCmQ= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net