$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: yNDJMEMIQPlWkW8vdKYJETEnTdXRjeETCgdb9ALq8b8= Subject key identifier: 9C:89:0A:FA:F5:ED:E0:F3:93:86:F9:64:72:30:41:3E:7B:5F:1E:C2 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 1168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 1142 Signing time: Mon 28 Apr 2025 17:30:09 +0000 Manifest this update: Mon 28 Apr 2025 17:30:08 +0000 Manifest next update: Mon 05 May 2025 17:30:08 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: vh17KIcNFJbsYbHh5Z9SdbumEIM9vHPxaugG803xIpM=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4456 (0x1168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Apr 28 17:30:08 2025 GMT Not After : May 5 17:30:08 2025 GMT Subject: CN=680fbb20-8a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:bb:d9:57:e4:f7:cb:43:d5:54:42:f4:07: 2b:f4:56:69:44:1f:7a:91:27:b4:5f:d4:6c:67:0e: 43:d3:b8:55:90:47:e3:be:70:b0:dc:cb:48:71:00: 1c:57:7e:cf:e7:76:87:ef:17:01:94:e2:f4:58:6e: c9:93:28:ee:60:54:7c:61:a3:68:7b:f5:00:d3:b3: d7:86:c6:13:f5:ba:2a:87:54:f2:c0:b3:54:3e:80: 49:55:40:bb:a6:fc:be:bf:9b:32:a4:68:68:8a:d7: 3b:71:2a:47:48:b9:a0:92:0c:82:dd:ab:dc:3a:a0: 0e:6b:3f:75:7a:f4:81:97:59:bf:66:d2:b5:fd:7e: 35:41:f8:59:82:6f:26:3d:cb:4f:8c:57:74:a6:10: 5e:59:62:62:6f:4b:66:0b:f4:e3:f8:5d:fc:01:bc: 86:60:9f:e6:63:07:d1:30:cd:8b:2b:6e:84:f8:5e: 25:9e:4e:28:ed:a5:29:0f:61:b9:ff:ba:4e:99:ba: 3d:f5:a2:8d:91:b5:1e:3d:3e:58:54:d7:51:61:ff: fd:09:05:fe:57:54:ad:79:eb:b2:6d:da:87:30:e5: 66:ce:62:33:02:cf:ff:4e:71:60:05:39:20:2d:d7: 0c:45:e9:82:16:24:82:46:1e:3a:6c:f2:6d:0e:ee: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:0A:FA:F5:ED:E0:F3:93:86:F9:64:72:30:41:3E:7B:5F:1E:C2 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f5:eb:cd:0c:66:51:9f:0e:0b:e7:ff:7a:27:a3:e3:0b:56: 1f:ee:f3:2a:61:d7:62:70:2e:91:00:7a:c7:50:09:13:f3:ef: 91:30:fa:76:3e:72:47:eb:b1:e9:13:f7:1c:a4:bc:1a:f5:45: 09:74:a4:06:3a:3a:65:33:83:dd:53:7e:74:56:ad:33:a0:6c: 47:18:2c:bb:15:07:84:0e:85:bc:43:0a:54:db:12:9f:ba:77: ea:62:9c:a8:a3:55:ba:23:02:8f:ef:5d:89:43:78:07:d5:b1: 1f:d6:b4:a1:5a:b4:b7:e4:fa:6e:20:61:d9:14:2d:37:a7:04: b3:58:ae:9a:99:fe:e3:58:67:c3:5c:f9:be:d6:7e:d8:f9:fc: c5:6c:a7:24:d9:fc:82:1a:6d:e4:1c:d8:2a:9f:00:1f:e1:90: 0b:c1:60:9e:ba:db:a3:1f:f7:a7:57:cc:a6:57:ca:6d:ed:74: b2:8d:46:41:35:3e:38:bf:31:8f:d4:d2:78:a1:d5:d5:39:12: 1a:8f:96:25:f0:6d:b5:9e:9d:9a:a8:c7:d0:f1:5c:56:a0:00: 4c:3f:87:c9:c4:1e:78:c6:fc:12:21:27:dc:25:ec:41:9c:ba: 17:fb:23:4c:d7:2c:6c:a3:25:08:88:07:0f:2a:e6:e6:21:23: 4c:37:57:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwNDI4MTczMDA4WhcNMjUwNTA1MTczMDA4WjAYMRYwFAYD VQQDEw02ODBmYmIyMC04YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01S72Vfk98tD1VRC9Acr9FZpRB96kSe0X9RsZw5D07hVkEfjvnCw3MtIcQAc V37P53aH7xcBlOL0WG7JkyjuYFR8YaNoe/UA07PXhsYT9boqh1TywLNUPoBJVUC7 pvy+v5sypGhoitc7cSpHSLmgkgyC3avcOqAOaz91evSBl1m/ZtK1/X41QfhZgm8m PctPjFd0phBeWWJib0tmC/Tj+F38AbyGYJ/mYwfRMM2LK26E+F4lnk4o7aUpD2G5 /7pOmbo99aKNkbUePT5YVNdRYf/9CQX+V1SteeuybdqHMOVmzmIzAs//TnFgBTkg LdcMRemCFiSCRh46bPJtDu4uYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyJCvr1 7eDzk4b5ZHIwQT57Xx7CMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA9evNDGZRnw4L5/96J6PjC1Yf7vMqYddicC6RAHrHUAkT8++RMPp2 PnJH67HpE/ccpLwa9UUJdKQGOjplM4PdU350Vq0zoGxHGCy7FQeEDoW8QwpU2xKf unfqYpyoo1W6IwKP712JQ3gH1bEf1rShWrS35PpuIGHZFC03pwSzWK6amf7jWGfD XPm+1n7Y+fzFbKck2fyCGm3kHNgqnwAf4ZALwWCeutujH/enV8ymV8pt7XSyjUZB NT44vzGP1NJ4odXVORIaj5Yl8G21np2aqMfQ8VxWoABMP4fJxB54xvwSISfcJexB nLoX+yNM1yxsoyUIiAcPKubmISNMN1fY -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:57 2025 by rpki-client on console.sobornost.net