$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: nZYsvsrBL2+3SbwkWKPNmLTaOAlnTaq1uWJ7FtsODxs= Subject key identifier: DC:76:1A:86:30:69:17:E5:E3:A7:7B:BD:A9:85:9F:74:84:8D:BF:05 Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 1A26 Signing time: Mon 28 Apr 2025 17:15:10 +0000 Manifest this update: Mon 28 Apr 2025 17:15:10 +0000 Manifest next update: Mon 05 May 2025 17:15:10 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: vx5EkMuyzDmnYhtxQiHFGRAJnewsI5qNCZlWwhnXT1c=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=) 3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: Apr 28 17:15:10 2025 GMT Not After : May 5 17:15:10 2025 GMT Subject: CN=680fb79e-9522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:31:c6:63:17:52:e0:30:4d:c9:01:3a:5e: 8c:f4:c9:07:85:f4:55:0e:e9:77:da:95:7e:a2:5f: 12:7e:1d:81:dd:0f:93:fa:53:f3:11:6d:c4:bf:69: 0e:84:88:62:0a:6d:87:57:d8:63:c2:29:58:1c:7e: c9:c4:dc:5e:54:52:e0:69:35:29:23:46:fa:eb:ae: 62:5a:97:fd:43:19:21:75:58:12:46:5c:3f:b9:07: 26:5c:24:7c:69:7e:14:73:9b:ef:1e:04:3d:35:7b: 52:79:6b:a5:ed:34:5d:e2:0b:34:79:04:e1:c7:22: 4b:32:86:f2:d2:17:e5:20:7d:82:89:3d:f0:a0:7e: f3:f4:17:55:aa:4b:d1:ce:ef:4a:89:32:48:c5:29: 5a:f5:51:36:27:0b:81:a9:7a:08:3e:4a:d3:59:2a: d3:3d:c5:c8:6a:7a:61:b2:d5:6e:07:7c:d4:6b:ea: ec:aa:d3:13:c2:54:a3:d0:05:78:b6:f8:60:00:28: 12:0b:55:24:08:b9:1a:fc:55:97:6b:11:30:88:ce: 44:26:b4:fe:0a:eb:c9:08:e0:4c:5b:28:ec:d1:b5: f5:45:06:8e:b9:d2:e1:5a:60:6e:3f:10:0f:57:a3: 55:53:23:45:4e:5a:90:ee:5c:e0:4c:cc:2e:1b:f0: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:76:1A:86:30:69:17:E5:E3:A7:7B:BD:A9:85:9F:74:84:8D:BF:05 X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d8:3b:e5:10:e9:f2:c1:98:cd:ac:75:b8:2b:b8:ad:28:2c: a8:85:90:1f:26:cc:9b:47:67:27:4b:da:20:b1:47:94:c2:e7: 0d:1b:30:93:45:f9:ec:1c:b4:2b:4a:b9:ae:86:17:03:c3:e0: 91:69:c5:6e:48:71:8d:5f:b0:ec:9e:d3:3f:30:03:cb:ba:80: a7:5d:75:61:f9:12:cf:e0:69:de:d1:c0:45:88:b3:43:61:4b: 29:bc:32:4b:77:bc:88:a7:4b:22:11:30:ca:48:f1:14:ed:d9: dd:3f:f2:f4:c6:03:58:f8:b7:6d:a8:3e:bc:39:42:73:ca:ba: a4:16:99:76:a1:29:88:23:6e:59:24:5d:8e:9d:6a:50:2c:e9: 88:15:29:af:b6:69:bb:2c:55:a8:fd:83:c3:c5:e5:cf:db:d5: de:1e:4f:0a:71:15:91:02:e6:a5:b0:51:65:62:19:d0:a7:d3: 50:30:45:86:9e:17:ca:b7:73:e7:be:ad:87:9c:bf:d1:32:f6: 90:53:58:72:ba:f6:8b:aa:91:19:41:1e:00:4c:19:ba:31:c6: c8:4f:9a:16:a9:8a:ae:7c:5f:ce:78:6c:e6:a8:86:89:80:2c: 98:3e:ca:75:c3:3e:36:05:24:26:77:f1:52:53:89:e6:3c:19: f9:d0:05:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwNDI4MTcxNTEwWhcNMjUwNTA1MTcxNTEwWjAYMRYwFAYD VQQDEw02ODBmYjc5ZS05NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wgxxmMXUuAwTckBOl6M9MkHhfRVDul32pV+ol8Sfh2B3Q+T+lPzEW3Ev2kO hIhiCm2HV9hjwilYHH7JxNxeVFLgaTUpI0b6665iWpf9QxkhdVgSRlw/uQcmXCR8 aX4Uc5vvHgQ9NXtSeWul7TRd4gs0eQThxyJLMoby0hflIH2CiT3woH7z9BdVqkvR zu9KiTJIxSla9VE2JwuBqXoIPkrTWSrTPcXIanphstVuB3zUa+rsqtMTwlSj0AV4 tvhgACgSC1UkCLka/FWXaxEwiM5EJrT+CuvJCOBMWyjs0bX1RQaOudLhWmBuPxAP V6NVUyNFTlqQ7lzgTMwuG/DSFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx2GoYw aRfl46d7vamFn3SEjb8FMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU2DvlEOnywZjNrHW4K7itKCyohZAfJsybR2cnS9ogsUeUwucNGzCT RfnsHLQrSrmuhhcDw+CRacVuSHGNX7DsntM/MAPLuoCnXXVh+RLP4Gne0cBFiLND YUspvDJLd7yIp0siETDKSPEU7dndP/L0xgNY+LdtqD68OUJzyrqkFpl2oSmII25Z JF2OnWpQLOmIFSmvtmm7LFWo/YPDxeXP29XeHk8KcRWRAualsFFlYhnQp9NQMEWG nhfKt3Pnvq2HnL/RMvaQU1hyuvaLqpEZQR4ATBm6McbIT5oWqYqufF/OeGzmqIaJ gCyYPsp1wz42BSQmd/FSU4nmPBn50AUW -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:58 2025 by rpki-client on console.sobornost.net