$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: 7A8x8iT6K3RYVYXE0GfVgSwbl6R4kOU9XLg0Au3ijVE= Subject key identifier: 62:6E:2A:DD:F0:FF:EB:6B:FE:41:22:9A:84:45:74:FC:D4:E7:39:CF Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 0131 Signing time: Sun 27 Apr 2025 03:33:26 +0000 Manifest this update: Sun 27 Apr 2025 03:33:25 +0000 Manifest next update: Sun 04 May 2025 03:33:25 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: h0ElwtzdKFXukKUTbnxBsadRQh0RP5J/FYQHJnlyRP0=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: HE0CwiBUoR42Ac8HkzfJLJ/ETIx9kfwRBCLdGKiPhXc=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: OKWZlml7xUzPeJ1MZszk7oG4XbhbR85w9J1Q8mg/N3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Apr 27 03:33:25 2025 GMT Not After : May 4 03:33:25 2025 GMT Subject: CN=680da585-0ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:84:a1:06:25:42:8b:4f:d2:35:6a:5f:2a: 77:5a:fc:99:dd:a5:f4:c9:f0:9a:d3:9b:be:ec:4f: c3:35:61:87:a9:26:52:b1:e3:0a:b6:69:16:b5:e4: 98:8a:03:d3:e9:ea:39:e9:8c:2c:e8:2f:32:95:0a: da:0c:0e:0e:51:01:b4:16:1f:7f:44:97:36:12:e7: 61:8b:6d:b0:4e:0b:69:4e:70:56:d3:dd:25:e9:55: c2:6a:47:4f:19:1b:38:e6:48:9c:d2:01:65:3e:fc: c4:0d:a7:aa:8f:4c:f2:cb:1b:e0:fa:55:98:fb:85: c0:d7:ff:5c:70:79:3f:e2:bb:c7:fa:95:0a:65:79: 61:08:90:39:67:25:79:2a:85:2f:b6:46:01:7b:63: 69:60:57:e6:3b:0e:ca:af:d5:c4:86:93:42:28:85: fc:2e:98:60:27:19:ae:f0:90:bd:20:36:6d:69:31: e2:e0:a5:42:d4:d0:08:6e:4c:f6:0b:ce:a5:af:95: 09:e5:76:ea:63:76:b6:10:e3:27:cb:d2:73:36:75: 2e:18:1f:3a:45:04:95:c2:45:b8:e1:72:80:f7:cc: c5:bc:41:2e:10:d2:ca:40:c3:c4:07:97:6e:9a:90: 29:44:f8:ce:b5:7e:ae:1c:a3:a5:7c:3d:01:17:df: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:2A:DD:F0:FF:EB:6B:FE:41:22:9A:84:45:74:FC:D4:E7:39:CF X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:72:0a:18:1a:85:ed:77:2b:79:15:82:db:c7:24:f1:e5:23: 49:ce:c4:61:21:58:b0:5c:d9:13:35:ad:6b:69:cb:31:7d:28: 64:68:e5:a4:99:c4:e3:0e:82:5b:51:6b:06:6d:a3:30:4d:25: 53:d6:7d:bb:57:b5:a2:a7:83:5f:25:2b:1e:41:25:c3:e8:43: 4a:40:f2:f8:90:3d:6a:79:2f:9e:ac:8b:21:93:5d:e8:43:c4: 7f:23:ff:bc:ab:df:d5:6a:55:44:30:43:e0:02:6b:ff:83:04: b1:8c:2a:42:db:1d:95:19:a5:1a:06:1e:3a:14:c5:c1:ee:2a: 97:71:40:00:31:25:12:90:9a:73:8f:b5:fd:b4:6e:60:da:10: e1:09:73:69:4b:83:c8:83:a7:f0:8b:1d:2f:c1:46:ef:32:a2: 24:60:c6:07:69:37:9d:dc:a2:3d:9d:6e:77:5c:95:dc:14:b9: 1d:66:22:e9:81:84:d0:fe:9f:64:79:be:7f:c5:b0:cf:85:cf: d2:e8:86:5e:7b:28:e2:4c:9a:41:6a:62:3f:9a:a9:1e:ea:8d: aa:a4:7e:9a:6c:f3:c4:67:fa:c6:c7:9f:d6:02:36:9d:36:1d: 63:52:80:9a:73:0c:70:ec:1f:3d:ee:27:96:64:b4:00:30:bb: c3:5d:c4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNDI3MDMzMzI1WhcNMjUwNTA0MDMzMzI1WjAYMRYwFAYD VQQDEw02ODBkYTU4NS0wYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xGEoQYlQotP0jVqXyp3WvyZ3aX0yfCa05u+7E/DNWGHqSZSseMKtmkWteSY igPT6eo56Yws6C8ylQraDA4OUQG0Fh9/RJc2Eudhi22wTgtpTnBW090l6VXCakdP GRs45kic0gFlPvzEDaeqj0zyyxvg+lWY+4XA1/9ccHk/4rvH+pUKZXlhCJA5ZyV5 KoUvtkYBe2NpYFfmOw7Kr9XEhpNCKIX8LphgJxmu8JC9IDZtaTHi4KVC1NAIbkz2 C86lr5UJ5XbqY3a2EOMny9JzNnUuGB86RQSVwkW44XKA98zFvEEuENLKQMPEB5du mpApRPjOtX6uHKOlfD0BF98SnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJuKt3w /+tr/kEimoRFdPzU5znPMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRcgoYGoXtdyt5FYLbxyTx5SNJzsRhIViwXNkTNa1racsxfShkaOWk mcTjDoJbUWsGbaMwTSVT1n27V7Wip4NfJSseQSXD6ENKQPL4kD1qeS+erIshk13o Q8R/I/+8q9/ValVEMEPgAmv/gwSxjCpC2x2VGaUaBh46FMXB7iqXcUAAMSUSkJpz j7X9tG5g2hDhCXNpS4PIg6fwix0vwUbvMqIkYMYHaTed3KI9nW53XJXcFLkdZiLp gYTQ/p9keb5/xbDPhc/S6IZeeyjiTJpBamI/mqke6o2qpH6abPPEZ/rGx5/WAjad Nh1jUoCacwxw7B897ieWZLQAMLvDXcQP -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net