$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json) Hash identifier: G5cbeVCEfSSj1QRWiqO7g8Vislwrixy2xclOtISKyiA= Subject key identifier: 9E:EC:9E:18:57:27:95:3D:62:EE:EF:74:E9:D6:C5:A4:78:7C:45:12 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft Manifest number: 0BDD Signing time: Mon 28 Apr 2025 19:12:11 +0000 Manifest this update: Mon 28 Apr 2025 19:12:11 +0000 Manifest next update: Mon 05 May 2025 19:12:11 +0000 Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: ffauUT9XAZlFwT9c6THHpQ/hWAG76Yg57lVGRqhhqbc=) 2: 39F4FA3EC28011EFA15F7983C4F9AE02.roa (hash: Tv0EkNRvl6HwjRZU1kGmTPF818bqvfwzUYMD5mrfPL8=) 3: 38717B38C28011EFA15F7983C4F9AE02.roa (hash: 5iv6gdKQPAZFSlAANGZthkjck4esnk4Jjld1SsnV+1w=) 4: 10BAC44C646511EFBC52E778C4F9AE02.roa (hash: Z67/J9vff1oW6NI34pKliaQWv/9nuKIHlmULd9ZQaKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: Apr 28 19:12:11 2025 GMT Not After : May 5 19:12:11 2025 GMT Subject: CN=680fd30b-8c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:ae:05:45:76:3c:b9:9b:65:d7:f3:78:7c: 98:8f:43:21:1b:55:8a:04:bb:75:6a:f5:7e:c9:d6: 39:84:fd:af:96:04:37:b7:7f:99:e0:a9:70:64:26: 74:10:b8:2b:5c:66:7e:18:8b:b7:dc:ef:11:29:19: a9:0c:46:59:97:7b:cc:2f:4b:3d:3d:74:4f:a7:cb: f9:9e:82:41:60:a9:c3:c2:0a:1f:30:19:72:90:1c: 21:12:b9:3f:7a:09:10:2f:a1:d4:40:3f:5a:d3:e4: d3:c5:ce:1d:a4:a5:13:e4:a4:e0:77:20:44:a4:e2: 9b:c9:4a:b7:aa:42:18:f2:9d:c6:99:eb:82:ba:fe: 23:9f:1b:ab:2c:1f:9f:40:af:f7:4e:a3:9f:6e:33: 40:ca:03:d0:bf:40:18:d2:52:f3:ce:3e:82:74:23: a2:f1:ac:79:5f:6a:9c:3a:ba:9c:4a:db:77:55:11: 57:74:30:3b:89:83:64:db:f5:c7:b9:7a:db:8d:89: 8d:ab:c2:b9:ba:e0:71:e6:3f:e1:51:56:54:02:0a: 86:06:fb:18:e5:47:7c:b6:d4:c3:ea:34:6e:3d:bb: 08:1c:0d:6d:5f:92:79:fc:df:c4:90:7b:4b:e2:7f: ce:47:a8:2b:a6:a4:85:6e:f5:cc:15:16:45:d1:df: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:9E:18:57:27:95:3D:62:EE:EF:74:E9:D6:C5:A4:78:7C:45:12 X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:a4:dd:48:f3:a9:4f:2f:e9:97:95:d2:1c:ae:4e:2c:fd: c3:69:16:7f:61:24:94:60:ac:00:3e:b5:18:43:ad:ef:da:d7: f3:2a:3f:20:04:20:f2:b6:31:54:cd:d1:74:e9:36:47:e1:7e: 15:fc:4f:c9:1b:d0:33:ec:d9:9e:25:3b:73:4f:f4:d3:73:a1: 1f:0d:43:f4:de:db:16:f2:a5:7d:ad:41:e3:6d:43:1e:d2:3a: 72:4e:0f:82:6b:ed:3e:1e:79:a8:cf:16:f5:26:c6:bc:0f:ca: d1:b3:95:ce:12:7d:10:d2:35:8e:b2:0d:ab:f9:ac:a4:06:7d: dc:16:b6:96:8d:bf:19:76:df:86:ce:bd:b8:0e:ee:fe:65:f6: c7:41:a0:8b:08:06:dc:d1:4b:24:10:23:02:6c:83:96:e2:15: 5f:4f:9d:5b:b5:3e:7d:af:54:56:5b:3b:66:79:91:30:e4:56: 34:6e:2a:1c:6f:09:de:41:ae:f3:64:15:d1:4c:b7:2f:7d:eb: 54:83:01:79:33:02:56:12:f7:78:40:dc:d5:c5:5c:69:3a:90: ed:d0:8d:36:ea:97:1c:2d:c6:86:a5:ff:17:cb:e5:a4:d3:b2: 64:8a:2d:f0:0f:d0:f0:50:3a:85:de:4a:9f:61:19:85:33:df: 6b:2f:1f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjUwNDI4MTkxMjExWhcNMjUwNTA1MTkxMjExWjAYMRYwFAYD VQQDEw02ODBmZDMwYi04YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY+uBUV2PLmbZdfzeHyYj0MhG1WKBLt1avV+ydY5hP2vlgQ3t3+Z4KlwZCZ0 ELgrXGZ+GIu33O8RKRmpDEZZl3vML0s9PXRPp8v5noJBYKnDwgofMBlykBwhErk/ egkQL6HUQD9a0+TTxc4dpKUT5KTgdyBEpOKbyUq3qkIY8p3GmeuCuv4jnxurLB+f QK/3TqOfbjNAygPQv0AY0lLzzj6CdCOi8ax5X2qcOrqcStt3VRFXdDA7iYNk2/XH uXrbjYmNq8K5uuBx5j/hUVZUAgqGBvsY5Ud8ttTD6jRuPbsIHA1tX5J5/N/EkHtL 4n/OR6grpqSFbvXMFRZF0d/CDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7snhhX J5U9Yu7vdOnWxaR4fEUSMB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkRDOC82Njk3NjNGMDE4RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1X VkFjUmtMNjg4TGpaLWhyMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+rqTdSPOpTy/pl5XSHK5OLP3DaRZ/YSSUYKwAPrUYQ63v2tfzKj8g BCDytjFUzdF06TZH4X4V/E/JG9Az7NmeJTtzT/TTc6EfDUP03tsW8qV9rUHjbUMe 0jpyTg+Ca+0+Hnmozxb1Jsa8D8rRs5XOEn0Q0jWOsg2r+aykBn3cFraWjb8Zdt+G zr24Du7+ZfbHQaCLCAbc0UskECMCbIOW4hVfT51btT59r1RWWztmeZEw5FY0bioc bwneQa7zZBXRTLcvfetUgwF5MwJWEvd4QNzVxVxpOpDt0I026pccLcaGpf8Xy+Wk 07Jkii3wD9DwUDqF3kqfYRmFM99rLx8z -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:55 2025 by rpki-client on console.sobornost.net