$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: Ss0WPX+X/wqn8c3R5H4lPUHK9upaxK/VXRvka7Y8+y4= Subject key identifier: 32:C6:94:B9:5F:2C:84:4B:27:D4:3D:A3:87:CB:4E:F5:9E:EC:97:94 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 031F Signing time: Sun 27 Apr 2025 00:47:34 +0000 Manifest this update: Sun 27 Apr 2025 00:47:33 +0000 Manifest next update: Sun 04 May 2025 00:47:33 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: UzadJkU5QV9wPCJogicE5aybC8QSJoL2DZFL7+pV91k=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: YDV59vkDGMUjv69JwCXS0TevAXxNgXIE57WFOFZhJBo=) 3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Apr 27 00:47:33 2025 GMT Not After : May 4 00:47:33 2025 GMT Subject: CN=680d7ea5-42b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:31:03:e2:7f:93:45:b5:33:3b:72:11:af: e7:93:e8:56:65:b7:1c:da:12:8d:0c:46:86:89:69: bf:94:a6:f1:c9:1b:5b:d9:a2:4c:71:3d:d6:61:e5: 98:8a:0e:d0:c7:d0:b9:21:71:6c:d6:bf:7f:6b:a9: 88:37:e8:a1:28:80:24:ac:56:a0:70:1b:88:63:71: 4a:6f:9a:15:2d:ca:16:c3:ef:53:c6:89:da:d8:c3: 30:af:37:93:f6:d0:f9:c7:16:c0:bf:de:ac:68:a2: 07:99:6f:fa:aa:6b:00:38:d2:11:28:ac:63:2a:67: 7d:88:82:6c:28:46:a1:5f:15:c2:16:0c:ff:88:93: a9:dc:f7:4e:be:06:3c:a6:b3:e3:dd:52:07:3b:f1: 8b:c1:55:b3:67:42:7f:90:8a:28:e0:d4:e0:d8:a3: 0d:1d:51:f3:e5:99:95:b0:7f:a3:58:3d:0c:81:22: 6a:52:bb:73:4c:cb:b8:ec:20:9f:8d:4d:59:34:b4: b0:6d:36:a4:02:e5:01:94:48:03:55:da:50:c0:3f: 82:c7:84:19:55:f0:5d:22:d3:14:2b:ef:4c:60:26: 49:8f:65:b7:a7:5d:2a:26:cf:31:d7:c3:10:61:4f: 2e:d5:4c:a4:b1:e2:7d:8f:e7:f9:34:e1:d0:37:6c: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C6:94:B9:5F:2C:84:4B:27:D4:3D:A3:87:CB:4E:F5:9E:EC:97:94 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:26:8c:b4:c1:f7:cb:88:1d:9b:90:31:ae:ac:10:b5:93:b6: 01:2c:fd:9b:05:d0:41:82:fa:af:0a:c0:08:d8:cc:79:03:fa: 75:81:87:47:e0:fa:15:57:a1:07:5f:db:8c:3f:b3:ba:65:f0: ce:6c:1c:94:24:af:be:98:21:05:11:7b:5f:78:24:76:ff:db: 1e:64:07:7f:b6:35:4f:fb:43:76:a4:dc:43:6a:53:8a:bd:e6: 5a:cd:99:12:7c:91:96:54:6d:37:05:8c:cd:e9:36:52:bf:2a: 3a:73:8f:fb:15:8c:9d:9a:34:7c:c2:98:2c:65:32:61:13:56: 78:7a:4f:a6:ea:4d:93:8d:b8:6e:ad:49:4d:bd:21:24:33:f0: 43:ab:5d:32:28:90:94:9b:f9:3c:9f:fc:ee:98:77:83:1a:36: 72:d9:c7:13:ec:0f:8e:37:d9:74:89:0a:18:ec:40:4a:c3:ac: bd:d6:ea:4e:5c:04:f4:78:b8:60:92:a0:40:4d:11:f8:55:e9: 98:94:62:70:04:bc:99:91:d2:da:1c:34:f4:57:ee:43:5e:4f: 20:63:7a:b4:b0:ee:3b:3e:42:4e:e8:68:c2:cf:e3:c8:0b:37: f0:c1:e2:9f:13:0f:01:35:8c:fa:bf:15:f3:1d:15:2d:ce:91: 71:8c:75:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjUwNDI3MDA0NzMzWhcNMjUwNTA0MDA0NzMzWjAYMRYwFAYD VQQDEw02ODBkN2VhNS00MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD8xA+J/k0W1MztyEa/nk+hWZbcc2hKNDEaGiWm/lKbxyRtb2aJMcT3WYeWY ig7Qx9C5IXFs1r9/a6mIN+ihKIAkrFagcBuIY3FKb5oVLcoWw+9Txona2MMwrzeT 9tD5xxbAv96saKIHmW/6qmsAONIRKKxjKmd9iIJsKEahXxXCFgz/iJOp3PdOvgY8 prPj3VIHO/GLwVWzZ0J/kIoo4NTg2KMNHVHz5ZmVsH+jWD0MgSJqUrtzTMu47CCf jU1ZNLSwbTakAuUBlEgDVdpQwD+Cx4QZVfBdItMUK+9MYCZJj2W3p10qJs8x18MQ YU8u1UykseJ9j+f5NOHQN2x32wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLGlLlf LIRLJ9Q9o4fLTvWe7JeUMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Joy0wffLiB2bkDGurBC1k7YBLP2bBdBBgvqvCsAI2Mx5A/p1gYdH 4PoVV6EHX9uMP7O6ZfDObByUJK++mCEFEXtfeCR2/9seZAd/tjVP+0N2pNxDalOK veZazZkSfJGWVG03BYzN6TZSvyo6c4/7FYydmjR8wpgsZTJhE1Z4ek+m6k2Tjbhu rUlNvSEkM/BDq10yKJCUm/k8n/zumHeDGjZy2ccT7A+ON9l0iQoY7EBKw6y91upO XAT0eLhgkqBATRH4VemYlGJwBLyZkdLaHDT0V+5DXk8gY3q0sO47PkJO6GjCz+PI CzfwweKfEw8BNYz6vxXzHRUtzpFxjHX8 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net