$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: 6A6RruaqzvbJmzEr5M6gzpzcRBXELAXhT5msKuo4eZ4= Subject key identifier: 7C:FE:B1:F4:F4:9B:89:AF:1E:18:B7:D6:AA:4D:45:91:40:EA:29:5E Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 2F Signing time: Sun 27 Apr 2025 06:34:10 +0000 Manifest this update: Sun 27 Apr 2025 06:34:10 +0000 Manifest next update: Sun 04 May 2025 06:34:10 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: WhP8M9UcKF4p9tZGCCwlBzbLP84gDdXa6lMxgV0+tmw=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Apr 27 06:34:10 2025 GMT Not After : May 4 06:34:10 2025 GMT Subject: CN=680dcfe2-ab9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:29:b1:68:40:67:24:6a:0e:cf:ba:da:8d: a1:bd:47:95:bb:2e:6e:6e:f6:f5:9f:7c:2a:8a:52: 61:ff:e3:39:22:30:0e:78:1a:17:00:72:b7:17:0e: 93:02:86:19:f4:8f:e4:58:21:b9:c6:50:72:c2:37: 5d:76:80:a6:d6:6f:a8:71:98:c6:50:5a:7f:22:44: ee:cc:d2:1d:89:25:15:24:97:96:27:00:c5:81:51: 29:2d:9e:a0:fb:b5:18:0f:81:8e:66:fc:bb:c8:e4: 3c:90:92:1c:c3:b4:f9:b6:96:73:c1:31:19:c3:ad: cb:26:8b:6d:79:0d:a1:2a:80:a1:8a:62:d8:05:a6: 51:13:85:9c:0c:c6:b1:4a:e7:93:bf:7b:c5:93:a9: 3c:78:e0:2a:92:03:79:0c:4a:cf:a6:54:ac:c3:95: 99:83:84:f9:59:06:a4:38:30:9c:04:8c:7f:41:24: e4:6d:5d:e8:60:da:88:c3:29:60:3e:a0:86:68:ac: 74:28:45:5c:55:ca:f0:15:7f:f9:a5:8c:dd:6b:78: 31:69:68:dc:3f:04:2b:6e:c2:1c:cd:f7:82:58:89: 7f:a0:09:27:1c:c3:18:4e:e5:99:24:b2:4c:1a:8d: 00:aa:30:8a:21:1d:9b:c9:49:3f:d7:82:f1:d5:3f: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FE:B1:F4:F4:9B:89:AF:1E:18:B7:D6:AA:4D:45:91:40:EA:29:5E X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:df:be:2a:30:ba:5c:d0:f0:39:66:0b:eb:2a:02:4b:23:be: 39:24:bb:7e:7a:98:90:77:a6:ad:68:9b:8f:d1:0e:9a:b2:9d: b4:15:98:14:f7:c9:c8:f5:bd:6f:e5:78:3a:71:3c:0c:46:a9: ad:8b:f9:3b:59:9b:ad:82:c8:5b:0f:37:ca:bf:12:59:8e:e7: 03:77:0a:f1:a4:de:07:e8:d0:2f:ba:e6:55:bf:be:88:83:9f: 70:ff:d5:48:00:49:88:68:52:9e:78:72:9b:bf:d1:1b:6e:6b: a1:ce:da:15:b6:c4:be:79:a6:92:91:62:a2:1b:e1:7a:f2:10: 73:9f:2f:1f:85:df:96:b4:9e:d1:a3:e3:f6:9c:2f:33:ea:4e: 65:a6:53:10:ef:e5:29:26:ef:0b:0f:03:b6:3c:cc:a5:fe:2a: e9:12:22:5b:3e:e4:9f:1b:aa:b8:b9:fa:50:70:c8:b5:5d:fa: e5:77:0b:92:fb:ba:46:a0:cc:85:44:d1:73:0b:ec:99:bd:8c: ec:c9:f8:1b:8c:04:e4:e3:27:bf:ac:e2:96:5b:3e:2f:ca:4f: 2a:26:5f:77:43:3e:5d:70:55:8a:a9:f4:1e:9a:6b:49:44:48: 71:00:4d:df:5b:8d:d9:1e:74:3f:60:32:d6:e2:d4:37:b4:83: ec:76:c3:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTA0MjcwNjM0MTBaFw0yNTA1MDQwNjM0MTBaMBgxFjAUBgNV BAMTDTY4MGRjZmUyLWFiOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBuSmxaEBnJGoOz7rajaG9R5W7Lm5u9vWffCqKUmH/4zkiMA54GhcAcrcXDpMC hhn0j+RYIbnGUHLCN112gKbWb6hxmMZQWn8iRO7M0h2JJRUkl5YnAMWBUSktnqD7 tRgPgY5m/LvI5DyQkhzDtPm2lnPBMRnDrcsmi215DaEqgKGKYtgFplEThZwMxrFK 55O/e8WTqTx44CqSA3kMSs+mVKzDlZmDhPlZBqQ4MJwEjH9BJORtXehg2ojDKWA+ oIZorHQoRVxVyvAVf/mljN1reDFpaNw/BCtuwhzN94JYiX+gCSccwxhO5Zkkskwa jQCqMIohHZvJST/XgvHVP2ABAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfP6x9PSb ia8eGLfWqk1FkUDqKV4wHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTfviowulzQ8DlmC+sqAksjvjkku356mJB3pq1om4/RDpqynbQVmBT3 ycj1vW/leDpxPAxGqa2L+TtZm62CyFsPN8q/ElmO5wN3CvGk3gfo0C+65lW/voiD n3D/1UgASYhoUp54cpu/0Rtua6HO2hW2xL55ppKRYqIb4XryEHOfLx+F35a0ntGj 4/acLzPqTmWmUxDv5Skm7wsPA7Y8zKX+KukSIls+5J8bqri5+lBwyLVd+uV3C5L7 ukagzIVE0XML7Jm9jOzJ+BuMBOTjJ7+s4pZbPi/KTyomX3dDPl1wVYqp9B6aa0lE SHEATd9bjdkedD9gMtbi1De0g+x2wxI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net