$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json) Hash identifier: oNjUnrEke94nyVcrGZL1NWzIxdQgbT8yra0VhHEzuwY= Subject key identifier: DF:1C:4E:CE:BE:99:8C:64:87:90:85:96:80:27:7C:52:81:C5:FC:36 Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft Manifest number: A6 Signing time: Thu 24 Apr 2025 15:45:47 +0000 Manifest this update: Thu 24 Apr 2025 15:45:47 +0000 Manifest next update: Thu 01 May 2025 15:45:47 +0000 Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: CLObGZlhLKethfpN6FOThkP+dNNtDG0kxKT3Oq6LI04=) 2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: nEx36xMYEspoRTHpBzsjyglWKve6HGzaUV9gJlWDtWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Validity Not Before: Apr 24 15:45:47 2025 GMT Not After : May 1 15:45:47 2025 GMT Subject: CN=680a5cab-cfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:dc:69:11:e6:81:3f:fd:1d:04:a5:db:92: e0:8e:d6:61:59:88:f7:c7:74:c2:77:74:82:19:54: 88:73:36:84:fe:d4:f5:d5:de:d0:a4:78:0d:46:e6: 66:5f:5e:10:d2:ce:cd:da:43:28:d0:31:93:00:a3: 13:17:45:0f:ae:b1:fd:f5:a0:07:e8:72:6b:97:5a: 3d:3b:fd:14:09:ce:f0:16:62:3e:1d:06:6c:e3:21: 9f:44:85:c4:c4:f0:f6:2b:ec:6b:52:d8:0a:56:c5: f9:8a:39:7b:fc:20:af:00:11:ea:12:46:25:4d:70: 0f:fc:d5:ba:fa:0f:60:33:24:ec:3a:18:e9:02:d8: d5:e2:d8:08:0f:bb:f2:a5:4f:81:be:d7:06:fc:13: 54:78:3b:45:bd:00:ca:84:84:24:20:1e:e7:e6:2e: c4:7b:98:84:d2:85:39:9b:00:0d:4e:58:2d:aa:0d: 2d:77:ab:8b:d5:d9:f4:39:56:9e:1c:6e:17:c3:3f: 62:87:5e:02:29:92:9f:6c:b5:52:68:7b:c6:05:39: b9:b2:c4:54:14:c4:b9:7c:08:78:80:3a:ab:a5:60: 31:80:75:56:d0:c0:82:c1:c5:95:7b:92:70:fd:41: 7b:fb:79:66:4a:79:3d:77:8d:12:ba:19:0b:46:86: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1C:4E:CE:BE:99:8C:64:87:90:85:96:80:27:7C:52:81:C5:FC:36 X509v3 Authority Key Identifier: keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:d9:b3:35:a8:d5:de:9b:23:78:24:45:ee:b7:c6:ab:9e:1f: e9:20:1f:8b:dc:72:48:81:d6:da:2f:96:52:7b:49:b4:98:cd: 8a:cf:2b:91:5f:93:1b:56:7b:96:a8:0b:26:57:c7:70:be:16: c5:e0:49:ab:fe:ca:7e:57:63:fd:ab:c6:7a:12:e0:c5:52:dc: b2:f2:b5:33:11:0a:0a:86:fc:f6:3e:aa:f3:95:8f:35:0e:30: 2f:fd:aa:0a:99:c7:41:25:c8:74:08:c8:7a:91:02:f6:fc:42: 7a:be:fd:00:70:99:48:cb:6e:e2:86:29:30:eb:fd:0a:09:55: 97:b5:9a:58:fd:1e:ed:88:56:56:ac:eb:86:1c:ac:b4:1a:5e: 78:d3:eb:27:cf:a6:e5:18:10:83:5a:c4:2d:7b:8b:26:ff:dd: 65:f3:14:a8:ea:78:9c:60:2e:15:6f:29:55:c3:39:43:59:55: 86:cc:4a:03:2f:66:3a:36:31:cc:ee:32:a5:32:30:7b:38:a2: cf:ce:10:55:28:87:d4:82:d2:e3:8a:d9:9d:26:e4:03:c2:75: bb:2e:74:12:f3:dc:1d:66:7a:a8:5f:db:ce:d2:6d:07:60:c6: f4:04:c5:16:b4:84:e5:96:c2:d6:00:9b:21:01:26:f4:90:07: b9:c4:20:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKDMwNjcwRjYxQjdFNTBFMEIwQjg4RTcyNTFERTg3ODRD MDNDOUU0NjIwHhcNMjUwNDI0MTU0NTQ3WhcNMjUwNTAxMTU0NTQ3WjAYMRYwFAYD VQQDEw02ODBhNWNhYi1jZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNzcaRHmgT/9HQSl25LgjtZhWYj3x3TCd3SCGVSIczaE/tT11d7QpHgNRuZm X14Q0s7N2kMo0DGTAKMTF0UPrrH99aAH6HJrl1o9O/0UCc7wFmI+HQZs4yGfRIXE xPD2K+xrUtgKVsX5ijl7/CCvABHqEkYlTXAP/NW6+g9gMyTsOhjpAtjV4tgID7vy pU+BvtcG/BNUeDtFvQDKhIQkIB7n5i7Ee5iE0oU5mwANTlgtqg0td6uL1dn0OVae HG4Xwz9ih14CKZKfbLVSaHvGBTm5ssRUFMS5fAh4gDqrpWAxgHVW0MCCwcWVe5Jw /UF7+3lmSnk9d40SuhkLRobBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8cTs6+ mYxkh5CFloAnfFKBxfw2MB8GA1UdIwQYMBaAFDBnD2G35Q4LC4jnJR3oeEwDyeRi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy8wODJBODlGMDJB MjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERnc0xpT2NsSGVoNFRBUEo1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERn c0xpT2NsSGVoNFRBUEo1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM2bM1qNXemyN4JEXut8arnh/pIB+L3HJIgdbaL5ZSe0m0mM2KzyuR X5MbVnuWqAsmV8dwvhbF4Emr/sp+V2P9q8Z6EuDFUtyy8rUzEQoKhvz2PqrzlY81 DjAv/aoKmcdBJch0CMh6kQL2/EJ6vv0AcJlIy27ihikw6/0KCVWXtZpY/R7tiFZW rOuGHKy0Gl540+snz6blGBCDWsQte4sm/91l8xSo6nicYC4VbylVwzlDWVWGzEoD L2Y6NjHM7jKlMjB7OKLPzhBVKIfUgtLjitmdJuQDwnW7LnQS89wdZnqoX9vO0m0H YMb0BMUWtITllsLWAJshASb0kAe5xCBd -----END CERTIFICATE-----Generated at Thu Apr 24 18:09:23 2025 by rpki-client on console.sobornost.net