$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: FKYiF8Mlog0eNhidWRlo00oUvrUtvz6dCcX1reKGJXo= Subject key identifier: C0:1B:D4:C2:A3:40:8E:15:6B:D2:D7:0A:58:FA:95:F6:9C:81:F8:AB Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0E6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0E5C Signing time: Sat 26 Apr 2025 17:37:46 +0000 Manifest this update: Sat 26 Apr 2025 17:37:46 +0000 Manifest next update: Sat 03 May 2025 17:37:46 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: 2B7ByoxCQxiXrGlLrpJkhNCZP3WrLhQlW9U47q0M7gQ=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Apr 26 17:37:46 2025 GMT Not After : May 3 17:37:46 2025 GMT Subject: CN=680d19ea-dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:18:fe:14:67:bc:74:2a:ae:b7:e7:be:c1: a7:ff:42:17:c7:8e:6c:41:9f:ff:aa:ee:7e:86:bf: 90:ae:14:31:f8:16:a8:94:53:b5:bb:ec:6a:94:b7: c6:a2:ac:22:bf:47:0b:af:6f:9b:ce:24:32:79:f4: 6c:5f:04:89:ba:4c:c8:42:15:d1:8c:0d:1c:e4:b0: d0:98:f2:32:a6:85:13:57:7c:65:b0:82:fc:18:17: 20:1e:d8:b9:20:6d:4e:42:2f:e2:6a:6a:24:d1:c2: e9:c8:f5:ea:67:be:56:91:ae:16:15:f0:0c:a4:56: 4c:c8:49:f6:08:27:ca:5a:d7:82:ec:da:a1:9a:c9: 23:33:23:55:82:af:89:e7:bc:6f:3a:a3:ee:08:11: f9:95:a1:ca:1f:81:85:c1:ef:a0:58:1a:9a:bb:d0: 19:e9:4e:73:f9:eb:26:50:d6:b4:21:2b:3b:16:22: e3:c9:49:ac:bc:85:b3:8f:58:6e:fe:e7:00:fb:07: c6:b5:82:f5:5b:f5:b2:97:39:1e:92:b2:79:84:8c: 53:f5:95:f8:1c:e5:f3:8f:3e:43:9e:68:c7:2e:9c: 4b:f8:5b:a0:94:dd:81:e8:da:f9:24:fb:bb:39:03: 66:87:d2:aa:a5:ff:77:d1:e7:bb:6d:6a:2a:92:b8: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:D4:C2:A3:40:8E:15:6B:D2:D7:0A:58:FA:95:F6:9C:81:F8:AB X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:dd:76:05:8c:be:54:0e:b8:97:7e:a2:ea:86:df:41:42: 57:ed:86:45:08:51:16:51:71:aa:8e:99:b1:bb:48:04:30:50: 85:b3:48:2b:e4:4b:55:8c:4a:74:94:23:0d:11:fc:45:e8:bf: 28:13:6e:10:4d:f0:01:13:61:ea:df:e0:a8:71:9c:f7:92:83: 73:9a:ff:d3:d3:9f:77:90:45:45:02:b4:6a:bf:dd:9f:fc:f1: 57:c7:2b:c8:59:cc:b5:98:f3:db:b1:e3:5c:39:be:54:d2:f2: 8e:95:03:e1:e5:71:f5:27:15:2c:c5:a3:da:03:8a:3d:85:d0: 64:a5:7c:14:47:17:29:09:65:7c:f8:07:84:26:2a:a4:6d:9b: 81:fe:17:48:00:b9:07:78:31:f1:3e:4f:50:cc:00:11:ab:86: fd:7e:bd:b6:3c:bc:38:f7:ed:a1:0c:9f:e3:1d:b9:f6:93:c3: 2a:0f:e1:48:ed:4e:e4:6f:3f:64:c5:41:d4:47:05:ce:de:52: 19:13:00:03:6e:1e:02:85:08:1d:d5:07:1f:dd:b3:bf:43:12: cf:84:de:68:19:7b:36:1c:16:b6:91:36:58:a2:99:f5:e0:a6: 54:8a:20:b2:c7:e5:6e:29:1f:3c:6c:3b:80:d0:61:ee:83:70: 31:f4:69:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUwNDI2MTczNzQ2WhcNMjUwNTAzMTczNzQ2WjAYMRYwFAYD VQQDEw02ODBkMTllYS1kYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDcY/hRnvHQqrrfnvsGn/0IXx45sQZ//qu5+hr+QrhQx+BaolFO1u+xqlLfG oqwiv0cLr2+bziQyefRsXwSJukzIQhXRjA0c5LDQmPIypoUTV3xlsIL8GBcgHti5 IG1OQi/iamok0cLpyPXqZ75Wka4WFfAMpFZMyEn2CCfKWteC7NqhmskjMyNVgq+J 57xvOqPuCBH5laHKH4GFwe+gWBqau9AZ6U5z+esmUNa0ISs7FiLjyUmsvIWzj1hu /ucA+wfGtYL1W/WylzkekrJ5hIxT9ZX4HOXzjz5DnmjHLpxL+FuglN2B6Nr5JPu7 OQNmh9Kqpf930ee7bWoqkrjL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAb1MKj QI4Va9LXClj6lfacgfirMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAald12BYy+VA64l36i6obfQUJX7YZFCFEWUXGqjpmxu0gEMFCFs0gr 5EtVjEp0lCMNEfxF6L8oE24QTfABE2Hq3+CocZz3koNzmv/T0593kEVFArRqv92f /PFXxyvIWcy1mPPbseNcOb5U0vKOlQPh5XH1JxUsxaPaA4o9hdBkpXwURxcpCWV8 +AeEJiqkbZuB/hdIALkHeDHxPk9QzAARq4b9fr22PLw49+2hDJ/jHbn2k8MqD+FI 7U7kbz9kxUHURwXO3lIZEwADbh4ChQgd1Qcf3bO/QxLPhN5oGXs2HBa2kTZYopn1 4KZUiiCyx+VuKR88bDuA0GHug3Ax9GmV -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:01 2025 by rpki-client on console.sobornost.net