$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: 1+l1Zf0C1wUMlQ6CvA9Q78fDNOrMqfqknETxDkRPqA8= Subject key identifier: 77:13:18:72:4C:0B:28:4B:C1:0F:AE:23:EA:68:9E:0E:F0:61:E7:EB Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0D20 Signing time: Sat 26 Apr 2025 17:55:31 +0000 Manifest this update: Sat 26 Apr 2025 17:55:30 +0000 Manifest next update: Sat 03 May 2025 17:55:30 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: Ae/wzHq2nnnjSz3oJMZqthcgWZaPv5iYZwPQErDNaRI=) 2: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: tsWCAJh3hDUuF0jt3mDhnNo48pJ1cTxWnbkE+ZQXBxw=) 3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: BThAKf2icEZsZqpXgnFl9VpqvpRKYGs7e0515Blb0yw=) 4: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: zPumQuSa3V5Do5kU4HAy8QEzfyGrDVZPMvaKh+jhJxk=) 5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: zpETj3vTU+4JGJFNH2bJangxDJpoV//my0UXRjaLeMk=) 6: 4CD3C8DC14D011EA93366A85C4F9AE02.roa (hash: JwI9xru2SKVmPRR5P37ZWy6F3njGvB5RFaYgtRHbNFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Apr 26 17:55:30 2025 GMT Not After : May 3 17:55:30 2025 GMT Subject: CN=680d1e13-aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:8d:2d:13:41:18:80:7d:90:83:76:1c:a0: 0e:04:42:52:c0:14:da:ca:56:b1:7c:69:72:fc:c9: f5:0f:ea:97:1e:91:08:c6:2f:6a:1d:ee:a3:6c:6e: cf:c5:63:b1:5d:c0:fb:d4:84:76:93:fe:a7:74:89: cd:0a:f1:f9:8f:0f:69:8a:f5:1f:15:50:b2:3c:04: 1b:70:32:18:f6:2e:95:de:f6:14:c2:c8:b1:bf:87: 55:d9:7b:16:07:73:82:01:0c:40:64:53:df:85:fe: ae:d2:7d:f5:5c:0d:09:a1:e6:f7:34:44:a1:33:73: d1:cb:b8:a0:9a:c2:c4:f4:13:d8:3d:7d:5d:0d:52: b3:6e:29:55:14:03:65:54:61:45:0e:30:e1:bd:0d: a7:40:31:43:b0:17:e7:c3:71:2c:31:71:69:72:2d: 44:d3:c6:90:ab:d7:ab:1a:4c:89:24:3b:db:66:04: 36:36:71:35:2b:a4:2c:c0:fe:80:dd:49:1d:cf:42: d2:5d:12:3b:61:88:1a:5f:49:f2:f8:37:df:b0:56: 02:84:30:79:1b:67:9d:d3:7e:6e:8f:f6:91:5e:96: 01:b6:b3:df:2e:69:e5:96:16:9a:8b:4a:87:89:39: 24:5b:f7:a9:3f:05:13:08:ff:7d:20:90:2f:f1:24: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:18:72:4C:0B:28:4B:C1:0F:AE:23:EA:68:9E:0E:F0:61:E7:EB X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b1:45:f5:20:1b:9e:58:61:22:72:57:bd:e1:35:a7:ba:5e: 91:88:08:e7:04:6f:86:32:34:be:c6:16:44:83:87:0e:2e:c4: 09:68:6f:ca:99:ab:4b:ce:3e:6c:e0:81:ba:c7:87:a9:ff:67: 43:db:15:6a:5c:5b:04:ee:42:fb:28:f3:0f:3a:c5:28:b0:4d: b4:f8:d4:88:8a:a6:74:58:73:39:bd:fc:5a:75:52:d5:7c:04: 33:49:ba:23:4a:d9:b8:97:bb:72:0b:78:81:c5:52:52:44:57: d7:b8:aa:b4:50:ed:24:43:8e:4d:77:1f:82:6b:45:32:00:65: d8:f1:73:e6:6d:c2:5b:ae:b0:4b:5d:8f:8a:b9:c5:f0:4b:ad: fe:7f:b8:2d:64:35:53:a8:7b:f8:68:a3:c1:fe:76:e5:27:0c: 82:58:a6:a8:75:f3:60:11:5e:81:a7:dd:fe:08:a0:22:b2:ef: 50:8a:89:23:34:2f:0a:96:e6:27:7b:a7:0c:85:22:d6:64:23: 26:90:71:74:f2:3d:0f:9d:26:4b:17:25:f1:46:40:18:60:1c: f2:e5:c4:05:39:9a:ab:8f:40:68:1d:01:f5:1a:2c:9f:ce:30: 86:36:6c:32:78:e7:66:ab:20:4f:7d:b9:85:2b:f9:70:e5:9f: 8d:cd:3d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjUwNDI2MTc1NTMwWhcNMjUwNTAzMTc1NTMwWjAYMRYwFAYD VQQDEw02ODBkMWUxMy1hYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSCNLRNBGIB9kIN2HKAOBEJSwBTaylaxfGly/Mn1D+qXHpEIxi9qHe6jbG7P xWOxXcD71IR2k/6ndInNCvH5jw9pivUfFVCyPAQbcDIY9i6V3vYUwsixv4dV2XsW B3OCAQxAZFPfhf6u0n31XA0Joeb3NEShM3PRy7igmsLE9BPYPX1dDVKzbilVFANl VGFFDjDhvQ2nQDFDsBfnw3EsMXFpci1E08aQq9erGkyJJDvbZgQ2NnE1K6QswP6A 3Ukdz0LSXRI7YYgaX0ny+DffsFYChDB5G2ed035uj/aRXpYBtrPfLmnllhaai0qH iTkkW/epPwUTCP99IJAv8SQw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcTGHJM CyhLwQ+uI+pong7wYefrMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEsUX1IBueWGEicle94TWnul6RiAjnBG+GMjS+xhZEg4cOLsQJaG/K matLzj5s4IG6x4ep/2dD2xVqXFsE7kL7KPMPOsUosE20+NSIiqZ0WHM5vfxadVLV fAQzSbojStm4l7tyC3iBxVJSRFfXuKq0UO0kQ45Ndx+Ca0UyAGXY8XPmbcJbrrBL XY+KucXwS63+f7gtZDVTqHv4aKPB/nblJwyCWKaodfNgEV6Bp93+CKAisu9Qiokj NC8KluYne6cMhSLWZCMmkHF08j0PnSZLFyXxRkAYYBzy5cQFOZqrj0BoHQH1Giyf zjCGNmwyeOdmqyBPfbmFK/lw5Z+NzT09 -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:02 2025 by rpki-client on console.sobornost.net