$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json) Hash identifier: o9zMTqfWsgPuSNzy2z/L15Ggf2tL8ON1r55edYmX1MM= Subject key identifier: 40:76:FE:92:31:93:B3:B4:8F:C0:D2:D4:AA:5C:58:02:83:E9:66:CD Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft Manifest number: 015E Signing time: Sun 27 Apr 2025 03:01:32 +0000 Manifest this update: Sun 27 Apr 2025 03:01:32 +0000 Manifest next update: Sun 04 May 2025 03:01:32 +0000 Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: GKFDBMz6hshL6hHw87W/ETMMbrfDkuZeGCXN2Ax4lXo=) 2: 7C9E449814B311EEB9CD302AC4F9AE02.roa (hash: JgXDvvb08AKpWtQFVgWoJSRrsvnpi7N5Npk5xtbR4bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Validity Not Before: Apr 27 03:01:32 2025 GMT Not After : May 4 03:01:32 2025 GMT Subject: CN=680d9e0c-2898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:2a:78:10:46:30:90:e1:8e:6d:16:19:15: 70:09:d6:45:c6:ca:47:3b:11:fd:07:2f:18:c3:30: 7e:96:1a:66:a7:0a:77:7d:e0:9b:d2:33:65:86:24: 85:09:ea:6b:07:18:de:8f:91:84:b6:13:7d:07:a0: 2c:35:c5:9e:36:82:3b:5a:c9:bf:d4:9a:95:b5:57: 36:5b:d0:82:51:fe:9f:0d:4c:34:9d:d2:0d:9a:1b: 40:c9:52:ed:06:c2:57:2b:a8:c8:c6:97:dd:8b:8f: 42:a8:26:97:66:30:bd:a5:69:7e:9d:ad:d5:13:50: 34:7e:11:bf:ac:04:d8:62:7c:9d:93:ea:bc:dd:c8: a1:ba:01:30:95:f9:65:43:a7:42:10:ad:ad:02:51: de:55:2e:27:73:f0:de:8a:48:88:e8:25:62:23:23: dd:73:dc:4c:65:c9:23:03:5c:22:cf:7f:ba:91:00: ec:56:1e:5b:17:92:38:85:bb:0f:16:f3:28:15:c3: 3e:86:f4:12:1a:1e:5a:0d:e3:bc:6e:fe:9d:ce:1b: 8d:5f:03:12:ed:de:f7:16:47:b2:4f:f7:2c:57:d4: 8e:09:fa:f7:71:40:9a:e1:4a:e6:81:53:dc:96:de: da:bc:f4:20:c1:0f:e4:31:db:a0:0a:54:70:f8:2b: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:FE:92:31:93:B3:B4:8F:C0:D2:D4:AA:5C:58:02:83:E9:66:CD X509v3 Authority Key Identifier: keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:b1:45:30:20:c6:57:ad:d1:18:0b:12:f7:5c:26:e3:44: 83:f8:9d:c8:9d:2c:a4:ff:23:f6:94:fa:81:0b:65:f7:a1:bd: 70:01:84:72:0b:9d:bc:ac:e5:45:f1:b7:20:e4:e7:e2:e8:b2: 28:01:c4:53:be:88:95:5d:74:8c:85:93:b8:e8:d7:36:ce:79: e6:4b:92:7b:de:f5:9a:b5:f8:0d:82:b0:b3:17:28:ef:40:04: f0:e9:5e:26:c1:14:75:6b:57:d3:10:14:b7:fa:3b:cf:73:80: 2c:8e:8a:af:c2:a3:a1:c6:3d:e9:e0:6f:b7:9f:1c:f9:7b:c4: 98:07:aa:3c:14:a4:f9:93:ac:19:97:17:7b:7f:ea:82:0b:db: 63:e0:93:30:30:c0:de:2c:ad:85:ac:c9:3f:4e:40:44:0a:51: a3:e7:dc:1d:d8:37:a1:0d:1e:2f:1c:35:7c:46:b8:f0:be:8f: a2:9d:e9:ca:03:11:e2:10:76:5b:87:08:00:fa:64:d1:b0:ed: 23:f1:12:be:16:a2:4f:de:39:83:4f:c0:b5:81:b7:37:06:9f: 61:0d:d0:b9:97:3a:60:ab:1a:41:32:34:9a:d3:d7:b7:fb:3f: ff:d7:92:f4:62:6b:56:91:0e:42:b1:e8:e3:05:09:1c:be:01: 31:73:42:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2MjMxMTAvBgNVBAUTKEE2MTUwNzgwRTBCQTExRUEwQURDNDM0QUVEMzgzQzhC ODJBODk2MUQwHhcNMjUwNDI3MDMwMTMyWhcNMjUwNTA0MDMwMTMyWjAYMRYwFAYD VQQDEw02ODBkOWUwYy0yODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhwqeBBGMJDhjm0WGRVwCdZFxspHOxH9By8YwzB+lhpmpwp3feCb0jNlhiSF CeprBxjej5GEthN9B6AsNcWeNoI7Wsm/1JqVtVc2W9CCUf6fDUw0ndINmhtAyVLt BsJXK6jIxpfdi49CqCaXZjC9pWl+na3VE1A0fhG/rATYYnydk+q83cihugEwlfll Q6dCEK2tAlHeVS4nc/DeikiI6CViIyPdc9xMZckjA1wiz3+6kQDsVh5bF5I4hbsP FvMoFcM+hvQSGh5aDeO8bv6dzhuNXwMS7d73FkeyT/csV9SOCfr3cUCa4UrmgVPc lt7avPQgwQ/kMdugClRw+CsaOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB2/pIx k7O0j8DS1KpcWAKD6WbNMB8GA1UdIwQYMBaAFKYVB4DguhHqCtxDSu04PIuCqJYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTYyMy80MTA3MzVDQTE0 OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVlb0szRU5LN1RnOGk0S29s aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoVUhnT0M2RWVvSzNFTks3VGc4aTRLb2xoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTYyMy80MTA3MzVDQTE0OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVl b0szRU5LN1RnOGk0S29saDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOrFFMCDGV63RGAsS91wm40SD+J3InSyk/yP2lPqBC2X3ob1wAYRy C528rOVF8bcg5Ofi6LIoAcRTvoiVXXSMhZO46Nc2znnmS5J73vWatfgNgrCzFyjv QATw6V4mwRR1a1fTEBS3+jvPc4AsjoqvwqOhxj3p4G+3nxz5e8SYB6o8FKT5k6wZ lxd7f+qCC9tj4JMwMMDeLK2FrMk/TkBEClGj59wd2DehDR4vHDV8Rrjwvo+inenK AxHiEHZbhwgA+mTRsO0j8RK+FqJP3jmDT8C1gbc3Bp9hDdC5lzpgqxpBMjSa09e3 +z//15L0YmtWkQ5CsejjBQkcvgExc0Kn -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net