$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: nBDqvdogoEqqF2eg2ClXVdETb1pJgTnHVIaU3twtsZU= Subject key identifier: F7:92:9F:4C:8C:E1:17:03:CD:34:FD:F3:0A:4F:9F:88:F7:A0:F3:BE Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 017A Signing time: Sun 27 Apr 2025 02:51:59 +0000 Manifest this update: Sun 27 Apr 2025 02:51:58 +0000 Manifest next update: Sun 04 May 2025 02:51:58 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: Z/Pri/2fICX7xDyaUe3oAeYb538WKYbvUZwkVELeEo0=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: mfE8FVHaGAKjd3z9L57ng4sztMrGr2OeILKa3QTIK7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Apr 27 02:51:58 2025 GMT Not After : May 4 02:51:58 2025 GMT Subject: CN=680d9bce-2163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:32:1c:33:f8:29:42:af:85:da:66:5a:0f: c3:f9:68:f9:a7:86:fb:3c:87:16:22:9c:2f:34:9c: bf:4b:c6:e9:f9:27:c5:32:85:1a:78:c6:c8:5f:49: 19:08:b3:23:f1:37:ab:00:38:ce:7a:46:f2:b2:18: fb:2d:5c:7f:25:36:65:ca:54:24:95:b3:dc:1a:73: 65:39:de:97:c8:94:1b:97:1a:e1:7d:7d:8d:c4:71: ff:d2:48:80:a9:5e:36:4a:7e:73:e5:7d:f8:27:ba: 29:1b:1c:75:f2:94:fa:e7:ae:ac:53:d9:cd:41:48: 32:0b:d3:d5:d5:4a:82:8c:8f:94:d7:7e:75:d4:fd: b2:7e:4e:3c:87:4f:0a:98:f4:6e:f8:44:c0:b4:f9: d4:b2:e4:fe:86:25:eb:ef:10:c4:c1:f7:ea:65:5d: a2:f2:cb:08:d6:a2:cf:e4:07:44:d5:80:47:01:0e: 1c:a6:0b:48:b1:72:30:23:58:15:3c:c4:19:95:7a: a8:b1:a1:2c:25:7d:23:56:7f:4d:cb:a4:58:15:eb: f2:a5:ab:7c:b3:8a:7d:af:c4:f3:c1:a2:5e:62:75: 9b:5a:6f:25:48:c0:09:30:9d:b2:7d:df:e6:40:49: 28:7f:79:5b:f8:1e:e4:e9:14:c1:69:3f:99:02:4b: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:9F:4C:8C:E1:17:03:CD:34:FD:F3:0A:4F:9F:88:F7:A0:F3:BE X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:7a:b1:74:e6:c6:2a:57:9c:15:01:d2:05:d4:94:c7:b9: 26:ef:7f:7f:4a:0a:8c:f5:2b:6a:08:14:09:c1:8b:55:61:9a: a8:18:90:b3:ad:9b:95:e3:69:b4:ba:5d:b1:d5:5f:61:b0:8b: af:ce:57:73:7f:cc:36:b9:23:da:56:ec:22:74:50:56:d7:04: 48:1c:8c:42:84:10:90:05:3b:4d:aa:52:1d:d6:8e:74:66:f3: 3a:74:30:0c:24:5a:28:38:40:2b:87:f9:12:ec:bc:99:af:cb: df:35:14:b5:70:1a:aa:6f:de:1e:21:f1:31:4f:91:dd:7f:4d: bd:d3:50:eb:4f:ef:55:73:79:d7:d4:1e:70:61:fe:ea:4e:28: 49:89:bf:f1:d8:cd:4f:f3:c9:fb:1f:87:d8:e7:6f:f7:05:a6: f6:48:6b:e0:6c:78:07:9a:66:00:ef:ad:be:7d:35:b8:37:17: 14:9a:1d:13:20:60:1c:42:ae:da:43:cd:55:11:16:b2:da:a5: 73:29:81:f4:8c:9b:83:0c:43:9f:50:89:8b:9b:e3:01:f9:b6: e3:7d:3b:0d:23:0a:54:1d:81:09:b1:c0:ae:9e:80:93:d2:56: df:5e:57:2f:00:37:b5:c8:6b:f1:2b:7e:8a:d5:a6:62:da:c5: c4:06:70:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUwNDI3MDI1MTU4WhcNMjUwNTA0MDI1MTU4WjAYMRYwFAYD VQQDEw02ODBkOWJjZS0yMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+MyHDP4KUKvhdpmWg/D+Wj5p4b7PIcWIpwvNJy/S8bp+SfFMoUaeMbIX0kZ CLMj8TerADjOekbyshj7LVx/JTZlylQklbPcGnNlOd6XyJQblxrhfX2NxHH/0kiA qV42Sn5z5X34J7opGxx18pT6566sU9nNQUgyC9PV1UqCjI+U13511P2yfk48h08K mPRu+ETAtPnUsuT+hiXr7xDEwffqZV2i8ssI1qLP5AdE1YBHAQ4cpgtIsXIwI1gV PMQZlXqosaEsJX0jVn9Ny6RYFevypat8s4p9r8TzwaJeYnWbWm8lSMAJMJ2yfd/m QEkof3lb+B7k6RTBaT+ZAksbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeSn0yM 4RcDzTT98wpPn4j3oPO+MB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXdnqxdObGKlecFQHSBdSUx7km739/SgqM9StqCBQJwYtVYZqoGJCz rZuV42m0ul2x1V9hsIuvzldzf8w2uSPaVuwidFBW1wRIHIxChBCQBTtNqlId1o50 ZvM6dDAMJFooOEArh/kS7LyZr8vfNRS1cBqqb94eIfExT5Hdf02901DrT+9Vc3nX 1B5wYf7qTihJib/x2M1P88n7H4fY52/3Bab2SGvgbHgHmmYA762+fTW4NxcUmh0T IGAcQq7aQ81VERay2qVzKYH0jJuDDEOfUImLm+MB+bbjfTsNIwpUHYEJscCunoCT 0lbfXlcvADe1yGvxK36K1aZi2sXEBnDX -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net