$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: BKJ+kImLMUPfehqlYJgpIEyUuA2NUDchcY1xJQhSoyQ= Subject key identifier: 29:E2:D5:DD:C9:0E:B2:C6:5C:A7:8A:9E:A5:22:28:8D:90:49:3C:C8 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07A1 Signing time: Thu 24 Apr 2025 21:09:55 +0000 Manifest this update: Thu 24 Apr 2025 21:09:54 +0000 Manifest next update: Thu 01 May 2025 21:09:54 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: lO1gSkll9g12NS8it2EMif7iGbE53hp2ViXTedg1m7U=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: uenMBzygNtm8pOViOrVCvIQk55vDxQTLDfSdNpW+OjU=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: pC04v+mNv7zR9Y+4n59q7qozKs19qd8Pl1ty97dV8dI=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: 4189wGj0EPbmCiBfwKVkbJETVgwnkFWeQOcnoateYoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Apr 24 21:09:54 2025 GMT Not After : May 1 21:09:54 2025 GMT Subject: CN=680aa8a2-4eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:6e:48:47:ab:f2:f2:0e:98:55:a7:77:a5: c0:0b:a7:e7:3a:78:69:b9:e0:59:bc:04:58:c6:b2: d2:45:77:e8:60:67:f0:7e:72:10:ab:f6:50:45:91: 0b:ab:5a:87:69:dc:7a:cd:c6:13:dd:48:19:be:e2: 13:56:95:93:dd:c2:4d:d3:2c:4d:99:e1:e4:67:7d: be:32:d5:00:d5:a9:0e:f7:be:ea:b3:8f:5f:d0:f6: 41:f7:64:6c:93:24:c2:df:d4:8a:fa:12:0c:11:cd: 1d:11:7f:bd:a7:b3:bf:27:a5:9c:b1:76:64:0c:ba: 1a:f5:73:7c:ab:2c:55:1f:8c:0b:7d:2a:c8:45:e6: 32:64:26:a0:31:05:97:b5:d5:f9:36:6f:27:96:75: 1e:4c:d2:32:6b:ac:6c:4b:32:47:2a:b4:51:e8:f2: ee:07:13:4c:84:2d:72:5a:2b:d3:15:2d:8e:59:e2: 0b:34:78:21:bc:85:25:5f:63:c7:1c:a8:8c:3f:a0: 4e:35:a8:e9:25:bc:a0:7d:26:c0:db:97:79:fc:10: c6:6a:52:8c:62:20:6b:ea:43:a8:78:9f:33:c9:08: 66:71:92:ea:73:18:ab:6e:09:1e:9c:6b:07:bc:bd: 07:6d:d1:18:37:c0:84:c0:cb:0b:2d:51:dd:4b:bf: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E2:D5:DD:C9:0E:B2:C6:5C:A7:8A:9E:A5:22:28:8D:90:49:3C:C8 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:5f:c7:40:eb:3a:2b:e9:6b:5b:7b:3c:e2:d7:fb:57:75:a8: 9b:f1:4f:52:d2:84:00:d6:ef:c2:8f:ce:df:d0:d7:18:b6:d9: 6f:83:07:6b:b9:d6:b1:58:ad:c8:a6:98:f1:f7:5e:a4:36:b7: 9b:f2:47:ff:ed:c9:d8:31:ef:37:a5:87:ee:33:ea:c1:44:e7: b8:a6:4c:41:0f:9e:d6:ef:b4:7b:50:22:a6:a1:07:72:fa:5d: 9e:9e:68:08:37:db:1f:4d:c5:f9:44:9c:d2:1c:c2:d5:bc:50: d4:8c:18:1b:99:46:07:95:b7:62:15:d5:0f:bc:c5:cc:a1:44: 3c:e1:90:75:7b:02:9b:d4:11:8e:e3:f0:87:71:24:9e:4c:76: ff:5e:55:be:df:df:e7:3e:a1:fd:16:f7:90:0c:03:d6:8f:9c: 58:3c:83:d8:ef:99:2f:a7:65:c8:47:ee:d7:1d:5d:b8:e0:0e: 07:b6:0e:85:b9:16:bd:b8:c5:37:99:37:6b:89:f3:3b:48:1c: 35:b2:5b:c8:cb:2b:58:b8:9f:81:b3:39:93:10:e9:33:51:67: 04:94:43:6d:46:f2:f6:8f:5e:15:13:5f:d6:bb:94:4f:33:c9: 69:25:2b:d8:f4:1b:66:65:6a:0b:31:d5:75:34:df:e2:81:ea: 11:6c:8e:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwNDI0MjEwOTU0WhcNMjUwNTAxMjEwOTU0WjAYMRYwFAYD VQQDEw02ODBhYThhMi00ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh5uSEer8vIOmFWnd6XAC6fnOnhpueBZvARYxrLSRXfoYGfwfnIQq/ZQRZEL q1qHadx6zcYT3UgZvuITVpWT3cJN0yxNmeHkZ32+MtUA1akO977qs49f0PZB92Rs kyTC39SK+hIMEc0dEX+9p7O/J6WcsXZkDLoa9XN8qyxVH4wLfSrIReYyZCagMQWX tdX5Nm8nlnUeTNIya6xsSzJHKrRR6PLuBxNMhC1yWivTFS2OWeILNHghvIUlX2PH HKiMP6BONajpJbygfSbA25d5/BDGalKMYiBr6kOoeJ8zyQhmcZLqcxirbgkenGsH vL0HbdEYN8CEwMsLLVHdS79F2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCni1d3J DrLGXKeKnqUiKI2QSTzIMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxX8dA6zor6Wtbezzi1/tXdaib8U9S0oQA1u/Cj87f0NcYttlvgwdr udaxWK3Ippjx916kNreb8kf/7cnYMe83pYfuM+rBROe4pkxBD57W77R7UCKmoQdy +l2enmgIN9sfTcX5RJzSHMLVvFDUjBgbmUYHlbdiFdUPvMXMoUQ84ZB1ewKb1BGO 4/CHcSSeTHb/XlW+39/nPqH9FveQDAPWj5xYPIPY75kvp2XIR+7XHV244A4Htg6F uRa9uMU3mTdrifM7SBw1slvIyytYuJ+BszmTEOkzUWcElENtRvL2j14VE1/Wu5RP M8lpJSvY9BtmZWoLMdV1NN/igeoRbI7B -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:32 2025 by rpki-client on console.sobornost.net