$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: z4hx4R65Z7ZC+ifXNrM9ExYMiKo+wrkKjjW1iym7WyU= Subject key identifier: 05:3E:26:E0:9D:63:88:D2:D0:91:34:36:BD:94:1B:5C:C5:09:D6:06 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01C1 Signing time: Sun 27 Apr 2025 02:11:36 +0000 Manifest this update: Sun 27 Apr 2025 02:11:36 +0000 Manifest next update: Sun 04 May 2025 02:11:36 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: M2u3SgXc7Dpm13Sh4bVKYt0SMm4YXQ3kfiyxXX/l7Lg=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: nGoAAcc8EiGUc2jIX6TFO/zcGFhh7Cn96wb0ZRxZplE=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: ha92JVkNr7PUBbGWqelnj/HD1On/JDH9j7luLKpb+Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Apr 27 02:11:36 2025 GMT Not After : May 4 02:11:36 2025 GMT Subject: CN=680d9258-bca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:d7:0c:f4:a8:9e:95:06:45:71:82:dc:7e: 61:83:f7:41:ea:70:d7:06:7d:2b:fa:5b:aa:6b:56: d7:fc:88:e5:4b:02:85:86:bd:5f:f7:3e:a0:3f:d1: 4f:8c:e0:1e:51:6f:73:c4:61:6e:bb:c0:c1:1b:33: 30:5f:aa:c6:03:54:64:5b:1b:62:38:ce:5f:09:ef: 56:e9:75:f3:06:eb:47:43:94:74:6e:f7:8c:d0:a9: 32:40:98:84:63:7a:c7:fe:f6:38:88:0e:92:88:81: a0:3f:dd:b7:b8:de:ca:71:4a:64:ac:66:7f:9c:e6: ec:ba:d4:20:a6:94:f4:7d:78:6c:39:d5:7e:22:d6: 08:05:80:b8:20:82:94:d5:a6:e9:8c:a7:6b:50:f3: d5:05:db:36:07:ab:61:0c:77:70:e8:ff:7a:e9:48: 37:eb:25:4a:ec:75:46:18:47:f2:e9:cd:60:9b:5a: 78:68:4f:eb:d5:da:46:2c:85:8b:2e:5f:24:c2:89: 98:62:a9:8a:de:85:dc:48:18:24:e4:f8:c3:9e:4e: bc:85:db:e1:9d:c9:db:20:3c:5f:69:9f:27:e8:ce: 0b:ab:5f:61:1d:bb:64:e7:dc:a9:75:95:cd:c3:7f: 8f:01:62:08:3f:db:e9:74:6b:ac:ae:54:bc:20:92: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:26:E0:9D:63:88:D2:D0:91:34:36:BD:94:1B:5C:C5:09:D6:06 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:4d:2f:c2:ea:64:c5:bb:7c:9b:6c:8a:cd:e4:a1:44:3b: cd:b0:a8:fd:3b:12:40:47:5c:bd:6b:5f:ba:f6:fd:db:97:a3: a0:f9:07:51:71:83:5a:ed:43:80:27:77:a2:60:c1:c3:a0:0c: bb:27:1b:2d:da:24:15:74:7f:17:6f:7a:9d:c2:78:42:8b:6f: e5:dd:ff:8f:11:54:ca:16:d1:10:5b:a1:d1:54:dd:b5:96:58: 4c:13:12:65:8a:64:fa:1b:f4:9d:74:2f:0d:2d:f8:d4:af:b3: f2:47:4d:84:c9:2f:bc:45:6c:a3:be:98:4b:aa:88:89:fb:1e: bc:b4:c7:3c:f7:af:89:31:e4:fc:80:00:77:6b:ee:b9:31:7a: 8e:d4:37:a8:61:83:b9:b1:fe:ac:19:91:65:7d:47:f6:36:b6: 36:bc:69:0a:35:ac:37:a9:fc:4e:52:82:c7:99:42:78:4b:8b: 31:0f:b6:94:c7:f5:96:7b:07:f8:d0:75:c9:79:43:d9:90:51: fa:b1:af:e3:eb:78:75:15:05:d0:33:03:9a:76:0a:fc:75:9c: 91:e6:b1:c8:b1:97:8d:b8:45:29:ab:6f:70:77:06:de:04:6c: e7:45:db:42:e2:da:8d:34:98:26:b3:dd:b7:f4:d9:1a:c9:db: e3:6a:a4:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNDI3MDIxMTM2WhcNMjUwNTA0MDIxMTM2WjAYMRYwFAYD VQQDEw02ODBkOTI1OC1iY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KDXDPSonpUGRXGC3H5hg/dB6nDXBn0r+luqa1bX/IjlSwKFhr1f9z6gP9FP jOAeUW9zxGFuu8DBGzMwX6rGA1RkWxtiOM5fCe9W6XXzButHQ5R0bveM0KkyQJiE Y3rH/vY4iA6SiIGgP923uN7KcUpkrGZ/nObsutQgppT0fXhsOdV+ItYIBYC4IIKU 1abpjKdrUPPVBds2B6thDHdw6P966Ug36yVK7HVGGEfy6c1gm1p4aE/r1dpGLIWL Ll8kwomYYqmK3oXcSBgk5PjDnk68hdvhncnbIDxfaZ8n6M4Lq19hHbtk59ypdZXN w3+PAWIIP9vpdGusrlS8IJJBiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU+JuCd Y4jS0JE0Nr2UG1zFCdYGMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl+00vwupkxbt8m2yKzeShRDvNsKj9OxJAR1y9a1+69v3bl6Og+QdR cYNa7UOAJ3eiYMHDoAy7Jxst2iQVdH8Xb3qdwnhCi2/l3f+PEVTKFtEQW6HRVN21 llhMExJlimT6G/SddC8NLfjUr7PyR02EyS+8RWyjvphLqoiJ+x68tMc896+JMeT8 gAB3a+65MXqO1DeoYYO5sf6sGZFlfUf2NrY2vGkKNaw3qfxOUoLHmUJ4S4sxD7aU x/WWewf40HXJeUPZkFH6sa/j63h1FQXQMwOadgr8dZyR5rHIsZeNuEUpq29wdwbe BGznRdtC4tqNNJgms9239NkaydvjaqTS -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net