$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: mGlNr00yOLRD0tYm8YNelIozAMntjN7sZffMnbF/9ww= Subject key identifier: D9:D3:0B:D9:20:F2:69:9B:E0:26:02:D2:F1:AC:48:CA:C1:C7:D3:74 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 2271 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 2271 Signing time: Mon 28 Apr 2025 14:46:02 +0000 Manifest this update: Mon 28 Apr 2025 14:46:01 +0000 Manifest next update: Mon 05 May 2025 14:46:01 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: zF9noaizlsHCwwEKhtCabrvAv8Tae8i5pN1TYA4/fac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8817 (0x2271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Apr 28 14:46:01 2025 GMT Not After : May 5 14:46:01 2025 GMT Subject: CN=680f94aa-4f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:43:b6:f9:00:ad:0b:e0:eb:ce:e8:f7:13: f9:e3:32:e5:5b:38:79:a2:81:6f:f5:98:e9:40:95: 3a:f5:5a:8b:61:dc:af:f0:7b:c6:09:b8:16:bd:bf: 68:4f:2c:a9:59:5c:ed:d3:7c:b7:de:32:74:ba:97: 07:77:79:36:3d:59:c3:91:4c:7c:03:c5:ad:25:8e: c6:bf:39:27:7c:80:b9:ad:39:85:1f:fd:7c:b4:72: bf:8f:54:3d:50:10:65:b7:fa:e3:30:ab:7e:02:ee: 12:6a:3c:14:24:8e:e4:63:51:ed:df:89:95:1d:d7: 14:b0:bd:47:87:fc:6b:46:45:31:85:98:aa:80:18: dc:1a:bd:93:b0:51:c4:aa:15:43:66:04:86:e0:fe: fb:78:e6:83:92:14:27:52:60:bc:04:47:9a:07:44: 2c:3e:d7:5e:b3:6f:bf:56:5f:57:6f:91:0c:f1:29: f1:b4:22:9d:37:45:75:96:df:4d:91:35:37:df:9e: fa:3b:41:c9:6b:b8:5d:c6:73:b4:fd:c4:00:25:13: 08:ca:11:34:39:2e:0c:fb:1e:3b:7e:27:e0:b1:e1: 68:85:28:ae:78:66:b2:8c:d5:d5:46:9b:2e:62:55: ee:e2:15:8e:8b:56:02:c5:0c:6b:bd:2a:66:e0:b8: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D3:0B:D9:20:F2:69:9B:E0:26:02:D2:F1:AC:48:CA:C1:C7:D3:74 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2c:bf:30:78:48:bb:2a:10:b5:58:aa:12:ba:f6:2c:53:c1: 5c:b0:e9:70:4c:9f:99:da:a2:8f:5c:cb:56:a0:d5:40:26:7c: 1b:02:56:8d:a8:dc:f1:20:64:13:75:d3:22:d9:63:70:76:77: b2:d2:37:d7:95:50:ca:49:46:b0:1a:3e:85:78:21:d3:ee:de: c6:c7:70:da:9c:2d:24:00:42:6b:26:06:2c:85:fa:0d:1e:b4: 45:79:90:6f:ca:37:1f:17:d5:e4:6a:6b:4b:bc:fb:60:f7:a8: 3c:fb:05:49:75:a4:f1:91:c5:24:81:c6:27:1b:cb:bf:1d:0f: 0a:62:44:f8:01:3d:35:1b:00:c3:c3:bf:c5:e5:17:98:83:79: c9:85:75:d0:dd:a5:b8:13:c5:a3:97:6b:92:44:e6:b9:aa:03: 29:16:62:72:62:28:30:b9:da:e2:fa:aa:8e:e1:02:9a:c3:d9: b8:60:f5:f7:32:de:57:9d:8e:23:82:5d:a5:be:64:e0:60:cf: e6:63:ed:be:6e:08:1c:f3:f2:1a:4d:06:6c:af:e5:e9:27:61: a1:59:4c:84:e3:35:dd:86:11:b3:da:42:08:26:49:c7:0c:97: 28:e2:d6:f0:eb:c6:65:cd:8e:ed:5c:4b:95:bd:9e:c1:2c:c6: 35:55:37:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUwNDI4MTQ0NjAxWhcNMjUwNTA1MTQ0NjAxWjAYMRYwFAYD VQQDEw02ODBmOTRhYS00ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YtDtvkArQvg687o9xP54zLlWzh5ooFv9ZjpQJU69VqLYdyv8HvGCbgWvb9o TyypWVzt03y33jJ0upcHd3k2PVnDkUx8A8WtJY7GvzknfIC5rTmFH/18tHK/j1Q9 UBBlt/rjMKt+Au4SajwUJI7kY1Ht34mVHdcUsL1Hh/xrRkUxhZiqgBjcGr2TsFHE qhVDZgSG4P77eOaDkhQnUmC8BEeaB0QsPtdes2+/Vl9Xb5EM8SnxtCKdN0V1lt9N kTU33576O0HJa7hdxnO0/cQAJRMIyhE0OS4M+x47fifgseFohSiueGayjNXVRpsu YlXu4hWOi1YCxQxrvSpm4LiN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnTC9kg 8mmb4CYC0vGsSMrBx9N0MB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/LL8weEi7KhC1WKoSuvYsU8FcsOlwTJ+Z2qKPXMtWoNVAJnwbAlaN qNzxIGQTddMi2WNwdney0jfXlVDKSUawGj6FeCHT7t7Gx3DanC0kAEJrJgYshfoN HrRFeZBvyjcfF9XkamtLvPtg96g8+wVJdaTxkcUkgcYnG8u/HQ8KYkT4AT01GwDD w7/F5ReYg3nJhXXQ3aW4E8Wjl2uSROa5qgMpFmJyYigwudri+qqO4QKaw9m4YPX3 Mt5XnY4jgl2lvmTgYM/mY+2+bggc8/IaTQZsr+XpJ2GhWUyE4zXdhhGz2kIIJknH DJco4tbw68ZlzY7tXEuVvZ7BLMY1VTcg -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net