$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: tlBluqVLi8se1UFbTs/DYhGF1nN8+ff/6MDHOWlSZb8= Subject key identifier: 12:65:72:52:6F:AE:0C:BD:2C:BB:C3:54:D6:E8:D4:C8:6F:4C:B3:CF Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 021E Signing time: Sun 27 Apr 2025 02:03:12 +0000 Manifest this update: Sun 27 Apr 2025 02:03:11 +0000 Manifest next update: Sun 04 May 2025 02:03:11 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: 8Knen89Bprb8X3K+4442mi9A5i0Ry2CX/xtflGKmAIQ=) 2: 59E393C204D011F0B464E44DC4F9AE02.roa (hash: F/d9YZwkTTfQMW9az/pHb2W2rOLLgswMCEvuqBHWldg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Apr 27 02:03:11 2025 GMT Not After : May 4 02:03:11 2025 GMT Subject: CN=680d905f-90da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:c9:a5:45:a4:2c:f9:a9:6e:b4:a5:29:b4: d1:da:a1:0a:34:34:67:e5:91:31:1b:9b:79:0a:35: db:2f:0c:b6:42:a7:96:d8:35:25:6a:98:d0:a6:2a: 69:07:15:b6:95:3a:e1:fd:57:7a:56:27:85:dd:1c: af:32:75:5f:af:21:be:6f:6f:21:ce:23:45:7c:ef: 74:1a:1b:45:be:93:82:d7:64:d8:ed:33:f1:2f:e2: 37:f7:70:a9:87:ee:6c:a2:5f:5a:7b:c4:59:24:1a: 40:d7:f4:d4:ec:f5:e6:c3:bf:3d:9d:3c:96:cf:2b: c7:35:14:5d:c2:5e:51:2d:1f:30:a9:7d:5e:a4:b4: 5e:65:66:a5:24:b2:f8:8f:a1:7f:ff:1b:d1:68:cf: 61:6d:74:d1:39:f2:43:eb:3e:aa:f8:ef:00:c0:69: e5:71:a6:45:a5:b3:3a:0c:46:5b:6f:51:73:66:39: 20:42:06:c3:ef:2b:33:7e:7d:dc:82:36:a9:b5:22: 2e:aa:86:7e:25:f0:40:eb:bd:18:92:87:d7:75:c1: 21:0d:b8:58:39:37:ba:77:27:18:d0:11:44:7b:87: f7:df:45:d8:32:1f:c9:46:d0:84:b3:02:92:fa:eb: b4:b1:7a:09:1c:79:fa:4e:78:ed:15:10:83:e7:f3: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:72:52:6F:AE:0C:BD:2C:BB:C3:54:D6:E8:D4:C8:6F:4C:B3:CF X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0e:e4:94:7e:0e:d7:d2:70:0e:89:dd:77:d6:be:7f:a5:3d: c6:83:fc:fa:44:82:fb:bf:92:39:ff:b4:05:40:2f:10:c6:40: 4f:26:a1:2d:e6:a4:38:e9:b3:78:a7:9a:04:e1:75:b2:27:7f: 0d:92:bb:56:11:9c:33:d4:2d:c5:34:70:b5:5a:2a:67:c8:94: d2:9b:93:a6:4f:b4:64:1c:ce:50:37:4c:4f:1d:c9:11:5d:5d: 46:e9:c6:eb:cb:62:7d:29:55:7f:40:44:c0:00:c0:51:9c:2b: 6d:51:7f:80:fe:76:99:49:c5:01:17:3c:3d:85:02:9b:61:dd: bf:1a:15:10:23:7c:8b:de:b7:1d:ea:a5:03:f3:e1:5a:c4:d9: a9:4f:71:cb:5e:e3:d8:12:1d:5e:be:33:c5:ab:02:08:90:ef: 42:5d:e7:17:ae:25:b4:f6:94:da:67:e5:5e:9c:4c:7c:91:ec: e6:a4:35:cd:c6:ce:2a:eb:55:24:2d:80:7c:cc:cc:80:db:e5: 01:30:da:4f:4c:d8:ca:58:17:2e:02:e9:e9:b1:2e:6e:f3:00: 31:39:1a:d0:2b:b5:a5:55:88:3b:63:ca:29:80:2f:e5:75:6a: a4:68:a4:03:3a:a9:3b:29:e8:7a:60:10:ff:14:e0:ed:2d:32: 34:69:ef:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNDI3MDIwMzExWhcNMjUwNTA0MDIwMzExWjAYMRYwFAYD VQQDEw02ODBkOTA1Zi05MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGrJpUWkLPmpbrSlKbTR2qEKNDRn5ZExG5t5CjXbLwy2QqeW2DUlapjQpipp BxW2lTrh/Vd6VieF3RyvMnVfryG+b28hziNFfO90GhtFvpOC12TY7TPxL+I393Cp h+5sol9ae8RZJBpA1/TU7PXmw789nTyWzyvHNRRdwl5RLR8wqX1epLReZWalJLL4 j6F//xvRaM9hbXTROfJD6z6q+O8AwGnlcaZFpbM6DEZbb1FzZjkgQgbD7yszfn3c gjaptSIuqoZ+JfBA670YkofXdcEhDbhYOTe6dycY0BFEe4f330XYMh/JRtCEswKS +uu0sXoJHHn6TnjtFRCD5/NLAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJlclJv rgy9LLvDVNbo1MhvTLPPMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeDuSUfg7X0nAOid131r5/pT3Gg/z6RIL7v5I5/7QFQC8QxkBPJqEt 5qQ46bN4p5oE4XWyJ38NkrtWEZwz1C3FNHC1WipnyJTSm5OmT7RkHM5QN0xPHckR XV1G6cbry2J9KVV/QETAAMBRnCttUX+A/naZScUBFzw9hQKbYd2/GhUQI3yL3rcd 6qUD8+FaxNmpT3HLXuPYEh1evjPFqwIIkO9CXecXriW09pTaZ+VenEx8kezmpDXN xs4q61UkLYB8zMyA2+UBMNpPTNjKWBcuAunpsS5u8wAxORrQK7WlVYg7Y8opgC/l dWqkaKQDOqk7Keh6YBD/FODtLTI0ae+b -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net