$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: vustMn90hVdryMg5J9qfySBiNV3SIXACV4ZIeND6Sss= Subject key identifier: AC:74:99:3A:5D:BD:C8:0C:17:84:F3:2C:A3:26:A5:E5:80:ED:30:52 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 0348 Signing time: Sun 27 Apr 2025 00:40:51 +0000 Manifest this update: Sun 27 Apr 2025 00:40:51 +0000 Manifest next update: Sun 04 May 2025 00:40:51 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: EBeQFGCggXo7HSEbyUDSZ3d/ulwWjsr1qi9w90IwiwE=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 3ltUc1MRVqJi3SEeMGw79iaqCBtkg84cqJVUr/o1VYA=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: Amk0fNoLVyq/V0Aumz+LOy4QbvlRWTIXw8dCA9q0zmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Apr 27 00:40:51 2025 GMT Not After : May 4 00:40:51 2025 GMT Subject: CN=680d7d13-10ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:80:91:d4:f6:3a:41:85:44:65:5c:16:56:5d: c1:be:a1:61:fb:67:a3:98:c0:80:d1:c8:3c:ec:cc: a6:3f:16:47:e2:2f:68:11:bf:03:f3:86:12:1c:4c: 7a:c7:7e:73:d8:82:b4:7b:8f:d2:b2:ce:4f:69:ab: f5:7c:ba:1e:b2:f3:98:2a:92:e5:5d:17:6e:0a:9e: 31:1b:fe:6e:06:5f:76:2b:00:b4:ea:a4:65:4f:fd: 82:61:07:46:10:54:a6:f5:06:82:d3:32:db:73:34: b3:60:2e:8a:cc:db:39:31:1a:eb:1b:9e:1c:dc:60: 6c:89:19:f1:7d:24:a2:d9:9b:dd:25:a3:8b:af:a1: e5:a0:59:00:ff:2b:0e:43:f4:bf:ba:20:83:36:ab: b0:c2:bf:57:8b:82:b4:d4:b4:51:27:99:98:e0:8a: 40:c0:c5:83:ef:e1:66:a6:f3:3e:a7:75:aa:83:1c: 9e:35:4f:f4:48:14:2f:ef:82:c5:50:69:72:5e:a7: f7:40:6d:a6:10:a6:9b:98:e1:2b:42:c0:96:2b:a7: 7c:84:19:b5:96:32:40:06:99:42:ab:14:82:57:1f: cb:8f:d4:20:b9:e3:5f:c8:24:10:a9:32:e8:e1:6f: 29:34:d8:31:ab:8f:dc:9b:89:09:c1:2f:a7:2a:d7: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:74:99:3A:5D:BD:C8:0C:17:84:F3:2C:A3:26:A5:E5:80:ED:30:52 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a4:22:10:9f:05:d4:60:15:cb:91:63:06:25:0b:95:9b:6a: f8:40:dd:96:33:33:89:65:22:16:a4:96:07:15:c1:ed:db:af: 10:b3:84:8e:90:4a:71:a6:c4:9d:93:60:d5:64:7f:ea:55:e4: 1f:65:56:9e:ba:f9:bf:42:52:ce:56:52:7f:3d:c3:4f:3b:ed: 42:6b:37:8f:71:9c:44:75:a9:f4:34:bf:fc:1e:81:66:e2:aa: a2:cb:86:6a:ae:f5:90:89:53:91:75:22:84:9e:b7:12:11:3f: ae:1f:c3:f5:3a:bf:a6:a7:6c:52:5a:2a:b2:5e:6d:66:87:19: 29:ac:88:3b:d3:86:4e:ca:47:73:c6:a0:eb:b6:e7:81:43:40: 32:4c:c0:06:12:eb:d1:c7:be:42:2f:12:b3:66:e8:5a:3c:42: a8:8c:6f:3b:be:56:3f:09:2e:02:dc:d9:cc:98:c0:d0:1c:d0: 1a:5b:d0:a4:b6:c6:96:82:c9:97:cf:35:03:3f:6c:2b:c6:58: e0:ed:71:3b:9d:64:23:5f:7a:19:cd:2c:f1:5e:7e:3e:1c:cd: 4d:65:c9:d6:4c:c7:c1:3f:e9:87:fb:4c:66:e5:ca:2f:7f:3a: f1:d6:72:c2:10:04:a2:91:2a:0a:4e:cc:d6:d3:44:6b:2f:55: 6f:9b:94:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUwNDI3MDA0MDUxWhcNMjUwNTA0MDA0MDUxWjAYMRYwFAYD VQQDEw02ODBkN2QxMy0xMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84CR1PY6QYVEZVwWVl3BvqFh+2ejmMCA0cg87MymPxZH4i9oEb8D84YSHEx6 x35z2IK0e4/Sss5Paav1fLoesvOYKpLlXRduCp4xG/5uBl92KwC06qRlT/2CYQdG EFSm9QaC0zLbczSzYC6KzNs5MRrrG54c3GBsiRnxfSSi2ZvdJaOLr6HloFkA/ysO Q/S/uiCDNquwwr9Xi4K01LRRJ5mY4IpAwMWD7+FmpvM+p3WqgxyeNU/0SBQv74LF UGlyXqf3QG2mEKabmOErQsCWK6d8hBm1ljJABplCqxSCVx/Lj9QgueNfyCQQqTLo 4W8pNNgxq4/cm4kJwS+nKtc0YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx0mTpd vcgMF4TzLKMmpeWA7TBSMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnpCIQnwXUYBXLkWMGJQuVm2r4QN2WMzOJZSIWpJYHFcHt268Qs4SO kEpxpsSdk2DVZH/qVeQfZVaeuvm/QlLOVlJ/PcNPO+1CazePcZxEdan0NL/8HoFm 4qqiy4ZqrvWQiVORdSKEnrcSET+uH8P1Or+mp2xSWiqyXm1mhxkprIg704ZOykdz xqDrtueBQ0AyTMAGEuvRx75CLxKzZuhaPEKojG87vlY/CS4C3NnMmMDQHNAaW9Ck tsaWgsmXzzUDP2wrxljg7XE7nWQjX3oZzSzxXn4+HM1NZcnWTMfBP+mH+0xm5cov fzrx1nLCEASikSoKTszW00RrL1Vvm5T1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net