$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: SVKY+w/vqsKmmC69S5E91ro/VnwQAIonMrSRLmZulic= Subject key identifier: 21:DC:4C:6A:F0:B0:7A:AC:F9:0C:0F:97:48:05:5A:C2:9F:A2:CB:F7 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 1A Signing time: Sun 27 Apr 2025 06:46:28 +0000 Manifest this update: Sun 27 Apr 2025 06:46:27 +0000 Manifest next update: Sun 04 May 2025 06:46:27 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: z/DAYjWLipnyu52sUZ/nEnl1+d4Mat7zNXF62mWZFmc=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: +DgxPlUsAPOqgoW/QPj4mhiM+6u6bShnRM17P00ub90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Apr 27 06:46:27 2025 GMT Not After : May 4 06:46:27 2025 GMT Subject: CN=680dd2c4-c205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:a0:75:5e:32:30:ea:86:b7:b9:b1:45:56: 54:0f:5d:bc:4f:d3:76:03:ad:44:37:46:f6:f1:0f: 84:74:3e:1d:5e:69:97:91:aa:fc:0c:3c:75:37:25: 87:0e:26:a5:eb:a7:f6:df:46:a3:1c:f4:64:75:e6: 16:7f:61:86:06:79:7d:9e:b9:20:7d:1a:07:e2:3c: f5:1f:14:52:94:44:74:b9:72:b9:be:5d:c4:8d:4f: 1a:27:fe:b5:47:17:c5:52:b2:9c:07:c4:0a:2e:9c: 20:da:c3:3f:57:d5:3e:0c:85:de:d3:51:24:b5:82: 60:41:d6:2e:70:23:c9:99:f4:3e:69:d0:7d:3c:70: 75:b1:f8:10:ba:54:51:d0:9b:91:f8:4c:52:0a:df: f7:f6:82:30:2a:01:27:ed:92:88:63:43:6c:4c:50: c8:1c:5c:4d:2c:17:b7:b7:07:89:a1:fc:b0:ec:c7: 4f:ce:90:52:38:6c:84:86:d6:9e:c1:bb:cc:49:a7: e2:6d:4e:81:a5:2d:22:52:68:c8:12:ba:7a:ef:18: a8:37:fd:a7:01:2d:2d:a2:28:99:3c:e1:eb:f7:2c: 8e:c4:e2:4b:95:1b:a2:c4:c3:5d:51:b1:8c:8c:78: db:d4:4e:17:62:a1:bc:fd:6f:f1:e2:7d:93:c6:59: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:4C:6A:F0:B0:7A:AC:F9:0C:0F:97:48:05:5A:C2:9F:A2:CB:F7 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:b6:0e:d9:f3:63:d7:3c:f7:a4:87:d9:8b:02:3c:d5:8c: 9f:87:de:7b:1e:ed:83:7c:40:a5:e6:66:fb:f8:4c:17:75:60: 49:4a:58:7b:5c:8e:e6:b3:7e:fb:f6:e8:c0:cc:40:ce:d2:c0: 8c:e4:31:a7:bc:81:f3:3d:48:eb:7a:5e:3b:25:27:7a:25:ce: 57:b4:dc:79:b2:81:b5:25:c8:34:1a:38:fa:9d:01:78:88:23: 71:8f:7a:5f:51:f8:b3:e0:8c:9a:78:cf:dc:18:10:14:ea:64: a2:f5:64:29:d3:36:42:2f:a7:59:68:cf:24:0f:73:8f:48:cf: a9:a8:d2:34:bb:17:43:0f:61:35:a9:29:31:32:60:2c:da:28: 31:e0:db:a1:bd:c6:10:2f:13:3a:48:6a:a0:a2:7c:b2:1a:f0: 0e:8f:29:6b:5e:32:88:af:41:a5:e0:39:d4:4e:af:21:5d:17: 29:7b:b4:5e:f3:93:1b:67:ed:34:c8:d6:78:7b:1c:2b:ac:cb: 08:34:77:2a:b5:a2:35:6d:c7:82:c4:da:d3:81:3e:24:92:fd: 8b:ef:5e:3f:1d:b8:c4:e2:34:71:2e:99:34:ef:5f:41:86:a8: a9:6f:21:0c:48:ff:77:a6:2d:be:cc:61:b9:4d:0f:53:31:01: 14:ee:26:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzZDNDExMC8GA1UEBRMoQzdDMzIzNEJEMjZEQUQ2MjlFMkQ3RUY0NDQ0ODRGRTU0 MUQ4MTQ4RTAeFw0yNTA0MjcwNjQ2MjdaFw0yNTA1MDQwNjQ2MjdaMBgxFjAUBgNV BAMTDTY4MGRkMmM0LWMyMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/H6B1XjIw6oa3ubFFVlQPXbxP03YDrUQ3RvbxD4R0Ph1eaZeRqvwMPHU3JYcO JqXrp/bfRqMc9GR15hZ/YYYGeX2euSB9GgfiPPUfFFKURHS5crm+XcSNTxon/rVH F8VSspwHxAounCDawz9X1T4Mhd7TUSS1gmBB1i5wI8mZ9D5p0H08cHWx+BC6VFHQ m5H4TFIK3/f2gjAqASftkohjQ2xMUMgcXE0sF7e3B4mh/LDsx0/OkFI4bISG1p7B u8xJp+JtToGlLSJSaMgSunrvGKg3/acBLS2iKJk84ev3LI7E4kuVG6LEw11RsYyM eNvUThdiobz9b/HifZPGWRDRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIdxMavCw eqz5DA+XSAVawp+iy/cwHwYDVR0jBBgwFoAUx8MjS9JtrWKeLX70REhP5UHYFI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNkM0L0MxNjA1ODUyRkVF RDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDhNalM5SnRyV0tlTFg3MFJFaFA1VUhZRkk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NkM0L0MxNjA1ODUyRkVFRDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldL ZUxYNzBSRWhQNVVIWUZJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrytg7Z82PXPPekh9mLAjzVjJ+H3nse7YN8QKXmZvv4TBd1YElKWHtc juazfvv26MDMQM7SwIzkMae8gfM9SOt6XjslJ3olzle03HmygbUlyDQaOPqdAXiI I3GPel9R+LPgjJp4z9wYEBTqZKL1ZCnTNkIvp1lozyQPc49Iz6mo0jS7F0MPYTWp KTEyYCzaKDHg26G9xhAvEzpIaqCifLIa8A6PKWteMoivQaXgOdROryFdFyl7tF7z kxtn7TTI1nh7HCusywg0dyq1ojVtx4LE2tOBPiSS/YvvXj8duMTiNHEumTTvX0GG qKlvIQxI/3emLb7MYblND1MxARTuJl4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net