$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft File: yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json) Hash identifier: RBqSPZEyIJfbY603+PXpSvB8VsNmlD3u2NzGa7bzJgg= Subject key identifier: 48:71:B4:BA:AD:59:71:15:8D:F6:D3:82:2F:C4:29:90:ED:26:58:3A Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01 Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft Manifest number: 0599 Signing time: Sat 26 Apr 2025 22:57:27 +0000 Manifest this update: Sat 26 Apr 2025 22:57:27 +0000 Manifest next update: Sat 03 May 2025 22:57:27 +0000 Files and hashes: 1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: +2BqUTvFrr6z+9GZVs6/7Dc/QMHYfaI+5ja44542skk=) 2: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: ui8GmB9i/5pnYfd6MeCxTJj3Yjz4hQKs4XNWYMcqflM=) 3: 3003C4BA7C7711EEB9E0BE15C4F9AE02.roa (hash: v6P92PiB+jeVRQvFzDPkmeCK4o2bOi69O9K8uU73bTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701 Validity Not Before: Apr 26 22:57:27 2025 GMT Not After : May 3 22:57:27 2025 GMT Subject: CN=680d64d7-c65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:9a:90:a7:8d:97:5f:5c:76:a5:b5:7c:62: 75:5a:56:7a:a5:1c:79:30:34:2e:a0:7c:20:fd:39: d0:f0:2a:40:57:f2:8d:af:4a:40:3c:21:b2:2f:3e: eb:95:f4:c0:10:87:4e:79:a2:e7:03:8f:6d:a2:4a: 46:fb:5a:81:c1:c7:9e:e1:cf:d9:97:bd:21:ee:37: 35:b9:c6:6c:06:53:51:14:19:f8:46:ac:01:d0:c9: de:9f:ec:c1:8f:95:f1:24:8c:20:ab:b3:93:27:78: 79:2f:fe:94:1f:c3:18:b9:06:ef:54:48:4f:7d:65: fb:d3:a9:b5:d0:45:36:bb:d5:c1:46:56:53:0a:9b: 99:e6:eb:7d:a4:6e:46:54:b6:cf:a5:0e:3e:5a:9e: ec:26:9e:99:92:b5:1b:0f:7c:76:39:83:04:8b:bb: f3:d2:a8:03:59:b1:e2:3a:fc:f4:14:08:f5:6d:e5: a4:c5:3b:14:03:19:4a:a8:35:af:93:34:de:13:56: 33:dd:69:a8:a5:85:a6:c4:ad:2e:4e:3c:c6:ea:1e: ef:90:b9:ea:d2:42:4a:8f:9b:c6:1b:d8:a3:67:af: 28:50:47:d9:51:7a:93:b1:96:4b:40:b0:fc:ac:ca: c5:03:27:05:17:30:cb:06:fb:54:6b:c3:84:bb:42: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:71:B4:BA:AD:59:71:15:8D:F6:D3:82:2F:C4:29:90:ED:26:58:3A X509v3 Authority Key Identifier: keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f9:7d:b4:1a:e7:15:1b:e8:fb:0b:8c:b6:aa:77:86:51:cd: ec:f8:78:66:47:0b:15:20:9c:85:9e:36:5b:92:c8:30:0a:f5: ae:d7:7c:06:7f:83:9f:e3:de:e8:89:4a:f2:01:49:0d:ff:a3: 89:e6:ba:e6:f4:85:4d:93:bc:d2:c9:ac:4d:38:0d:96:8e:1c: 63:ab:f1:be:0b:c4:8c:b4:b4:f4:5d:6c:90:14:2b:ae:77:89: b3:78:66:7c:bc:03:bd:53:86:54:e0:69:17:9d:fe:4b:03:6c: 03:49:c8:95:38:97:93:80:b3:69:22:5e:8e:5b:7d:6c:5f:4a: e4:59:83:bf:8c:cd:c1:5c:87:bd:d1:04:3e:5e:fa:b2:00:30: 0a:10:cc:a3:f7:20:d6:e3:8d:20:6d:e3:b8:27:b4:3a:cf:26: da:8c:1a:44:db:b9:6b:24:22:e0:81:9e:24:fc:2c:b2:01:6f: 5a:33:fe:28:2e:77:4a:5d:ee:61:74:ef:0c:8b:71:c1:20:60: 66:e1:81:bb:ed:66:0f:c6:44:70:5d:8e:27:44:00:10:c0:fa: 93:9c:cf:0d:55:92:12:8a:49:f5:ff:e2:77:46:16:bf:cb:40: 30:6b:dd:4c:de:af:fd:e0:17:17:02:35:80:ea:ec:54:1f:f5: 04:13:a4:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKEM4MDcwRkQwNjFBODUxRkY4QUVERTBERTBDMzYwN0VF Qjk4RkY3MDEwHhcNMjUwNDI2MjI1NzI3WhcNMjUwNTAzMjI1NzI3WjAYMRYwFAYD VQQDEw02ODBkNjRkNy1jNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8SakKeNl19cdqW1fGJ1WlZ6pRx5MDQuoHwg/TnQ8CpAV/KNr0pAPCGyLz7r lfTAEIdOeaLnA49tokpG+1qBwcee4c/Zl70h7jc1ucZsBlNRFBn4RqwB0Mnen+zB j5XxJIwgq7OTJ3h5L/6UH8MYuQbvVEhPfWX706m10EU2u9XBRlZTCpuZ5ut9pG5G VLbPpQ4+Wp7sJp6ZkrUbD3x2OYMEi7vz0qgDWbHiOvz0FAj1beWkxTsUAxlKqDWv kzTeE1Yz3WmopYWmxK0uTjzG6h7vkLnq0kJKj5vGG9ijZ68oUEfZUXqTsZZLQLD8 rMrFAycFFzDLBvtUa8OEu0KKVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhxtLqt WXEVjfbTgi/EKZDtJlg6MB8GA1UdIwQYMBaAFMgHD9BhqFH/iu3g3gw2B+65j/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9CMDIwMkQzMkQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1VmLUs3ZURlRERZSDdybVA5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBY1AwR0dvVWYtSzdlRGVERFlIN3JtUDl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9CMDIwMkQzMkQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1Vm LUs3ZURlRERZSDdybVA5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+X20GucVG+j7C4y2qneGUc3s+HhmRwsVIJyFnjZbksgwCvWu13wG f4Of497oiUryAUkN/6OJ5rrm9IVNk7zSyaxNOA2Wjhxjq/G+C8SMtLT0XWyQFCuu d4mzeGZ8vAO9U4ZU4GkXnf5LA2wDSciVOJeTgLNpIl6OW31sX0rkWYO/jM3BXIe9 0QQ+XvqyADAKEMyj9yDW440gbeO4J7Q6zybajBpE27lrJCLggZ4k/CyyAW9aM/4o LndKXe5hdO8Mi3HBIGBm4YG77WYPxkRwXY4nRAAQwPqTnM8NVZISikn1/+J3Rha/ y0Awa91M3q/94BcXAjWA6uxUH/UEE6Q/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net