$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: +kvWexCX60KrxlEHQF4op8bSlZqD1/hAkQnhc4IgdDA= Subject key identifier: 68:B5:DE:58:14:04:AD:60:4D:C9:3D:0E:F0:FF:00:4C:EB:E9:0A:ED Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 02C2 Signing time: Sun 27 Apr 2025 01:12:42 +0000 Manifest this update: Sun 27 Apr 2025 01:12:41 +0000 Manifest next update: Sun 04 May 2025 01:12:41 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: 3lKY+rwBiD3scPR2QCCPk+HJB10A1AYuU2grp5rlGEc=) 2: B5D1A1164E3111EFB475160AC4F9AE02.roa (hash: F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: IgOdg/yQ/ge2znbNbvVPbXbPhfofMGTYoa84g2RotAU=) 4: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: EGZ/fvHina2YX+dj5xEN7cSS8R0XcNDfXd/tDVK1qcE=) 5: 1E1EB7789D8C11EF9B16D921C4F9AE02.roa (hash: TCFvbSrzX3ld7ReLyyVPKT1K5SyyyvX3oexEUzvLigY=) 6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: 2cEppnqVz6EA8cjixAQPIWKPT1GtTfD8PJaZqxpWTLE=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: CjPKYAuDT4eI5JPa/G5V81ZBwDnMXPobI3BPswZB4kQ=) 8: 811803C270C111EF8A30EB51C4F9AE02.roa (hash: 89cYcTv3FMM/3M08ZzwOVhAvZtTfzr28mJIgkmfMCvo=) 9: B137DB2670EF11EFBEF21935C4F9AE02.roa (hash: gVhoaUxSYFZFX3pfYYhl9cQHoz5s0K+bPZd1cYQ52Y8=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: VUKsMbXUZ/VFyFAP8kRF14O9sqE9uokELiAUUcFuG5M=) 11: D4E4D8FCA7C311EFB1AAAD55C4F9AE02.roa (hash: Xf5Ju4zh/ec55xkKs2QH4FHNMxaxZH8+1mgQURFonS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Apr 27 01:12:41 2025 GMT Not After : May 4 01:12:41 2025 GMT Subject: CN=680d8489-2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a5:0a:1b:b6:3e:68:0d:d2:32:5f:3e:bb:a0: a8:79:7a:f8:24:e6:6f:d0:32:09:86:24:8c:16:42: d8:9f:8b:a7:03:9d:61:e4:ab:61:20:41:de:06:e6: 92:49:dc:97:4d:ac:e2:36:84:b5:e7:db:ca:83:67: b4:30:92:4b:2a:55:af:37:b8:56:20:0e:df:94:cb: 35:3b:d5:82:b8:2b:40:22:9d:be:5e:95:1d:b8:86: 61:0b:62:87:23:ef:40:5e:97:35:d6:05:bc:34:59: be:68:94:5e:6c:77:e0:6c:ee:4a:bf:65:f3:b4:c0: 91:58:b6:79:fd:dc:7a:2a:65:b1:ed:ba:11:80:ce: f7:08:60:34:b1:66:e4:c7:82:e8:28:69:40:3f:70: 60:36:4a:d2:f1:de:c0:7a:59:9e:dd:8b:aa:0f:fa: 58:33:9e:53:1d:6c:e8:ef:02:c8:9e:3e:d5:7b:17: 39:6e:d3:a1:2d:02:b1:a1:02:de:4b:be:9c:d8:82: 1a:7f:bf:0a:a0:37:96:89:2c:4f:d3:e8:05:ee:6c: 97:20:84:49:49:f0:b0:0e:ee:c9:07:7f:b7:4a:b4: bb:f1:04:3a:54:c8:a0:a7:8f:91:cf:18:26:70:72: 36:dc:0b:af:6d:49:9e:19:c8:20:47:75:67:b7:31: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B5:DE:58:14:04:AD:60:4D:C9:3D:0E:F0:FF:00:4C:EB:E9:0A:ED X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5a:ea:6d:68:96:a1:ba:42:63:a2:0b:ea:89:83:3c:b0:98: e8:be:61:af:55:ab:0b:9c:eb:8a:41:22:7f:bc:cb:5e:c1:e7: 02:c1:1b:00:aa:b9:c0:8b:99:d6:78:8e:93:48:b0:eb:e4:1f: 45:ab:b0:9f:bd:3d:cd:8e:e0:aa:81:2a:45:46:b5:39:88:ac: a3:24:d9:f9:4c:f6:4e:36:dc:db:e9:21:b2:c5:db:0a:e8:a1: e8:0a:e5:a0:1e:af:3e:5a:4a:7d:04:8f:81:57:81:bb:51:b4: ff:58:cc:70:25:59:5e:14:76:31:af:eb:8e:50:d3:4e:f8:61: a3:68:47:3e:50:26:87:53:33:5f:13:6c:aa:51:95:a5:54:54: 1c:c6:bd:15:64:25:1d:a0:f0:12:e4:68:30:70:17:f7:82:f6: 4e:46:17:47:b8:6b:b0:f9:37:3c:90:32:cc:ac:5f:ef:20:aa: 0e:1d:18:ed:5b:ec:32:f0:30:1d:fb:c3:ed:e1:8d:ef:a7:44: bd:67:6e:f3:cb:57:da:51:4d:60:68:b7:b2:92:97:57:09:23: c0:af:e8:7e:66:f4:19:89:b8:f2:70:6f:e1:2e:ad:a7:7b:d3: e5:d0:5e:b7:ea:a3:a4:c8:c8:32:0c:4a:52:0a:af:52:66:2a: 8f:98:c9:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNDI3MDExMjQxWhcNMjUwNTA0MDExMjQxWjAYMRYwFAYD VQQDEw02ODBkODQ4OS0yNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66UKG7Y+aA3SMl8+u6CoeXr4JOZv0DIJhiSMFkLYn4unA51h5KthIEHeBuaS SdyXTaziNoS159vKg2e0MJJLKlWvN7hWIA7flMs1O9WCuCtAIp2+XpUduIZhC2KH I+9AXpc11gW8NFm+aJRebHfgbO5Kv2XztMCRWLZ5/dx6KmWx7boRgM73CGA0sWbk x4LoKGlAP3BgNkrS8d7Aelme3YuqD/pYM55THWzo7wLInj7Vexc5btOhLQKxoQLe S76c2IIaf78KoDeWiSxP0+gF7myXIIRJSfCwDu7JB3+3SrS78QQ6VMigp4+Rzxgm cHI23AuvbUmeGcggR3VntzGZowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi13lgU BK1gTck9DvD/AEzr6QrtMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2WuptaJahukJjogvqiYM8sJjovmGvVasLnOuKQSJ/vMtewecCwRsA qrnAi5nWeI6TSLDr5B9Fq7CfvT3NjuCqgSpFRrU5iKyjJNn5TPZONtzb6SGyxdsK 6KHoCuWgHq8+Wkp9BI+BV4G7UbT/WMxwJVleFHYxr+uOUNNO+GGjaEc+UCaHUzNf E2yqUZWlVFQcxr0VZCUdoPAS5GgwcBf3gvZORhdHuGuw+Tc8kDLMrF/vIKoOHRjt W+wy8DAd+8Pt4Y3vp0S9Z27zy1faUU1gaLeykpdXCSPAr+h+ZvQZibjycG/hLq2n e9Pl0F636qOkyMgyDEpSCq9SZiqPmMlX -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net