$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: TaUxjOi8STYisLFg3NZAR9JFxYyQ+Z07moUf1vQ18xE= Subject key identifier: 2E:7A:F2:7D:CE:50:3B:89:D9:C7:C6:83:75:21:8D:B2:F1:8E:F1:4A Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 4762 Signing time: Mon 28 Apr 2025 14:20:53 +0000 Manifest this update: Mon 28 Apr 2025 14:20:53 +0000 Manifest next update: Mon 05 May 2025 14:20:53 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: DMh8MLV1kBgamSkXfMCWNyh55iT940cZM0ZDDhKtNwU=) 2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: GHnN7IPBztwTSkz/5T1Pzn2mpFjuZRSGTdYW2a+IpUM=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: idks1lefYLO6nPenvXoGS0zMdLXoYOwMfOiIKkDlkB8=) 4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: gZAAhBS7lDX/ARKaEp+quX+YnSdkN0XwL2ShlYH1ilM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4781 (0x12ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Apr 28 14:20:53 2025 GMT Not After : May 5 14:20:53 2025 GMT Subject: CN=680f8ec5-163f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:41:e3:71:3d:2c:d8:3f:82:de:b7:8a:f4: 04:d3:c9:a2:03:20:ea:f6:f6:b2:83:c9:85:41:e6: d5:96:11:c7:d0:ac:69:fd:1e:35:33:6e:c4:fb:35: be:ff:f9:19:f1:05:9a:0e:be:41:19:71:fe:9a:56: e9:4a:7d:09:6c:f3:d7:85:f9:5d:bd:96:1b:8a:8c: ee:6a:e9:79:5b:a4:16:72:b4:d5:de:66:e5:14:23: 09:4a:67:6c:20:bc:40:39:9d:1b:d7:c2:0e:46:8e: e7:de:43:b1:0c:c6:1b:cc:54:5c:83:c5:f8:86:6b: 64:7f:f0:b1:d0:6e:dc:d8:56:86:5d:fe:e0:ce:c5: a7:e5:b5:0b:b9:6d:99:b0:86:62:3f:b0:eb:80:ef: 53:9e:e1:4e:cc:1d:da:3f:85:10:5f:7d:3d:87:08: f5:4e:2c:f4:ae:94:3a:3d:18:ae:a7:8f:2b:a8:c1: 99:5d:36:69:24:b4:a7:82:ce:b7:ad:7b:50:58:6e: 1c:3e:d9:53:47:87:5d:78:95:3a:ce:dd:40:0f:8b: 2d:7e:35:1e:0a:45:46:89:bd:ee:76:88:b7:af:65: 14:92:48:18:ba:53:cf:64:db:2d:b8:99:58:f5:f1: 8a:67:96:b0:6c:f8:e3:51:de:f6:2a:6f:da:c3:03: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:F2:7D:CE:50:3B:89:D9:C7:C6:83:75:21:8D:B2:F1:8E:F1:4A X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:c1:67:60:7e:46:99:3c:39:a4:05:d6:46:4a:45:d6:cd: 8d:29:03:4b:9d:69:c9:3a:f9:ee:36:07:cc:41:7a:c2:b9:64: bb:e8:02:a0:53:f7:26:05:e8:30:b5:26:b8:f4:c0:5a:c2:a8: dc:27:c9:d4:cd:0a:61:e2:41:5f:e7:eb:0c:b6:92:ca:ac:12: dd:4a:a9:fe:41:b9:e3:5a:73:a3:14:32:9c:71:2b:58:98:df: f5:1f:2f:e3:a2:94:8a:30:39:ed:15:04:3b:00:7c:0a:fb:a7: 0d:23:f6:b4:84:09:0f:7d:81:64:93:62:45:c2:46:93:83:ac: c4:26:57:d0:5e:99:a1:44:cc:40:c7:89:0b:52:c0:c0:96:8a: 09:fb:3a:d0:7f:af:77:2f:52:2a:bb:cc:d0:9b:a4:56:d2:d6: 95:82:6f:51:14:2c:c2:f0:42:2b:a2:d6:ca:86:40:e0:b1:fa: 7f:47:3b:59:f1:cb:c8:a5:d3:c4:4e:af:e5:e2:a3:57:ea:92: e7:1c:4f:16:62:9a:a0:15:80:c1:51:30:70:55:f8:e9:b2:f6: c0:16:ee:9a:67:8b:68:93:72:84:48:2b:76:98:21:c6:5d:4e: 27:6b:11:c3:30:63:78:de:05:63:62:b2:5c:f2:08:4e:e2:82: cc:26:3e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwNDI4MTQyMDUzWhcNMjUwNTA1MTQyMDUzWjAYMRYwFAYD VQQDEw02ODBmOGVjNS0xNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXNB43E9LNg/gt63ivQE08miAyDq9vayg8mFQebVlhHH0Kxp/R41M27E+zW+ //kZ8QWaDr5BGXH+mlbpSn0JbPPXhfldvZYbiozuaul5W6QWcrTV3mblFCMJSmds ILxAOZ0b18IORo7n3kOxDMYbzFRcg8X4hmtkf/Cx0G7c2FaGXf7gzsWn5bULuW2Z sIZiP7DrgO9TnuFOzB3aP4UQX309hwj1Tiz0rpQ6PRiup48rqMGZXTZpJLSngs63 rXtQWG4cPtlTR4ddeJU6zt1AD4stfjUeCkVGib3udoi3r2UUkkgYulPPZNstuJlY 9fGKZ5awbPjjUd72Km/awwNY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC568n3O UDuJ2cfGg3UhjbLxjvFKMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjnsFnYH5GmTw5pAXWRkpF1s2NKQNLnWnJOvnuNgfMQXrCuWS76AKg U/cmBegwtSa49MBawqjcJ8nUzQph4kFf5+sMtpLKrBLdSqn+QbnjWnOjFDKccStY mN/1Hy/jopSKMDntFQQ7AHwK+6cNI/a0hAkPfYFkk2JFwkaTg6zEJlfQXpmhRMxA x4kLUsDAlooJ+zrQf693L1Iqu8zQm6RW0taVgm9RFCzC8EIrotbKhkDgsfp/RztZ 8cvIpdPETq/l4qNX6pLnHE8WYpqgFYDBUTBwVfjpsvbAFu6aZ4tok3KESCt2mCHG XU4naxHDMGN43gVjYrJc8ghO4oLMJj50 -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net