$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: BU0JcoPZanwaCRP9XM4dBEVuJA8jd20G2cIo14Ni9n8= Subject key identifier: D9:50:59:69:6D:CE:F0:CE:A7:23:FA:14:BE:BD:8B:5B:38:E6:45:63 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2499 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 246F Signing time: Thu 24 Apr 2025 15:02:34 +0000 Manifest this update: Thu 24 Apr 2025 15:02:34 +0000 Manifest next update: Thu 01 May 2025 15:02:34 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: wd1OXt/vrI5/QnrHwRlKmdtMfyxxvZDmezoQjYfdVS0=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 3kDcxjoJt+uLwNPAJETs74uGi0S+qOhaB4Kap466oyI=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: nb4ekLYfMcmcZ6P490LxZTkaHaEPmz90vPJhXehdrTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9369 (0x2499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Apr 24 15:02:34 2025 GMT Not After : May 1 15:02:34 2025 GMT Subject: CN=680a528a-0e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:ac:43:6e:22:58:a9:3e:62:66:f7:a9:8a: 40:2f:5a:05:52:6d:28:c5:80:c1:92:b2:fd:40:e0: 25:01:60:97:9d:5a:eb:f5:ae:7f:3e:99:10:a8:67: 62:96:85:42:af:df:bd:97:88:28:54:b6:43:67:71: af:20:a4:d8:b4:66:65:29:1d:f4:28:01:e4:c1:b1: fe:52:24:61:9c:a6:26:72:21:5f:ae:25:0f:66:7d: 82:5a:ca:c8:4b:7a:af:07:95:0d:23:aa:35:e0:c1: bf:3c:5c:ef:dc:b7:31:86:b6:32:91:81:c6:c4:4d: 5b:23:d2:3b:f4:be:7b:32:ec:8f:62:76:ef:48:9b: 03:59:02:17:5a:19:7a:0f:48:17:4c:b8:7f:4f:a8: 82:7d:d3:30:c4:0b:6f:db:8e:f9:4c:69:94:64:fd: d4:45:26:a0:0d:71:a7:6e:09:8e:0c:8b:ce:1e:b8: 12:20:43:7f:03:cc:2b:b5:a0:97:95:5c:74:65:d8: e9:5e:1a:66:ba:f7:84:fa:d0:21:ae:14:c2:34:68: a5:7f:ac:4d:65:2c:28:62:85:28:bb:09:d3:09:f8: 0d:33:66:eb:b2:c1:07:12:de:99:b4:af:49:51:96: 53:1f:6f:6a:ac:3c:a4:5c:f1:d3:75:5c:61:5e:7b: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:50:59:69:6D:CE:F0:CE:A7:23:FA:14:BE:BD:8B:5B:38:E6:45:63 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:bf:40:6f:c8:66:f2:e1:2e:02:ef:db:74:61:42:89:33:bd: 36:82:1f:2c:b1:99:14:87:40:4a:d0:5d:fa:44:0a:48:2b:cb: b9:f4:50:93:1e:44:a0:f5:ac:9e:f6:75:75:da:6a:cf:36:c5: b1:93:39:56:e1:c5:df:73:bc:f0:c4:90:3f:94:7f:3c:2d:f4: 8f:45:c6:95:d5:72:2c:60:ce:5d:55:3e:dc:c3:17:74:c9:fe: 9f:d2:ac:4c:10:a6:23:2e:3c:a0:61:5f:1b:97:5f:57:bc:95: 74:66:e4:4b:56:1b:fd:fb:95:e6:97:e0:93:4b:5d:af:d9:7d: 3f:92:5d:7b:7b:b6:96:99:72:2c:2e:a4:42:88:f0:d8:cc:29: 6d:df:27:40:cc:7f:b8:68:ff:53:d3:3d:9c:f2:27:f6:01:4f: 94:dc:97:cf:30:b5:20:da:39:7f:14:5c:fe:1a:25:7d:6e:50: b2:fe:50:2c:28:7b:7d:07:0d:b9:e3:4e:19:62:73:43:ec:cd: 74:91:f2:02:44:31:e9:d0:a0:68:2d:fc:b4:d1:68:44:19:df: 3d:46:3e:c5:5c:1b:1d:81:7a:09:a3:61:34:ca:32:22:9f:27: 6f:d6:9c:20:ab:86:a6:4c:e6:d5:3a:b5:93:ac:67:d6:d9:dc: 8f:ce:8e:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwNDI0MTUwMjM0WhcNMjUwNTAxMTUwMjM0WjAYMRYwFAYD VQQDEw02ODBhNTI4YS0wZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl6sQ24iWKk+Ymb3qYpAL1oFUm0oxYDBkrL9QOAlAWCXnVrr9a5/PpkQqGdi loVCr9+9l4goVLZDZ3GvIKTYtGZlKR30KAHkwbH+UiRhnKYmciFfriUPZn2CWsrI S3qvB5UNI6o14MG/PFzv3LcxhrYykYHGxE1bI9I79L57MuyPYnbvSJsDWQIXWhl6 D0gXTLh/T6iCfdMwxAtv2475TGmUZP3URSagDXGnbgmODIvOHrgSIEN/A8wrtaCX lVx0ZdjpXhpmuveE+tAhrhTCNGilf6xNZSwoYoUouwnTCfgNM2brssEHEt6ZtK9J UZZTH29qrDykXPHTdVxhXnvLeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlQWWlt zvDOpyP6FL69i1s45kVjMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2v0BvyGby4S4C79t0YUKJM702gh8ssZkUh0BK0F36RApIK8u59FCT HkSg9aye9nV12mrPNsWxkzlW4cXfc7zwxJA/lH88LfSPRcaV1XIsYM5dVT7cwxd0 yf6f0qxMEKYjLjygYV8bl19XvJV0ZuRLVhv9+5Xml+CTS12v2X0/kl17e7aWmXIs LqRCiPDYzClt3ydAzH+4aP9T0z2c8if2AU+U3JfPMLUg2jl/FFz+GiV9blCy/lAs KHt9Bw25404ZYnND7M10kfICRDHp0KBoLfy00WhEGd89Rj7FXBsdgXoJo2E0yjIi nydv1pwgq4amTObVOrWTrGfW2dyPzo4i -----END CERTIFICATE-----Generated at Thu Apr 24 18:09:24 2025 by rpki-client on console.sobornost.net