$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: DsPe771wgsXoK/3GssGptenjXleigHGsaFHI9/U09ko= Subject key identifier: C2:84:41:60:27:3E:8C:D0:8A:32:35:F2:6A:08:22:CF:05:99:BC:D5 Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: 0144 Signing time: Fri 25 Apr 2025 03:25:28 +0000 Manifest this update: Fri 25 Apr 2025 03:25:27 +0000 Manifest next update: Fri 02 May 2025 03:25:27 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: IcA46CslnEXKlK933znRSzv8asft/C1mWqqVp92vfus=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: wc/nP/I02P9mYhl99EomTi2ak69YgtTLrrtatE7njg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: Apr 25 03:25:27 2025 GMT Not After : May 2 03:25:27 2025 GMT Subject: CN=680b00a7-647b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:3c:13:55:da:0f:7b:3f:84:d7:90:74:d5: 15:1f:d3:9b:80:49:e8:58:86:5f:f8:1d:4e:6a:21: 83:40:c6:7e:71:cd:b8:49:b4:1a:59:39:62:57:dd: 79:b9:e8:ad:de:65:c5:4f:ad:66:b8:82:b8:62:7e: 17:b4:ec:6a:3b:95:e5:ac:ac:33:70:35:c3:8b:5d: a1:af:86:b0:de:1e:54:af:9d:69:dc:f7:40:a5:d7: f8:86:af:c7:e6:6d:40:75:b3:96:1a:c2:6d:11:54: d8:71:01:54:22:1c:a7:57:f1:0e:b9:cf:59:ef:05: 83:72:af:3a:e0:49:8a:b5:a9:fe:86:56:1b:86:f0: be:52:80:9d:01:b1:b9:80:55:33:b3:21:c7:84:12: 16:b9:d8:d9:5b:3d:91:37:66:77:be:3b:de:17:4a: 4f:f0:32:00:e2:9d:d3:dd:a3:05:b8:d6:f1:f8:f8: aa:6e:3b:52:b6:f1:48:32:e5:82:a8:09:77:7a:d4: b9:48:4e:bf:92:81:5d:7c:17:c7:7a:2f:78:f6:8f: 58:66:2c:cc:02:5d:7d:0c:a8:c2:a7:d0:06:38:20: 41:a9:b2:f0:11:3f:87:fc:69:87:dd:2a:bb:68:6d: 73:57:37:f4:de:3a:b7:f9:c7:ac:07:85:f8:64:aa: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:41:60:27:3E:8C:D0:8A:32:35:F2:6A:08:22:CF:05:99:BC:D5 X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2e:c4:44:07:1e:68:8b:be:fb:58:ad:d5:b9:46:58:01:cb: 55:a5:98:4f:d5:3e:44:c7:12:17:a8:7c:56:47:72:8e:21:b3: ca:51:ef:d5:77:cc:3f:0e:73:72:f2:54:61:75:d7:78:6f:a1: ed:13:f6:a5:bf:12:81:c1:6d:3e:53:78:aa:3a:83:e7:78:62: ef:56:f1:ea:9a:4a:17:b9:ee:1a:02:ef:ba:5c:6d:1b:d3:19: 4c:ff:e2:70:20:53:13:89:d9:4a:3c:b8:27:a7:0b:fa:e6:b2: cb:77:b9:78:2f:7c:a0:ca:c6:4f:8f:26:51:c2:71:ee:8d:71: 78:ea:b1:29:7c:37:e8:a1:89:6d:f6:e9:d5:0a:d4:8b:06:25: 0a:d5:a2:fb:1e:56:ca:de:ec:80:aa:e6:ae:f3:aa:f6:8f:f9: 9a:9c:81:64:76:8f:a5:00:0a:61:54:8a:9a:c8:13:56:0d:11: 87:57:1f:3b:3f:43:8e:f2:3c:05:3d:89:92:1d:9a:6e:3c:70: a2:94:f5:99:da:1a:15:09:88:ff:df:61:39:b7:43:85:ae:e0: 32:e1:a0:36:02:d2:d5:ea:30:e8:f2:9c:c1:a0:5e:2a:85:37: 30:05:d2:2c:3b:13:2d:e4:db:05:11:e6:23:0d:0a:85:be:14: 0e:7f:e5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjUwNDI1MDMyNTI3WhcNMjUwNTAyMDMyNTI3WjAYMRYwFAYD VQQDEw02ODBiMDBhNy02NDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QA8E1XaD3s/hNeQdNUVH9ObgEnoWIZf+B1OaiGDQMZ+cc24SbQaWTliV915 ueit3mXFT61muIK4Yn4XtOxqO5XlrKwzcDXDi12hr4aw3h5Ur51p3PdApdf4hq/H 5m1AdbOWGsJtEVTYcQFUIhynV/EOuc9Z7wWDcq864EmKtan+hlYbhvC+UoCdAbG5 gFUzsyHHhBIWudjZWz2RN2Z3vjveF0pP8DIA4p3T3aMFuNbx+PiqbjtStvFIMuWC qAl3etS5SE6/koFdfBfHei949o9YZizMAl19DKjCp9AGOCBBqbLwET+H/GmH3Sq7 aG1zVzf03jq3+cesB4X4ZKr5WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKEQWAn PozQijI18moIIs8FmbzVMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2LsREBx5oi777WK3VuUZYActVpZhP1T5ExxIXqHxWR3KOIbPKUe/V d8w/DnNy8lRhddd4b6HtE/alvxKBwW0+U3iqOoPneGLvVvHqmkoXue4aAu+6XG0b 0xlM/+JwIFMTidlKPLgnpwv65rLLd7l4L3ygysZPjyZRwnHujXF46rEpfDfooYlt 9unVCtSLBiUK1aL7HlbK3uyAquau86r2j/manIFkdo+lAAphVIqayBNWDRGHVx87 P0OO8jwFPYmSHZpuPHCilPWZ2hoVCYj/32E5t0OFruAy4aA2AtLV6jDo8pzBoF4q hTcwBdIsOxMt5NsFEeYjDQqFvhQOf+Xg -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:19 2025 by rpki-client on console.sobornost.net