$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: m4a9gYF37wfotJkQgYFUd/pQtF9K97k9zkVj511e/to= Subject key identifier: 77:63:F1:FD:9A:4D:48:7D:C2:25:90:72:74:BC:F0:A9:5B:3E:ED:2E Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 3489 Signing time: Mon 28 Apr 2025 15:12:13 +0000 Manifest this update: Mon 28 Apr 2025 15:12:13 +0000 Manifest next update: Mon 05 May 2025 15:12:13 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: UKkk/dWLf1z6InQ+xzYtwrlHxpVOss4F2SyBXpL/UpY=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Apr 28 15:12:13 2025 GMT Not After : May 5 15:12:13 2025 GMT Subject: CN=680f9acd-1ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:1d:de:b5:9c:e2:40:e4:d7:44:fc:5c:f2: 3d:41:2a:bb:91:70:00:d4:4f:33:71:f3:c6:ab:9b: d8:b9:79:8a:96:c7:c8:eb:0f:ac:8b:02:5f:43:55: ac:c5:c5:72:3b:81:db:b1:db:b5:76:06:31:cb:b2: d2:5f:b6:24:04:c0:f4:33:4a:7f:f0:07:64:9b:48: 80:62:78:3e:15:f2:9c:cb:d4:80:a9:59:7c:04:64: 32:20:a9:66:22:7f:e6:ed:ca:09:47:08:e9:ee:19: 74:ee:10:31:90:c4:fb:d2:41:6f:ee:46:52:b2:28: 91:a3:b6:f3:8e:f7:d2:6e:5c:a7:c1:31:39:26:48: bf:ac:48:90:de:2d:8e:b8:c9:47:56:83:20:65:2a: 9a:56:e7:a3:a2:80:de:e0:f9:12:6c:76:a6:a2:09: 82:9a:1e:56:f7:b1:55:9f:9c:7d:9f:54:0c:d9:44: ef:0b:0a:83:12:79:53:20:86:dc:2e:80:57:53:51: 9d:3d:8c:2d:2a:cd:ca:64:98:fe:c3:bb:3d:00:1d: 9e:de:63:74:04:61:c3:d4:43:5c:3f:a3:10:ec:6b: 7b:86:17:19:12:cb:54:f9:ba:57:a0:5c:b4:67:81: f5:76:85:53:79:5a:3d:0a:63:82:97:9b:d4:a7:35: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:F1:FD:9A:4D:48:7D:C2:25:90:72:74:BC:F0:A9:5B:3E:ED:2E X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e3:00:e7:40:7e:13:19:80:a5:07:ec:a1:58:6d:2b:48:b3: 00:7d:02:f8:0b:af:ce:1c:16:6b:0c:50:8f:5a:2b:00:a3:53: 04:55:19:65:9a:ea:39:a3:b3:c0:e0:30:e0:8f:9e:0a:49:8d: f8:30:47:c1:83:42:7a:0c:61:cb:7b:d1:84:a6:6c:71:24:ec: 93:65:39:35:df:a7:85:48:5a:32:c3:b8:dc:11:bd:5c:c2:19: a1:3f:0f:68:8a:51:21:1c:05:96:d9:d0:67:4c:f9:67:78:11: 48:cf:95:07:03:db:e8:83:52:0d:3f:e4:8c:87:af:e4:ab:2e: 33:11:6d:22:ef:0a:99:e8:a5:70:9e:c5:7d:d8:17:9a:34:c9: 3f:f8:69:c8:73:6d:a7:a2:c3:82:b4:ef:d1:2e:d4:ea:13:5d: dc:23:6f:95:39:6b:3a:66:a0:ec:e7:64:82:b7:02:63:b4:f8: fa:32:d3:1d:38:d6:7f:1d:1e:99:8b:ae:5f:9c:b1:30:fc:12: b4:78:9d:89:a0:cf:75:23:b7:a9:48:09:ad:2a:1f:46:ab:2e: 52:62:6d:03:a7:a4:b6:f8:67:c0:82:07:52:19:6f:18:2a:92: b6:79:6e:f3:c0:b1:50:2c:61:7d:a8:4b:54:08:5c:e4:7e:5b: 59:6c:e1:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUwNDI4MTUxMjEzWhcNMjUwNTA1MTUxMjEzWjAYMRYwFAYD VQQDEw02ODBmOWFjZC0xYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWgd3rWc4kDk10T8XPI9QSq7kXAA1E8zcfPGq5vYuXmKlsfI6w+siwJfQ1Ws xcVyO4Hbsdu1dgYxy7LSX7YkBMD0M0p/8Adkm0iAYng+FfKcy9SAqVl8BGQyIKlm In/m7coJRwjp7hl07hAxkMT70kFv7kZSsiiRo7bzjvfSblynwTE5Jki/rEiQ3i2O uMlHVoMgZSqaVuejooDe4PkSbHamogmCmh5W97FVn5x9n1QM2UTvCwqDEnlTIIbc LoBXU1GdPYwtKs3KZJj+w7s9AB2e3mN0BGHD1ENcP6MQ7Gt7hhcZEstU+bpXoFy0 Z4H1doVTeVo9CmOCl5vUpzVmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdj8f2a TUh9wiWQcnS88KlbPu0uMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm4wDnQH4TGYClB+yhWG0rSLMAfQL4C6/OHBZrDFCPWisAo1MEVRll muo5o7PA4DDgj54KSY34MEfBg0J6DGHLe9GEpmxxJOyTZTk136eFSFoyw7jcEb1c whmhPw9oilEhHAWW2dBnTPlneBFIz5UHA9vog1INP+SMh6/kqy4zEW0i7wqZ6KVw nsV92BeaNMk/+GnIc22nosOCtO/RLtTqE13cI2+VOWs6ZqDs52SCtwJjtPj6MtMd ONZ/HR6Zi65fnLEw/BK0eJ2JoM91I7epSAmtKh9Gqy5SYm0Dp6S2+GfAggdSGW8Y KpK2eW7zwLFQLGF9qEtUCFzkfltZbOFy -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:07 2025 by rpki-client on console.sobornost.net