$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: /s49SfCsHSlyClXM9xqxZYpk0Aajt85YmVExzEOXBnE= Subject key identifier: 2F:C9:17:AB:0A:63:8C:F4:5F:EC:BB:5D:74:BB:B9:2D:CD:62:13:D8 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 1521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 14EA Signing time: Mon 28 Apr 2025 17:04:39 +0000 Manifest this update: Mon 28 Apr 2025 17:04:39 +0000 Manifest next update: Mon 05 May 2025 17:04:39 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: 7ANEKGl2FNfBk7plbBoxg+vy89Y/spMVmy8PGINPIUY=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: iZLozjkQrVx5Rip88rCFEDljYu/qf4k+eN+MjfIimJg=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 22WycCO2D6eQ7c9Ztptk+GoHCg5R5HirhILZQLigfu4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: kECSc2k2CaiRsvSFGXMs8HjoZv1f2IbszM5+85kIArk=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A8fyC9uXabeEBw+br5m/fOOprlHijT/2fFIlwKoMBqg=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: CiXjYFbJpNi1ITHCA0SILZGRQg5iqEkM1Bq1AJzf7WQ=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: w7JrosLb1zf7bhUbagql/3rcPRQ0GPFS/s48tA3r0tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5409 (0x1521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Apr 28 17:04:39 2025 GMT Not After : May 5 17:04:39 2025 GMT Subject: CN=680fb527-3524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:93:85:e2:4c:1b:83:11:62:80:22:67:d5: 20:87:31:e7:fe:bc:80:d8:83:12:1c:e6:40:a9:10: d5:29:34:00:25:26:86:cc:bf:1b:96:4e:54:c2:b5: 62:40:ac:d6:9c:b6:ed:bc:42:8c:b4:6f:1a:14:bc: 6d:c0:11:cc:6f:3d:d7:04:6d:68:4d:58:08:d9:7c: 88:4d:29:b4:fd:f2:0c:b9:8b:02:0a:bb:c7:2f:33: ef:de:21:6a:d1:60:a6:24:52:20:ab:8e:4c:a2:a5: cc:07:b1:6c:aa:b5:ef:28:a1:50:ea:b3:9d:82:f6: 16:01:e9:80:18:01:a8:c0:8e:40:29:6b:42:79:40: 8c:4e:1a:11:0e:67:d3:9f:f3:64:15:97:c3:33:95: 66:e0:6c:fd:e7:fc:c3:de:ff:0d:a3:e5:a6:27:95: 98:4f:9b:e8:37:6e:7f:82:b4:5b:30:00:42:7d:c1: a2:c0:3a:19:9f:a5:95:65:83:b6:c7:d0:2a:da:d3: 8a:b5:3d:99:73:51:9c:01:fd:ac:3c:dc:81:3b:70: 84:6c:71:bd:47:09:18:25:f0:fe:38:b9:99:42:95: a4:5a:ec:ff:d1:ac:c9:dd:26:01:9f:c4:ce:2c:60: 28:9b:2a:1a:41:ef:02:cc:7a:e0:17:b9:75:b7:e1: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C9:17:AB:0A:63:8C:F4:5F:EC:BB:5D:74:BB:B9:2D:CD:62:13:D8 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:ac:c1:fc:0b:52:2c:21:2e:8b:e9:8b:70:b0:70:34:98: 69:c6:ad:38:bc:86:df:8a:c8:fd:40:ed:11:70:12:e1:1e:c1: 81:25:db:d3:c6:76:ef:f8:33:00:18:72:7f:61:ad:56:c1:3d: 2a:2a:a1:6e:48:0f:9c:fd:27:21:21:35:ca:7e:93:d0:ef:8f: 5f:88:db:5e:21:67:72:bc:06:c2:14:ba:52:84:a0:a9:d2:2e: c1:17:ae:fa:83:0d:af:bc:96:0d:ee:7d:3b:e2:8c:57:cb:64: b4:f5:7f:a4:87:27:bf:8f:a6:3d:bb:86:ec:4c:e8:10:32:76: 53:3c:21:ce:74:7b:d8:7f:bd:b8:7d:cd:a0:9b:4b:00:0d:6d: ff:78:2d:80:2e:1e:9c:cb:9b:cd:27:42:da:7e:fd:5b:c1:7d: 4c:55:76:3e:7b:da:bd:96:48:6e:85:4c:57:60:72:fd:4e:d0: 45:42:35:59:59:21:64:c1:41:bd:b5:10:36:c1:81:e7:9c:d1: 45:f9:b2:12:0a:e1:93:2c:3d:b6:9f:4f:82:a3:32:77:10:dc: 2f:f4:4e:5c:6f:5f:d1:59:a6:31:b6:09:15:f3:32:87:20:f2: 58:47:2f:22:be:39:bb:f1:b8:a4:f8:16:cf:18:da:26:93:e2: 95:06:04:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwNDI4MTcwNDM5WhcNMjUwNTA1MTcwNDM5WjAYMRYwFAYD VQQDEw02ODBmYjUyNy0zNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQOTheJMG4MRYoAiZ9UghzHn/ryA2IMSHOZAqRDVKTQAJSaGzL8blk5UwrVi QKzWnLbtvEKMtG8aFLxtwBHMbz3XBG1oTVgI2XyITSm0/fIMuYsCCrvHLzPv3iFq 0WCmJFIgq45MoqXMB7FsqrXvKKFQ6rOdgvYWAemAGAGowI5AKWtCeUCMThoRDmfT n/NkFZfDM5Vm4Gz95/zD3v8No+WmJ5WYT5voN25/grRbMABCfcGiwDoZn6WVZYO2 x9Aq2tOKtT2Zc1GcAf2sPNyBO3CEbHG9RwkYJfD+OLmZQpWkWuz/0azJ3SYBn8TO LGAomyoaQe8CzHrgF7l1t+HktwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/JF6sK Y4z0X+y7XXS7uS3NYhPYMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGlazB/AtSLCEui+mLcLBwNJhpxq04vIbfisj9QO0RcBLhHsGBJdvT xnbv+DMAGHJ/Ya1WwT0qKqFuSA+c/SchITXKfpPQ749fiNteIWdyvAbCFLpShKCp 0i7BF676gw2vvJYN7n074oxXy2S09X+khye/j6Y9u4bsTOgQMnZTPCHOdHvYf724 fc2gm0sADW3/eC2ALh6cy5vNJ0Lafv1bwX1MVXY+e9q9lkhuhUxXYHL9TtBFQjVZ WSFkwUG9tRA2wYHnnNFF+bISCuGTLD22n0+CozJ3ENwv9E5cb1/RWaYxtgkV8zKH IPJYRy8ivjm78bik+BbPGNomk+KVBgRz -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:16 2025 by rpki-client on console.sobornost.net