$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: j7FCS5t42fRkdLNYZl2CuQrQvdtuWrmEUiXrUOBpdXE= Subject key identifier: AE:3D:48:2E:BA:3A:FC:93:ED:2C:73:BE:A6:5D:F9:18:10:BD:DE:9C Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: A9 Signing time: Fri 25 Apr 2025 05:10:56 +0000 Manifest this update: Fri 25 Apr 2025 05:10:55 +0000 Manifest next update: Fri 02 May 2025 05:10:55 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: YWTJhmyeWmDgSZozN7JqKBlShV/e9ZVPhOWBbWh3gC8=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Apr 25 05:10:55 2025 GMT Not After : May 2 05:10:55 2025 GMT Subject: CN=680b1960-1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:1b:8d:af:dd:0e:be:25:37:90:be:a2:4b: b7:d8:41:d8:92:f0:68:bd:9e:b2:2a:7e:61:bd:a2: 4a:07:c1:08:b4:2e:bc:53:b5:6a:e2:e4:e0:b1:56: a4:79:90:b3:6d:57:9a:81:f2:cd:93:3e:bd:40:1d: f8:d5:89:45:b8:61:65:d0:e8:b8:b8:36:92:2e:c6: 8f:4f:ec:8b:9a:64:e8:6c:cd:10:66:55:ad:ae:c7: 74:cf:ec:0f:52:89:5d:36:b5:aa:e5:5d:86:b9:af: e3:cb:b6:ee:c8:c2:b4:42:72:b3:4d:da:46:36:95: af:8d:f9:41:6d:ad:95:93:fe:7f:88:79:90:bd:eb: 2a:bc:fe:4a:9e:e4:0f:8c:25:d8:90:f8:54:42:93: b7:24:90:7b:59:53:f6:6b:c7:e2:9a:9f:8b:8d:8d: 6f:72:72:3c:cc:9f:42:1b:2b:53:c1:28:39:cf:b5: ba:d1:7f:98:4c:26:d0:c6:2f:d5:ae:89:ee:7f:fa: ef:68:42:09:39:d7:d9:1f:f9:d9:31:2c:39:0f:97: b4:e8:69:58:bd:6d:1e:94:42:70:f3:b8:94:64:b4: 96:38:f8:80:12:f7:32:51:1f:da:97:9f:31:6c:92: 72:00:66:8a:a8:76:4a:e2:8a:60:25:7d:2f:63:ff: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3D:48:2E:BA:3A:FC:93:ED:2C:73:BE:A6:5D:F9:18:10:BD:DE:9C X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a3:55:78:9c:3e:48:56:10:bd:09:c5:7e:5a:16:fb:7a:75: 0f:3d:7f:d3:95:e3:3e:ab:ac:82:5f:19:99:a8:29:64:bc:33: 74:08:38:cc:79:7d:f2:2a:54:17:01:e3:ba:a7:9d:e2:fe:02: ba:af:95:10:6a:6a:96:e4:0b:47:fa:50:5a:d5:57:a9:81:a2: f8:f3:39:bd:31:7e:f5:ed:76:91:f5:22:51:2d:d1:f0:ca:84: 8d:32:8d:3d:b8:6a:84:7c:6e:e8:73:56:7d:98:1e:6f:41:f8: 81:e4:01:2f:6f:8d:b4:5d:75:cc:0b:d0:ca:a8:b1:f2:26:1b: 93:25:93:4d:9d:b9:52:67:17:bc:73:72:f0:5c:e7:97:ab:e9: a8:2a:52:74:f6:7b:c9:6c:8e:12:60:c9:38:ec:2e:89:cc:2c: 1f:dd:f3:f5:e3:52:ba:3e:03:7e:48:77:ef:b8:b8:b7:17:a1: c7:01:38:61:62:f7:47:a8:8c:26:48:02:0c:f9:e6:62:0c:c6: ce:1f:41:6d:a9:78:fb:a0:b6:e2:c7:9b:2c:27:19:52:c0:59: a9:09:99:35:76:ba:b2:26:42:9f:e6:89:59:dd:b9:ef:2d:6c: 04:d5:01:fd:7a:54:0b:74:5a:5b:af:a7:a3:31:41:b2:3c:85: d0:d8:27:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwNDI1MDUxMDU1WhcNMjUwNTAyMDUxMDU1WjAYMRYwFAYD VQQDEw02ODBiMTk2MC0xZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkEbja/dDr4lN5C+oku32EHYkvBovZ6yKn5hvaJKB8EItC68U7Vq4uTgsVak eZCzbVeagfLNkz69QB341YlFuGFl0Oi4uDaSLsaPT+yLmmTobM0QZlWtrsd0z+wP UoldNrWq5V2Gua/jy7buyMK0QnKzTdpGNpWvjflBba2Vk/5/iHmQvesqvP5KnuQP jCXYkPhUQpO3JJB7WVP2a8fimp+LjY1vcnI8zJ9CGytTwSg5z7W60X+YTCbQxi/V ronuf/rvaEIJOdfZH/nZMSw5D5e06GlYvW0elEJw87iUZLSWOPiAEvcyUR/al58x bJJyAGaKqHZK4opgJX0vY/+1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK49SC66 OvyT7SxzvqZd+RgQvd6cMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBho1V4nD5IVhC9CcV+Whb7enUPPX/TleM+q6yCXxmZqClkvDN0CDjM eX3yKlQXAeO6p53i/gK6r5UQamqW5AtH+lBa1VepgaL48zm9MX717XaR9SJRLdHw yoSNMo09uGqEfG7oc1Z9mB5vQfiB5AEvb420XXXMC9DKqLHyJhuTJZNNnblSZxe8 c3LwXOeXq+moKlJ09nvJbI4SYMk47C6JzCwf3fP141K6PgN+SHfvuLi3F6HHAThh YvdHqIwmSAIM+eZiDMbOH0FtqXj7oLbix5ssJxlSwFmpCZk1drqyJkKf5olZ3bnv LWwE1QH9elQLdFpbr6ejMUGyPIXQ2Cc9 -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:22 2025 by rpki-client on console.sobornost.net