$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: iztFGWk4u/0gDM9rjSHYRPR6sq8MoWQFk8ISEvM5HxQ= Subject key identifier: 43:8A:BF:97:AD:E9:5A:F2:A1:7C:37:AC:22:C3:43:61:3C:37:57:F0 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: 9D Signing time: Sun 27 Apr 2025 05:05:54 +0000 Manifest this update: Sun 27 Apr 2025 05:05:53 +0000 Manifest next update: Sun 04 May 2025 05:05:53 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: 9xm8fbgLLfCKcBfMN+dClVqYlPOe4h7X43aKmgxGcTk=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Apr 27 05:05:53 2025 GMT Not After : May 4 05:05:53 2025 GMT Subject: CN=680dbb31-55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:89:fe:7f:a4:b4:7e:6f:d3:c7:1a:e0:03: c0:db:24:bc:72:4b:e2:78:c6:7a:06:6d:ce:77:c7: d0:cb:ce:9c:02:72:d3:8e:d5:0f:7f:2d:b7:89:20: bf:cc:a9:fe:e4:5c:6c:6d:78:f4:bc:e9:ed:c0:1c: cd:ab:bd:f1:cf:2d:1b:bd:4d:6a:76:73:5e:3a:6f: 64:ad:c2:20:97:81:5e:e2:ab:44:ef:02:07:7c:b9: 10:8c:c4:b1:78:6a:ea:36:f4:70:43:7c:da:64:7a: a1:aa:0e:66:67:52:56:7d:40:4f:1c:de:be:ef:1a: de:94:a4:f6:4f:76:03:0e:25:38:eb:bf:14:ff:8c: 28:0c:c8:c7:99:9e:00:0f:e0:e5:13:79:b1:6b:1d: 12:32:a1:c2:d1:ab:03:ff:ad:11:13:1f:91:ce:53: 65:31:e8:b1:5e:f9:9a:08:4f:07:b1:e3:2c:39:7e: 95:35:a7:cb:a9:a8:5f:4f:ac:fe:45:6e:12:46:ec: bc:96:f8:01:cf:c9:c8:0e:f9:eb:3f:22:5b:f6:ed: 69:7d:b7:13:88:4d:27:b3:fe:56:36:db:3e:e9:e1: 31:33:33:34:46:6a:62:54:d1:1a:e3:80:e7:1d:3b: bf:6e:99:81:68:22:40:37:ed:33:6c:08:f9:a9:88: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:BF:97:AD:E9:5A:F2:A1:7C:37:AC:22:C3:43:61:3C:37:57:F0 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e1:7e:86:4b:85:e9:dd:05:0c:00:77:54:ea:9c:43:1e:56: 26:80:d1:2d:70:b5:d1:14:71:f9:8e:83:2d:57:5a:40:52:4c: ce:65:f4:15:7b:a5:93:13:6e:57:44:da:91:e4:e4:0f:db:cf: 2f:72:75:84:9e:89:7f:2a:50:46:5e:d7:91:b8:f2:45:97:d5: 65:ea:4e:5a:ae:ff:34:89:d8:ce:de:ba:35:82:18:2a:6a:7b: 81:e3:92:8e:e3:6a:51:f5:88:92:b9:12:a9:86:05:76:02:62: 97:5c:93:e9:0d:97:de:6d:01:9d:05:15:00:71:80:ce:0d:d4: 20:ae:8b:92:10:4f:47:8b:67:f9:85:c2:21:c6:48:24:8e:41: 4c:5e:ee:39:26:6a:a7:fe:aa:52:ff:b0:ec:6a:e4:c8:38:c4: ce:39:32:ef:3d:11:2e:90:f2:97:3f:9f:2a:d4:86:0d:68:e1: ac:97:87:0d:99:22:b5:00:0a:47:23:14:f0:25:5a:dc:80:4f: 6e:0f:29:bf:cf:be:12:40:bc:6e:60:1e:57:d2:21:25:7d:46: 99:76:d2:85:11:e2:11:b0:3c:e3:99:97:2f:27:92:62:5f:29: 66:f7:a6:2d:ec:c0:f5:a0:47:af:81:cc:58:e6:9f:24:3a:f3: b4:07:55:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNDI3MDUwNTUzWhcNMjUwNTA0MDUwNTUzWjAYMRYwFAYD VQQDEw02ODBkYmIzMS01NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOiJ/n+ktH5v08ca4APA2yS8ckvieMZ6Bm3Od8fQy86cAnLTjtUPfy23iSC/ zKn+5FxsbXj0vOntwBzNq73xzy0bvU1qdnNeOm9krcIgl4Fe4qtE7wIHfLkQjMSx eGrqNvRwQ3zaZHqhqg5mZ1JWfUBPHN6+7xrelKT2T3YDDiU4678U/4woDMjHmZ4A D+DlE3mxax0SMqHC0asD/60REx+RzlNlMeixXvmaCE8HseMsOX6VNafLqahfT6z+ RW4SRuy8lvgBz8nIDvnrPyJb9u1pfbcTiE0ns/5WNts+6eExMzM0RmpiVNEa44Dn HTu/bpmBaCJAN+0zbAj5qYgd7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOKv5et 6VryoXw3rCLDQ2E8N1fwMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB74X6GS4Xp3QUMAHdU6pxDHlYmgNEtcLXRFHH5joMtV1pAUkzOZfQV e6WTE25XRNqR5OQP288vcnWEnol/KlBGXteRuPJFl9Vl6k5arv80idjO3ro1ghgq anuB45KO42pR9YiSuRKphgV2AmKXXJPpDZfebQGdBRUAcYDODdQgrouSEE9Hi2f5 hcIhxkgkjkFMXu45Jmqn/qpS/7DsauTIOMTOOTLvPREukPKXP58q1IYNaOGsl4cN mSK1AApHIxTwJVrcgE9uDym/z74SQLxuYB5X0iElfUaZdtKFEeIRsDzjmZcvJ5Ji Xylm96Yt7MD1oEevgcxY5p8kOvO0B1Wo -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net