$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: lbeAoP64MkVt+DiTVFKwdRfDvgCklnLXwlzPZBWCsus= Subject key identifier: C1:AD:DF:00:97:84:C5:CA:AB:8B:8B:24:D5:D2:8C:F7:C1:F4:4E:7F Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 01DD Signing time: Sun 27 Apr 2025 01:47:30 +0000 Manifest this update: Sun 27 Apr 2025 01:47:29 +0000 Manifest next update: Sun 04 May 2025 01:47:29 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: LM97zMQQe9tiBynCYulm8+vqGGvniNs/SsD5AXbrG8I=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Apr 27 01:47:29 2025 GMT Not After : May 4 01:47:29 2025 GMT Subject: CN=680d8cb1-b9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:36:02:04:1c:a4:0f:13:0d:84:a6:70:23: ea:be:0b:fc:33:f1:3a:ae:c2:89:71:b7:84:85:33: ce:37:92:1e:be:f4:22:13:7d:f1:d3:38:87:f4:87: 85:d4:b7:79:14:69:c9:64:5b:28:96:ca:aa:90:6a: 8f:ad:07:85:05:41:0b:61:21:3c:02:ff:14:bc:15: 4e:ed:aa:5b:7b:a4:38:0c:29:de:55:50:3b:c3:2e: e5:2e:82:aa:19:ad:4b:55:45:ad:95:e8:e5:34:50: c8:c9:a9:c9:37:f2:9d:d6:8c:0f:66:48:d1:54:82: 78:bd:50:00:3a:df:05:f1:f7:06:30:39:d6:ac:04: 3b:50:33:d8:79:9b:49:44:57:85:69:45:73:2f:d3: 95:62:1c:ad:0e:4d:a5:49:18:0f:e8:d1:84:9d:bc: e8:de:e2:9c:63:68:f1:a6:ff:5d:6e:f2:99:0e:64: 07:5f:e6:28:a4:e2:da:bc:a2:83:2c:b2:34:83:56: 03:60:1f:ff:95:07:30:56:9b:3e:78:1d:3d:04:cd: 78:1d:a4:0f:06:b1:39:a3:84:03:48:5e:9f:23:c3: 80:44:74:a7:93:9b:3e:e7:a7:d6:80:58:b1:c0:7f: 92:73:99:f2:0d:25:99:0b:13:f2:b6:b3:ae:f2:c9: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AD:DF:00:97:84:C5:CA:AB:8B:8B:24:D5:D2:8C:F7:C1:F4:4E:7F X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:83:88:c4:57:08:e7:46:b9:6a:3c:0a:6d:e8:12:ad:d1:81: 18:5e:90:2f:1b:62:e4:7f:bd:a0:2b:ba:0b:5d:67:d5:c1:42: 74:38:b6:8d:1e:89:a6:d5:66:b3:dc:1d:0c:3a:8b:88:28:85: 13:b3:ab:4f:ca:b4:7c:1b:be:3a:2b:87:07:cc:55:a2:a7:8a: 8e:5f:bf:ff:9d:c3:d9:b0:8c:0b:82:d5:ad:3f:6f:92:9d:bb: 53:fd:9d:10:c6:c9:e1:dc:a3:66:3a:ff:1c:88:98:43:7e:03: 99:52:9f:60:8e:96:e4:99:d2:69:9d:7f:73:36:b3:be:eb:5c: 44:10:35:8e:f2:80:ab:d6:d8:6f:be:4e:23:9d:d2:e9:0d:b3: 1c:b5:14:78:f7:8e:85:1c:2d:fa:cd:eb:d3:cf:58:86:1f:87: 05:19:f4:47:58:3e:e0:01:d8:8f:78:84:09:ac:09:7f:f8:c5: 0c:74:0d:db:56:03:21:88:b4:9a:87:00:20:3a:96:34:8c:39: 38:29:e4:68:cc:4b:9a:35:e0:d0:4a:57:70:af:3e:46:bc:5d: 6e:5f:e1:06:02:5d:2d:21:4a:df:f1:9e:3b:5a:19:73:68:17: e4:d8:6f:9a:8c:94:d0:a8:48:13:55:a3:3c:ba:31:64:f0:31: 1a:09:96:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUwNDI3MDE0NzI5WhcNMjUwNTA0MDE0NzI5WjAYMRYwFAYD VQQDEw02ODBkOGNiMS1iOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK82AgQcpA8TDYSmcCPqvgv8M/E6rsKJcbeEhTPON5IevvQiE33x0ziH9IeF 1Ld5FGnJZFsolsqqkGqPrQeFBUELYSE8Av8UvBVO7apbe6Q4DCneVVA7wy7lLoKq Ga1LVUWtlejlNFDIyanJN/Kd1owPZkjRVIJ4vVAAOt8F8fcGMDnWrAQ7UDPYeZtJ RFeFaUVzL9OVYhytDk2lSRgP6NGEnbzo3uKcY2jxpv9dbvKZDmQHX+YopOLavKKD LLI0g1YDYB//lQcwVps+eB09BM14HaQPBrE5o4QDSF6fI8OARHSnk5s+56fWgFix wH+Sc5nyDSWZCxPytrOu8slO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGt3wCX hMXKq4uLJNXSjPfB9E5/MB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYg4jEVwjnRrlqPApt6BKt0YEYXpAvG2Lkf72gK7oLXWfVwUJ0OLaN Homm1Waz3B0MOouIKIUTs6tPyrR8G746K4cHzFWip4qOX7//ncPZsIwLgtWtP2+S nbtT/Z0Qxsnh3KNmOv8ciJhDfgOZUp9gjpbkmdJpnX9zNrO+61xEEDWO8oCr1thv vk4jndLpDbMctRR4946FHC36zevTz1iGH4cFGfRHWD7gAdiPeIQJrAl/+MUMdA3b VgMhiLSahwAgOpY0jDk4KeRozEuaNeDQSldwrz5GvF1uX+EGAl0tIUrf8Z47Whlz aBfk2G+ajJTQqEgTVaM8ujFk8DEaCZZ9 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net