$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: I2y7aslxvzXeXenFbrl13Xr/YL6qTwr67zQA7SdYlls= Subject key identifier: FB:48:17:14:2D:0B:6C:2D:17:FC:F4:77:C4:63:84:90:92:06:14:24 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 8A Signing time: Sun 27 Apr 2025 05:19:24 +0000 Manifest this update: Sun 27 Apr 2025 05:19:23 +0000 Manifest next update: Sun 04 May 2025 05:19:23 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: VWJO3QV/+JeBwQuct4rWP/Z1NUPieTqFAqodqVX4mLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Apr 27 05:19:23 2025 GMT Not After : May 4 05:19:23 2025 GMT Subject: CN=680dbe5b-c228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:8c:a8:1c:b3:4d:72:7f:03:3c:cf:ac:8e: 6c:9c:65:4a:08:96:5b:95:52:18:05:79:a6:1d:77: b7:0e:5f:6f:a7:76:0b:e1:65:7f:47:ba:ea:91:d9: 8b:e8:f8:5f:44:5a:71:be:d7:4c:5a:a8:5d:49:f8: 1d:ee:70:00:2c:96:f0:b3:7e:66:c1:71:d1:3e:b7: 76:05:83:e8:50:b3:fe:45:4b:79:31:3f:91:7d:cc: 13:b2:4d:fa:ed:a8:1c:b3:f9:02:9d:a2:bf:87:82: 97:69:c9:e9:9f:85:52:e0:91:af:c7:8b:95:c1:35: ac:bf:5f:85:cd:4d:ce:fe:c7:61:a7:79:51:d6:1d: 52:79:23:2e:11:80:ee:b1:db:7f:a6:9b:fb:86:5d: d1:bd:45:9d:cd:d0:d4:0e:a7:58:c6:e9:73:df:6f: d2:6d:8c:2a:a3:3d:df:4c:5d:85:71:aa:ae:dc:b1: 56:6d:c0:6f:a5:92:94:27:69:3b:8a:d3:1e:89:9d: 7c:7f:e1:32:3d:27:d1:1c:e0:00:61:f9:03:f3:b7: 9c:91:8e:3d:e0:27:dc:dc:ad:40:23:b5:9e:68:7b: 5b:eb:ec:42:d3:69:3c:25:73:38:f6:67:f4:8e:03: 8a:42:ad:97:43:cb:c5:8f:a7:a5:69:16:cf:7b:5d: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:17:14:2D:0B:6C:2D:17:FC:F4:77:C4:63:84:90:92:06:14:24 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:50:71:2e:27:9a:0c:47:a8:15:e4:a8:7c:62:b4:5b:cb:5a: 6b:85:5c:38:13:79:7d:6e:b4:f8:50:79:37:91:43:dd:57:88: d0:dd:3b:36:40:7e:10:32:e8:e8:1c:5e:b2:bc:03:ec:50:5a: 24:31:44:51:e1:04:1b:bd:2d:67:f8:06:c3:14:c1:63:bd:75: da:61:78:26:cc:ea:04:83:7d:94:b0:27:01:bb:54:4e:87:80: 3c:79:66:d7:f3:f5:34:f0:ca:8d:22:dd:54:d1:86:87:dd:2c: b0:0e:88:26:72:b9:f5:4c:1d:a0:a5:f3:08:c5:e9:4f:3e:aa: 23:f7:f6:d1:ee:ca:90:63:07:16:3c:83:b5:f2:c2:f7:c8:3b: 42:00:90:78:aa:e5:aa:a7:68:ef:4e:2e:5a:c2:b6:95:70:ad: 7d:b3:4d:07:07:6c:8c:25:e5:eb:c0:93:b9:13:97:6c:18:ae: 86:5a:c8:b9:eb:aa:34:38:cd:53:59:0a:9c:d7:ce:24:22:36: e5:bf:00:16:3c:e5:53:76:1c:60:41:dd:67:62:b9:e0:bb:f0: 83:f0:c4:a6:1b:8e:5d:aa:63:57:66:1c:63:f6:09:e2:a5:1d: a4:34:0a:05:4d:40:3d:ec:ef:ea:8d:82:73:3d:f6:95:84:59: c1:74:d3:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwNDI3MDUxOTIzWhcNMjUwNTA0MDUxOTIzWjAYMRYwFAYD VQQDEw02ODBkYmU1Yi1jMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllGMqByzTXJ/AzzPrI5snGVKCJZblVIYBXmmHXe3Dl9vp3YL4WV/R7rqkdmL 6PhfRFpxvtdMWqhdSfgd7nAALJbws35mwXHRPrd2BYPoULP+RUt5MT+RfcwTsk36 7agcs/kCnaK/h4KXacnpn4VS4JGvx4uVwTWsv1+FzU3O/sdhp3lR1h1SeSMuEYDu sdt/ppv7hl3RvUWdzdDUDqdYxulz32/SbYwqoz3fTF2Fcaqu3LFWbcBvpZKUJ2k7 itMeiZ18f+EyPSfRHOAAYfkD87eckY494Cfc3K1AI7WeaHtb6+xC02k8JXM49mf0 jgOKQq2XQ8vFj6elaRbPe10+QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtIFxQt C2wtF/z0d8RjhJCSBhQkMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3UHEuJ5oMR6gV5Kh8YrRby1prhVw4E3l9brT4UHk3kUPdV4jQ3Ts2 QH4QMujoHF6yvAPsUFokMURR4QQbvS1n+AbDFMFjvXXaYXgmzOoEg32UsCcBu1RO h4A8eWbX8/U08MqNIt1U0YaH3SywDogmcrn1TB2gpfMIxelPPqoj9/bR7sqQYwcW PIO18sL3yDtCAJB4quWqp2jvTi5awraVcK19s00HB2yMJeXrwJO5E5dsGK6GWsi5 66o0OM1TWQqc184kIjblvwAWPOVTdhxgQd1nYrngu/CD8MSmG45dqmNXZhxj9gni pR2kNAoFTUA97O/qjYJzPfaVhFnBdNNx -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net