$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: zX/mBrul4Ct6SCnxMvNFu7GRYNA3jHg57Rie+DNdj9E= Subject key identifier: D4:2D:12:FE:0F:44:7D:EC:A5:80:59:49:63:68:C9:45:66:A6:35:08 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 0379 Signing time: Sun 27 Apr 2025 00:34:32 +0000 Manifest this update: Sun 27 Apr 2025 00:34:32 +0000 Manifest next update: Sun 04 May 2025 00:34:32 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: AQdh4a/M0oSxw1en1iThCDV4zRyX4CWFnMYUcvsePRE=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Apr 27 00:34:32 2025 GMT Not After : May 4 00:34:32 2025 GMT Subject: CN=680d7b98-e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:63:b4:77:4b:85:b1:ab:e4:43:c7:d4:a3: 05:37:68:5b:74:ca:fe:11:f6:ed:b1:51:d5:b0:c9: 93:96:95:8f:fe:39:af:a8:f2:ab:a5:57:dc:52:e3: 4a:da:5f:43:68:a1:15:6b:7d:4a:bd:66:5a:8a:98: 17:9c:90:8f:da:1d:d0:d5:4f:a9:08:9f:d3:15:9a: b9:42:2f:b5:dd:66:27:09:b2:ac:34:a0:b5:31:0d: 71:bb:d7:3a:55:68:c1:3d:c4:04:11:b4:cf:70:e4: 14:9d:0b:36:25:cf:ba:e8:31:23:71:5c:3a:96:81: f7:a0:8f:7f:ad:a2:a1:30:ac:33:47:59:c9:92:8c: db:8d:dd:57:d2:a5:72:5d:ed:4e:6a:21:d5:04:e6: de:cb:d1:a1:55:7b:e9:7a:27:eb:91:c3:8c:ec:a8: 07:70:b8:18:49:c6:9d:68:0f:ae:6b:8f:de:80:79: c1:39:6c:42:f7:55:b0:cb:12:75:14:05:2b:9b:37: 35:cc:b9:64:9f:ec:61:fa:00:e8:29:e3:56:d7:ee: 33:64:ec:30:e1:a6:d6:29:2f:45:3b:f4:d1:c4:f9: 1d:1a:cd:9f:f2:0d:6f:8e:aa:8b:07:f9:b5:a1:89: 51:44:4e:cd:7c:7e:7f:04:b3:75:cf:a3:56:6d:3a: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2D:12:FE:0F:44:7D:EC:A5:80:59:49:63:68:C9:45:66:A6:35:08 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:23:fa:6c:d2:93:a6:81:3c:6a:9d:59:20:4b:a0:32:9d: b2:4b:54:70:e4:03:03:d5:1d:2d:3f:ed:c6:4d:43:23:a7:07: f3:1e:0e:4b:b9:3f:17:0c:f4:80:f7:d5:a0:92:ec:92:a8:23: 0a:5d:6d:08:05:34:a9:e5:fe:45:20:63:10:a9:9d:a9:ac:c6: 94:a3:14:5b:db:0e:1d:b0:aa:e6:aa:32:f0:37:97:a3:75:3e: 5e:53:c8:ab:45:8f:cf:ab:ce:98:2a:3b:41:0b:10:97:dc:f1: 2a:a9:61:57:65:8c:20:94:5e:f3:85:63:52:c5:08:c5:07:d3: 50:cc:35:3e:02:65:c4:52:97:9f:81:55:c3:a6:09:8e:14:1e: 03:0e:35:72:28:38:2e:49:68:13:58:4f:90:3d:b9:17:ab:69: c7:fb:ae:65:a7:8c:07:b3:98:a9:2a:f0:2d:c4:a1:74:a0:ba: a8:3f:a3:a9:99:ee:26:9a:ed:da:39:06:1b:c9:f2:dc:2d:b2: 28:4e:41:93:8f:a8:6b:52:02:84:68:aa:2a:7f:c6:7e:5a:b7: 71:51:d8:88:e7:b6:74:03:94:cc:6a:de:13:3d:76:11:79:85: e1:ec:b9:6f:48:70:5e:29:6e:09:54:47:3f:ea:4e:d4:9c:35: ef:77:35:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwNDI3MDAzNDMyWhcNMjUwNTA0MDAzNDMyWjAYMRYwFAYD VQQDEw02ODBkN2I5OC1lNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMBjtHdLhbGr5EPH1KMFN2hbdMr+EfbtsVHVsMmTlpWP/jmvqPKrpVfcUuNK 2l9DaKEVa31KvWZaipgXnJCP2h3Q1U+pCJ/TFZq5Qi+13WYnCbKsNKC1MQ1xu9c6 VWjBPcQEEbTPcOQUnQs2Jc+66DEjcVw6loH3oI9/raKhMKwzR1nJkozbjd1X0qVy Xe1OaiHVBObey9GhVXvpeifrkcOM7KgHcLgYScadaA+ua4/egHnBOWxC91WwyxJ1 FAUrmzc1zLlkn+xh+gDoKeNW1+4zZOww4abWKS9FO/TRxPkdGs2f8g1vjqqLB/m1 oYlRRE7NfH5/BLN1z6NWbTr5uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQtEv4P RH3spYBZSWNoyUVmpjUIMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlaSP6bNKTpoE8ap1ZIEugMp2yS1Rw5AMD1R0tP+3GTUMjpwfzHg5L uT8XDPSA99WgkuySqCMKXW0IBTSp5f5FIGMQqZ2prMaUoxRb2w4dsKrmqjLwN5ej dT5eU8irRY/Pq86YKjtBCxCX3PEqqWFXZYwglF7zhWNSxQjFB9NQzDU+AmXEUpef gVXDpgmOFB4DDjVyKDguSWgTWE+QPbkXq2nH+65lp4wHs5ipKvAtxKF0oLqoP6Op me4mmu3aOQYbyfLcLbIoTkGTj6hrUgKEaKoqf8Z+WrdxUdiI57Z0A5TMat4TPXYR eYXh7LlvSHBeKW4JVEc/6k7UnDXvdzWo -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:29 2025 by rpki-client on console.sobornost.net