$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: z0PUI+EEO4Lp6wCrYhPBTQd6OX/OQhPvg5l03+Cp0Y0= Subject key identifier: 8B:4D:E2:36:56:0F:15:8E:FF:6A:FE:60:FB:8F:54:81:01:2D:15:44 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34B4 Signing time: Thu 24 Apr 2025 14:17:31 +0000 Manifest this update: Thu 24 Apr 2025 14:17:31 +0000 Manifest next update: Thu 01 May 2025 14:17:31 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: UPHusZcOw44gXcogjNnmGvnogErkX+ybwJ8l7gnmjiM=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Apr 24 14:17:31 2025 GMT Not After : May 1 14:17:31 2025 GMT Subject: CN=680a47fb-8d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:36:5c:87:46:e5:8b:c7:e9:4c:8a:d1:ba: f2:0b:12:8d:05:f2:38:95:44:23:fe:f3:fb:80:18: 00:57:37:09:62:3b:a9:f4:91:00:6a:e3:13:da:4a: 72:ca:ee:1f:fd:61:b7:a1:1f:7b:be:10:27:8b:b1: 41:70:ee:54:02:7b:bd:2a:b4:88:5a:f8:58:cb:4c: eb:c5:6d:dc:0e:62:d7:17:fa:bc:36:bb:bb:34:5e: 1c:e4:d0:97:6c:46:b7:fc:af:3c:12:59:83:37:bd: b6:51:7f:93:94:12:3f:9c:aa:ad:13:cc:c1:39:be: fc:20:81:df:69:eb:77:81:d2:5b:0d:87:77:b3:d0: 53:d7:f5:ed:b6:af:e6:37:78:44:6f:2e:6f:a4:65: cf:3a:f8:e4:7b:e5:42:90:d2:62:00:5a:35:d9:a3: 70:94:90:33:6d:1e:ef:08:46:1a:60:8d:80:a0:be: 37:37:a7:bb:8b:d9:2a:a3:d4:26:13:d4:4c:ce:5d: 3c:f4:0a:b9:5c:dc:9a:db:00:4d:f6:18:60:d9:c4: fc:ab:0a:94:a0:02:ad:8e:1b:62:f1:33:f8:96:25: 6b:ce:8f:16:8e:bd:dc:27:f8:d6:71:01:86:45:f7: 15:08:d1:71:11:59:ac:75:10:4c:7b:5f:a1:c7:1b: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:E2:36:56:0F:15:8E:FF:6A:FE:60:FB:8F:54:81:01:2D:15:44 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:1b:0f:24:eb:d9:66:e4:1b:3d:5a:69:d3:cb:0a:d8:55: cf:62:4d:ed:fa:51:4f:1e:7b:a4:2c:19:dd:75:e2:82:72:e7: 7c:ee:db:91:19:93:76:b6:7a:4f:7a:aa:3b:b7:24:a6:7f:88: 00:14:5c:73:91:f3:d5:81:15:b0:a1:28:0f:61:73:18:d1:26: 3d:b3:3b:54:57:b4:0b:bf:5a:54:8d:8d:12:b7:5e:47:13:88: 56:83:ac:46:45:89:51:d5:0a:2a:09:14:cc:53:29:1b:e4:5f: 24:c9:86:0f:76:0c:06:bc:8f:98:59:b4:2e:dc:4d:7a:f8:7e: a1:c0:93:3b:0e:54:2c:15:d9:f5:6a:60:26:dd:8c:46:52:f8: 61:9d:b7:8a:a0:73:26:95:66:0f:72:b0:9d:93:1c:99:12:e3: 6b:05:60:4e:17:15:29:c6:0f:48:0c:6d:50:77:d6:53:97:c6: 35:8a:94:7f:d4:0d:f1:24:44:bc:27:29:f0:c1:5f:9d:60:d5: f3:e1:8d:cd:9b:ff:68:ca:ec:e1:9c:ae:ea:7e:0a:83:07:c0: e5:85:53:be:3e:f9:1b:69:a6:98:76:2d:1a:f4:6f:e0:95:b8: 89:c7:99:f7:2d:bc:f6:b6:2e:57:bf:79:5c:fb:9f:30:29:97: 0e:7f:c5:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwNDI0MTQxNzMxWhcNMjUwNTAxMTQxNzMxWjAYMRYwFAYD VQQDEw02ODBhNDdmYi04ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDc2XIdG5YvH6UyK0bryCxKNBfI4lUQj/vP7gBgAVzcJYjup9JEAauMT2kpy yu4f/WG3oR97vhAni7FBcO5UAnu9KrSIWvhYy0zrxW3cDmLXF/q8Nru7NF4c5NCX bEa3/K88ElmDN722UX+TlBI/nKqtE8zBOb78IIHfaet3gdJbDYd3s9BT1/Xttq/m N3hEby5vpGXPOvjke+VCkNJiAFo12aNwlJAzbR7vCEYaYI2AoL43N6e7i9kqo9Qm E9RMzl089Aq5XNya2wBN9hhg2cT8qwqUoAKtjhti8TP4liVrzo8Wjr3cJ/jWcQGG RfcVCNFxEVmsdRBMe1+hxxtXGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItN4jZW DxWO/2r+YPuPVIEBLRVEMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8exsPJOvZZuQbPVpp08sK2FXPYk3t+lFPHnukLBnddeKCcud87tuR GZN2tnpPeqo7tySmf4gAFFxzkfPVgRWwoSgPYXMY0SY9sztUV7QLv1pUjY0St15H E4hWg6xGRYlR1QoqCRTMUykb5F8kyYYPdgwGvI+YWbQu3E16+H6hwJM7DlQsFdn1 amAm3YxGUvhhnbeKoHMmlWYPcrCdkxyZEuNrBWBOFxUpxg9IDG1Qd9ZTl8Y1ipR/ 1A3xJES8JynwwV+dYNXz4Y3Nm/9oyuzhnK7qfgqDB8DlhVO+PvkbaaaYdi0a9G/g lbiJx5n3Lbz2ti5Xv3lc+58wKZcOf8Uw -----END CERTIFICATE-----Generated at Thu Apr 24 15:52:12 2025 by rpki-client on console.sobornost.net