$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: m3MpDoMFGWnRlKlXWbIBcm4beRMQVlTK6WLPaQnZicA= Subject key identifier: 13:E0:1C:AA:52:8D:08:26:98:0C:A8:F5:45:05:06:D3:76:3A:63:26 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 59 Signing time: Sun 27 Apr 2025 05:58:50 +0000 Manifest this update: Sun 27 Apr 2025 05:58:49 +0000 Manifest next update: Sun 04 May 2025 05:58:49 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: RpgFzuTPyPQ4DfBZ0wRfAwQR0sBUUwk0PIMs6yJsbGc=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Apr 27 05:58:49 2025 GMT Not After : May 4 05:58:49 2025 GMT Subject: CN=680dc79a-228c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:ff:44:e4:5a:46:34:c8:9c:67:7c:03:aa: 4f:1d:78:c0:4c:7a:df:22:9e:a5:d8:4a:39:52:5d: 62:d4:8b:0b:7c:05:6f:f6:a1:35:fb:f6:b6:d2:17: 01:15:ac:45:cf:f2:97:14:97:c6:80:28:8f:6a:97: 8a:07:1b:c5:79:9b:1b:62:80:fe:ae:5b:40:ed:31: ea:86:ff:89:2a:f4:96:27:2b:28:c2:af:a6:ad:af: b6:aa:ee:88:2e:b4:b1:6f:a1:40:74:58:db:85:de: e1:24:aa:3e:cb:6c:8b:1e:97:21:a5:f9:6a:49:cf: 23:bc:78:2d:af:46:62:66:9b:dd:48:98:c9:b2:db: 5a:85:78:a1:73:cd:52:9e:9d:c3:27:ff:d7:11:93: 92:3f:fa:10:d3:95:d8:6c:04:34:fc:fc:fc:fc:03: 90:ca:25:4b:38:f7:81:12:aa:a1:ba:03:b4:d1:cb: d0:b5:41:7c:09:67:8a:3b:5f:92:07:a7:f7:e6:51: 09:a5:8f:b9:be:0b:4f:c2:d0:9c:63:b0:43:5b:19: 5c:1a:3d:8d:9b:e2:fb:e4:65:de:d8:39:77:f5:f6: fc:f9:c1:b7:d8:88:44:94:0c:a4:7e:1a:c4:d2:a2: 69:d2:d9:ac:91:f4:af:90:3d:77:09:7d:ba:5b:5e: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:1C:AA:52:8D:08:26:98:0C:A8:F5:45:05:06:D3:76:3A:63:26 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6b:0f:a9:16:4d:7c:d5:a4:ca:3b:b7:fd:a4:1c:95:94:1d: f6:76:99:a1:f1:75:99:c0:f2:e3:38:34:5e:8b:59:67:c8:6e: 39:fa:0f:4e:b5:50:e1:b0:3c:c4:ad:9b:dd:16:9c:45:96:16: 45:f1:c1:16:9e:71:1f:8d:7f:1c:68:65:24:34:24:30:7c:25: e2:0e:f0:2e:60:60:15:9d:38:2b:f8:c5:52:40:45:b9:de:3a: f1:ba:af:f6:0c:95:58:a8:a0:a1:ce:19:5b:00:92:8a:b7:2b: eb:66:fa:06:52:8c:b8:c8:b1:48:97:aa:0e:07:8d:ad:b5:34: 08:29:59:cd:1c:70:58:6d:0e:d3:5b:b9:e0:9c:9b:40:a4:6a: 50:71:94:6f:01:ff:3c:d7:c1:94:b7:dc:24:84:e0:df:9f:d9: 2f:a2:2b:42:11:e8:b0:db:30:76:46:6a:76:c9:a6:4f:90:85: bc:1d:c4:c9:52:bb:ed:ed:e2:1f:53:d1:0f:f7:fe:5b:ca:13: df:47:8b:f5:78:4e:e1:7c:55:b4:fe:d1:0d:65:3f:7c:d8:75: e5:4e:01:e4:ca:ea:c8:df:b1:ef:05:c2:e3:4a:39:92:15:84: b3:93:86:3c:e0:ce:ac:14:b3:e1:6a:a7:0a:6f:03:dd:51:15: 6a:86:26:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNzE3MkVEMENGNDQ3MDVFQ0VCMTk2MUQxM0EwNTdFQ0ZG MzA3Qzg2RjAeFw0yNTA0MjcwNTU4NDlaFw0yNTA1MDQwNTU4NDlaMBgxFjAUBgNV BAMTDTY4MGRjNzlhLTIyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJs/9E5FpGNMicZ3wDqk8deMBMet8inqXYSjlSXWLUiwt8BW/2oTX79rbSFwEV rEXP8pcUl8aAKI9ql4oHG8V5mxtigP6uW0DtMeqG/4kq9JYnKyjCr6atr7aq7ogu tLFvoUB0WNuF3uEkqj7LbIselyGl+WpJzyO8eC2vRmJmm91ImMmy21qFeKFzzVKe ncMn/9cRk5I/+hDTldhsBDT8/Pz8A5DKJUs494ESqqG6A7TRy9C1QXwJZ4o7X5IH p/fmUQmlj7m+C0/C0JxjsENbGVwaPY2b4vvkZd7YOXf19vz5wbfYiESUDKR+GsTS omnS2ayR9K+QPXcJfbpbXrHhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE+AcqlKN CCaYDKj1RQUG03Y6YyYwHwYDVR0jBBgwFoAUcXLtDPRHBezrGWHROgV+z/MHyG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0FBMkE3ODRDOUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hMdERQUkhCZXpyR1dIUk9nVi16X01IeUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0FBMkE3ODRDOUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6 ckdXSFJPZ1Ytel9NSHlHOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACdrD6kWTXzVpMo7t/2kHJWUHfZ2maHxdZnA8uM4NF6LWWfIbjn6D061 UOGwPMStm90WnEWWFkXxwRaecR+NfxxoZSQ0JDB8JeIO8C5gYBWdOCv4xVJARbne OvG6r/YMlViooKHOGVsAkoq3K+tm+gZSjLjIsUiXqg4Hja21NAgpWc0ccFhtDtNb ueCcm0CkalBxlG8B/zzXwZS33CSE4N+f2S+iK0IR6LDbMHZGanbJpk+QhbwdxMlS u+3t4h9T0Q/3/lvKE99Hi/V4TuF8VbT+0Q1lP3zYdeVOAeTK6sjfse8FwuNKOZIV hLOThjzgzqwUs+FqpwpvA91RFWqGJhA= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net