$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: 2QZ3SPSPzXtlrv9Le08n5j3BIWn5YrUVo9H3RJq/Wsk= Subject key identifier: 09:C0:E5:E8:DD:96:19:FC:D5:17:F9:2F:9C:91:30:E2:A4:E0:24:78 Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 6A Signing time: Sun 27 Apr 2025 05:44:36 +0000 Manifest this update: Sun 27 Apr 2025 05:44:35 +0000 Manifest next update: Sun 04 May 2025 05:44:35 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: 2TdZ+dhWAU9QxQSJBxZCsFhr3WYDHY+952oROFvtsoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Apr 27 05:44:35 2025 GMT Not After : May 4 05:44:35 2025 GMT Subject: CN=680dc444-b012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:1c:23:9a:80:85:2d:cc:fd:a8:20:ad:e3: e6:b5:a6:91:b0:ee:b9:8d:73:5e:4b:e4:56:e8:09: 3e:6d:42:3b:0a:22:a0:5b:1b:ca:1b:61:73:6c:67: 0f:b3:fe:c6:75:0f:77:c0:10:d5:2b:3c:cb:d2:15: 5f:5d:9a:84:5a:09:89:8c:2f:88:45:85:42:69:ef: 10:2f:02:b0:f5:c3:0b:10:ae:46:6f:90:9e:ab:38: b6:26:47:52:1d:b6:b4:ef:c1:16:16:18:68:31:59: c4:0b:7f:a6:45:68:f4:b9:10:5c:c9:7f:6e:72:74: d6:59:18:30:5e:89:af:c0:f2:9f:e0:71:fe:5f:20: 87:bb:8a:78:13:4d:07:6b:85:70:9e:01:4e:e1:87: 78:45:85:f5:f8:d9:84:23:1c:fa:7e:d4:75:bc:e3: a8:df:18:e2:6d:66:25:b9:fc:4f:ba:58:22:ba:c1: 20:d5:54:ae:d1:a1:79:b1:39:b0:02:8e:f0:cd:b0: 7d:24:b8:d9:36:80:fa:38:97:cd:a0:f9:d1:ac:25: f0:06:6b:d0:04:5e:da:e1:d6:66:42:bc:dc:26:ac: c2:d4:08:8d:98:c3:1e:6b:e3:48:80:0c:50:13:cb: be:6a:59:86:32:3f:1e:8b:21:78:b7:c8:4c:bd:43: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:E5:E8:DD:96:19:FC:D5:17:F9:2F:9C:91:30:E2:A4:E0:24:78 X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:d3:fa:40:bf:3b:8a:1c:49:76:8d:a5:5d:19:55:fc:22: 34:0f:8f:88:d0:77:33:28:6e:66:96:d0:5b:6d:fb:6c:e8:ae: 36:37:bc:9f:5d:46:33:f7:c3:da:12:51:d9:a9:85:c7:43:1a: 26:31:f2:fe:7b:f4:7b:30:24:fd:e9:67:7b:79:28:98:2e:3e: 30:91:5c:94:08:bf:9f:cc:12:78:6b:b3:4d:6c:e7:b1:5f:a9: 5e:96:48:93:50:91:02:25:2f:59:40:13:4b:20:03:9f:2e:df: 39:0b:d2:5e:8d:8a:b3:40:8c:c0:36:55:5a:6d:ca:0c:a6:d1: ea:00:be:71:bf:73:a5:20:60:41:3f:ad:3c:67:66:2b:2a:24: 8d:9c:2b:97:42:a7:6e:10:2a:49:b9:13:cf:fa:d5:eb:96:ca: 89:86:7e:00:5d:23:3c:9b:9d:2d:26:c1:20:13:4c:c6:8e:e6: 50:c8:77:7a:f2:5c:51:f1:98:f4:37:db:5f:fd:03:c7:9e:51: 89:9c:89:1e:51:55:32:ee:a5:45:d7:5d:af:58:9b:14:ab:53: 30:63:f2:39:74:28:88:14:6b:0f:84:c5:a7:ad:36:b7:20:49: 7a:73:87:7b:6e:b1:38:72:ab:e1:a3:d4:05:8d:3d:2a:51:06: 47:f2:44:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoRTQyRTQyMDAyQTgzNzg3QTY3QUY4Q0I5QTg1MUY5Mzk5 NzQ2QzEzMjAeFw0yNTA0MjcwNTQ0MzVaFw0yNTA1MDQwNTQ0MzVaMBgxFjAUBgNV BAMTDTY4MGRjNDQ0LWIwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC60RwjmoCFLcz9qCCt4+a1ppGw7rmNc15L5FboCT5tQjsKIqBbG8obYXNsZw+z /sZ1D3fAENUrPMvSFV9dmoRaCYmML4hFhUJp7xAvArD1wwsQrkZvkJ6rOLYmR1Id trTvwRYWGGgxWcQLf6ZFaPS5EFzJf25ydNZZGDBeia/A8p/gcf5fIIe7ingTTQdr hXCeAU7hh3hFhfX42YQjHPp+1HW846jfGOJtZiW5/E+6WCK6wSDVVK7RoXmxObAC jvDNsH0kuNk2gPo4l82g+dGsJfAGa9AEXtrh1mZCvNwmrMLUCI2Ywx5r40iADFAT y75qWYYyPx6LIXi3yEy9Q1j9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCcDl6N2W GfzVF/kvnJEw4qTgJHgwHwYDVR0jBBgwFoAU5C5CACqDeHpnr4y5qFH5OZdGwTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzgwQ0UyNzhBODQ2 QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUM1Q0FDcURlSHBucjR5NXFGSDVPWmRHd1RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzgwQ0UyNzhBODQ2QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhw bnI0eTVxRkg1T1pkR3dUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqP0/pAvzuKHEl2jaVdGVX8IjQPj4jQdzMobmaW0Ftt+2zorjY3vJ9d RjP3w9oSUdmphcdDGiYx8v579HswJP3pZ3t5KJguPjCRXJQIv5/MEnhrs01s57Ff qV6WSJNQkQIlL1lAE0sgA58u3zkL0l6NirNAjMA2VVptygym0eoAvnG/c6UgYEE/ rTxnZisqJI2cK5dCp24QKkm5E8/61euWyomGfgBdIzybnS0mwSATTMaO5lDId3ry XFHxmPQ321/9A8eeUYmciR5RVTLupUXXXa9YmxSrUzBj8jl0KIgUaw+ExaetNrcg SXpzh3tusThyq+Gj1AWNPSpRBkfyRCg= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net