$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: 6Zg1xTDBe9hk7SJmLGpkwmEGB4m+jBKQEhbdgkBUXfg= Subject key identifier: 8D:3A:F9:9B:4D:3D:8F:91:16:B6:C1:C2:B4:C2:6B:DE:79:A3:0E:58 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 0184 Signing time: Sun 27 Apr 2025 02:37:51 +0000 Manifest this update: Sun 27 Apr 2025 02:37:51 +0000 Manifest next update: Sun 04 May 2025 02:37:51 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: 8wwqi+HAsSCrRBMqZ61+GgXa72AwMYfmV0XIWtV7p2M=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: IKV0Cgq2EuODSbPKQtSmxiMFKVMR6YDH69S9tC4UdAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Apr 27 02:37:51 2025 GMT Not After : May 4 02:37:51 2025 GMT Subject: CN=680d987f-f70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:eb:1e:7c:3d:f1:b3:0d:97:1f:f2:50:e4: 30:bd:28:7e:98:81:a8:c7:97:9f:90:5b:5a:8c:f4: aa:e8:20:32:37:a7:b9:e4:49:2d:82:36:9a:07:66: 5f:b0:1e:68:15:05:56:bb:fd:e9:7f:bb:04:a8:4c: bf:54:61:17:cd:79:68:29:63:4e:18:55:fe:0e:9b: 00:9e:9f:45:ef:3f:f9:78:8b:19:3e:37:ff:05:79: 8f:34:d0:ad:13:7c:a5:3e:20:bd:73:f3:e7:76:78: 65:bc:ce:40:5b:76:ef:0b:cb:d6:95:c9:74:ee:15: 66:1c:bc:17:6b:61:ac:06:d8:12:c8:0c:99:49:82: eb:2f:0f:c9:e0:43:e3:da:7c:a6:97:56:94:19:04: 53:30:7c:60:49:e1:db:4e:37:f1:8a:3e:ae:07:c7: 7d:d9:78:f0:89:e0:b5:cd:53:56:5d:e3:72:d5:00: 0e:0d:fb:27:fb:5e:36:55:8f:af:a1:84:9d:1b:0c: 5e:46:22:43:46:06:31:0e:0a:da:89:65:61:2d:5f: b5:58:23:25:75:08:a2:db:38:40:5b:af:da:ba:db: 9a:2c:34:81:5a:82:d3:48:76:73:64:5f:10:6f:1b: ef:27:b5:8c:15:44:07:c1:cb:42:19:2e:03:5c:64: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:F9:9B:4D:3D:8F:91:16:B6:C1:C2:B4:C2:6B:DE:79:A3:0E:58 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ec:22:db:47:33:35:18:f0:a5:78:89:cb:60:9b:72:a1:2e: d2:99:5e:b2:29:c6:7d:e1:83:df:31:75:f5:bb:0b:4f:6f:a5: 29:5c:47:6e:9d:6a:8c:2e:0b:50:3a:8c:1a:10:ad:18:11:3e: b1:1e:c0:67:66:a1:fc:e0:f1:26:b4:80:e8:7a:d0:b7:c6:de: c5:a8:75:f1:fd:6a:3e:2c:a3:23:12:8e:4d:e0:06:22:da:39: 4a:ec:7f:15:f1:ba:41:14:0c:53:85:a4:cc:c3:81:89:85:62: a5:09:85:96:25:66:f9:68:c9:b1:60:8b:b4:e7:ed:50:29:d1: 05:c9:be:73:a7:4e:65:62:a0:d8:1f:fc:66:b9:13:54:13:09: 9d:5c:af:8b:9c:03:6b:3c:9b:2a:83:78:f8:fe:ab:17:99:11: 5c:0d:e0:5d:ab:b3:86:7c:f2:f5:e5:d5:ff:98:53:59:3d:03: c9:5f:0d:51:c5:49:5a:55:2c:45:9a:0f:5b:52:72:cb:1f:a3: 29:53:30:35:bc:7e:6e:b4:8f:dd:a2:6b:23:d1:20:41:1c:f6: be:4e:66:a6:c1:2a:54:a1:db:c2:78:9f:84:07:b0:69:ef:d1: 39:cc:08:19:be:b1:cb:bb:0c:ab:09:a2:48:22:e8:4d:91:e4: 3d:03:3a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjUwNDI3MDIzNzUxWhcNMjUwNTA0MDIzNzUxWjAYMRYwFAYD VQQDEw02ODBkOTg3Zi1mNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HHrHnw98bMNlx/yUOQwvSh+mIGox5efkFtajPSq6CAyN6e55EktgjaaB2Zf sB5oFQVWu/3pf7sEqEy/VGEXzXloKWNOGFX+DpsAnp9F7z/5eIsZPjf/BXmPNNCt E3ylPiC9c/PndnhlvM5AW3bvC8vWlcl07hVmHLwXa2GsBtgSyAyZSYLrLw/J4EPj 2nyml1aUGQRTMHxgSeHbTjfxij6uB8d92XjwieC1zVNWXeNy1QAODfsn+142VY+v oYSdGwxeRiJDRgYxDgraiWVhLV+1WCMldQii2zhAW6/autuaLDSBWoLTSHZzZF8Q bxvvJ7WMFUQHwctCGS4DXGQ+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI06+ZtN PY+RFrbBwrTCa955ow5YMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC7CLbRzM1GPCleInLYJtyoS7SmV6yKcZ94YPfMXX1uwtPb6UpXEdu nWqMLgtQOowaEK0YET6xHsBnZqH84PEmtIDoetC3xt7FqHXx/Wo+LKMjEo5N4AYi 2jlK7H8V8bpBFAxThaTMw4GJhWKlCYWWJWb5aMmxYIu05+1QKdEFyb5zp05lYqDY H/xmuRNUEwmdXK+LnANrPJsqg3j4/qsXmRFcDeBdq7OGfPL15dX/mFNZPQPJXw1R xUlaVSxFmg9bUnLLH6MpUzA1vH5utI/domsj0SBBHPa+TmamwSpUodvCeJ+EB7Bp 79E5zAgZvrHLuwyrCaJIIuhNkeQ9Azqh -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:55 2025 by rpki-client on console.sobornost.net