$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: z0cxWzWAo7bZOmu7meQcG3PSLVDuH0630/AYWHa+0UI= Subject key identifier: 5A:93:21:95:8A:4A:57:F4:8C:12:77:6C:FE:36:3A:FD:18:FB:F4:FB Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 1621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 25C6 Signing time: Mon 28 Apr 2025 16:55:57 +0000 Manifest this update: Mon 28 Apr 2025 16:55:56 +0000 Manifest next update: Mon 05 May 2025 16:55:56 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 3QjfJuz+TovZg76U0KO1GMR+ThDbjCO3QcARoE2ip/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5665 (0x1621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Apr 28 16:55:56 2025 GMT Not After : May 5 16:55:56 2025 GMT Subject: CN=680fb31d-ea19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:10:4e:b3:2d:d1:25:38:e9:f6:de:eb:44: 52:8d:ca:76:33:02:14:b1:fc:9c:77:fa:2a:e5:85: 27:23:c1:1a:d0:f9:69:c8:cc:1e:28:fe:c4:75:5c: 66:5b:45:05:b3:fa:cc:96:34:0b:74:ce:e3:ed:2f: 32:a2:57:c8:87:f4:5e:3c:f8:61:16:a4:de:be:f8: cc:fa:ef:bb:4a:38:e3:8a:25:6d:05:5e:49:dd:90: 49:43:83:82:5a:78:d3:9b:71:d7:0f:de:3f:68:4d: a1:fd:bb:9d:89:a7:66:99:c6:eb:e1:c6:e1:67:97: d2:bc:70:06:8c:dc:44:0a:34:82:7c:70:6d:08:77: 6b:39:9d:7d:7b:05:a5:c2:11:e3:6d:5a:4a:e6:52: 74:1f:64:30:64:3b:75:86:98:bc:5e:c2:e4:f7:71: 8d:12:0a:e6:d5:9a:bf:ad:c7:4d:83:4e:8c:99:fc: e0:ec:08:8c:2c:9f:37:17:f3:f6:b9:e1:08:d8:f5: e7:b4:60:15:ac:d8:92:71:63:f9:64:b9:1a:bc:07: a4:9f:d2:44:55:29:3a:41:34:5b:83:1f:39:00:69: 39:c2:46:bb:f1:8e:48:75:db:eb:cb:6b:13:e0:a8: 35:fd:d1:94:56:c1:f9:ab:df:c3:3b:f6:30:4b:a2: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:93:21:95:8A:4A:57:F4:8C:12:77:6C:FE:36:3A:FD:18:FB:F4:FB X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9c:7d:7f:eb:3b:c9:f4:51:54:bb:94:c0:96:c8:c6:25:33: 15:29:6c:1c:49:00:4b:28:cf:8e:a1:0a:fc:39:07:2b:5c:1c: bb:bf:1c:8b:34:cd:d0:9a:43:d2:fd:6a:f8:f3:61:4f:84:f0: 7f:c6:0c:5f:c8:78:ca:ff:6d:79:94:4f:ae:16:74:65:1b:70: f2:29:26:86:58:74:47:a6:8b:91:94:cc:59:a6:57:01:e9:98: a4:fc:4e:ba:eb:87:2b:84:a4:b1:6d:1d:6a:56:b1:00:86:81: 48:ad:ee:6c:ab:12:a3:8e:c0:7e:87:5c:cc:b2:48:06:28:4b: 8e:c2:1f:c3:e9:02:d8:f0:af:7e:96:4a:4a:22:2b:db:7c:97: 79:83:96:bd:b9:e9:2b:9d:0d:f8:b4:25:a4:fd:19:ce:6a:c1: 80:bb:28:12:08:44:5f:9e:0e:7c:a3:f7:ee:6b:94:aa:22:5a: c9:ab:6f:0d:f2:5e:96:c4:76:b7:4d:aa:45:e7:1f:9e:9a:4c: d5:65:b0:83:e2:92:73:34:ef:06:2a:a4:ff:d7:8d:38:ff:42: a6:79:56:18:ce:69:81:fc:5f:6d:e4:12:aa:65:3e:7e:4e:c7: c6:58:e7:f4:43:cb:b3:da:b7:af:eb:ce:8b:59:fa:39:9f:48: c8:b6:e2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUwNDI4MTY1NTU2WhcNMjUwNTA1MTY1NTU2WjAYMRYwFAYD VQQDEw02ODBmYjMxZC1lYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2MQTrMt0SU46fbe60RSjcp2MwIUsfycd/oq5YUnI8Ea0PlpyMweKP7EdVxm W0UFs/rMljQLdM7j7S8yolfIh/RePPhhFqTevvjM+u+7SjjjiiVtBV5J3ZBJQ4OC WnjTm3HXD94/aE2h/budiadmmcbr4cbhZ5fSvHAGjNxECjSCfHBtCHdrOZ19ewWl whHjbVpK5lJ0H2QwZDt1hpi8XsLk93GNEgrm1Zq/rcdNg06Mmfzg7AiMLJ83F/P2 ueEI2PXntGAVrNiScWP5ZLkavAekn9JEVSk6QTRbgx85AGk5wka78Y5Iddvry2sT 4Kg1/dGUVsH5q9/DO/YwS6L1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqTIZWK Slf0jBJ3bP42Ov0Y+/T7MB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVnH1/6zvJ9FFUu5TAlsjGJTMVKWwcSQBLKM+OoQr8OQcrXBy7vxyL NM3QmkPS/Wr482FPhPB/xgxfyHjK/215lE+uFnRlG3DyKSaGWHRHpouRlMxZplcB 6Zik/E6664crhKSxbR1qVrEAhoFIre5sqxKjjsB+h1zMskgGKEuOwh/D6QLY8K9+ lkpKIivbfJd5g5a9uekrnQ34tCWk/RnOasGAuygSCERfng58o/fua5SqIlrJq28N 8l6WxHa3TapF5x+emkzVZbCD4pJzNO8GKqT/1404/0KmeVYYzmmB/F9t5BKqZT5+ TsfGWOf0Q8uz2rev686LWfo5n0jItuJk -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:41 2025 by rpki-client on console.sobornost.net