$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: oubAiQpxKkiWgDd4TRn/6/pg1nJws8+N0oU9Qtxb44g= Subject key identifier: 97:63:C1:3C:F5:77:27:6D:74:14:B1:77:E0:DD:17:57:0B:59:9C:8B Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 06EF Signing time: Sat 26 Apr 2025 21:47:46 +0000 Manifest this update: Sat 26 Apr 2025 21:47:45 +0000 Manifest next update: Sat 03 May 2025 21:47:45 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: gG9Na0P+2YyrWsfbEtCONu6cpl1HaH0eTm3bpuisyR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: Apr 26 21:47:45 2025 GMT Not After : May 3 21:47:45 2025 GMT Subject: CN=680d5482-4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:ba:08:64:15:93:0e:85:69:8a:08:a6:3e: 83:2d:5e:1e:f6:52:a6:f2:60:06:56:de:2f:81:9c: bf:27:85:31:8b:8e:03:ba:95:11:e6:cf:07:77:f5: 26:22:0a:0b:cc:69:0c:2f:50:b5:f6:41:13:1e:cf: c5:2e:ab:05:85:d8:fb:61:21:f3:54:d0:8b:f7:ce: 42:0d:c0:96:f4:9d:5c:78:f6:7c:3c:5d:19:0f:27: e1:99:b5:6e:4f:33:9e:64:17:87:6b:45:aa:b8:92: 9b:db:bb:a8:e7:f6:e4:e8:81:03:0c:49:c0:51:16: 76:79:8c:25:7a:15:1c:29:f3:a6:86:84:43:13:fc: 3f:5c:5d:c7:01:f4:fc:81:8f:60:c2:01:85:7a:d2: 24:60:08:27:84:fc:dc:b3:d4:3e:ae:65:fe:ad:ec: 2f:78:72:dc:c1:cc:64:6f:bd:a6:03:81:4e:56:5d: 2a:b3:ec:f6:db:6e:21:34:8e:1e:f4:c6:f4:7d:2a: 17:9b:de:42:0f:ab:c4:7e:81:9c:0e:37:95:2b:85: d8:4d:94:78:38:41:4c:2b:6b:9c:65:bd:de:7a:30: 09:9a:49:2f:2e:b9:28:78:54:0b:18:0c:b0:64:d3: 01:0c:ef:a0:21:cb:9e:8e:aa:00:bc:66:87:09:ce: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:C1:3C:F5:77:27:6D:74:14:B1:77:E0:DD:17:57:0B:59:9C:8B X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:cc:16:15:67:c9:85:1a:a0:69:f2:23:b9:a9:e2:14:03: 3d:bc:a0:1e:56:e4:f5:d2:73:99:67:af:c0:29:c0:69:74:80: 68:a9:bb:55:a8:6e:63:55:fc:0e:69:ed:3d:ce:02:1d:e7:28: 35:5e:13:18:73:e3:0d:50:82:07:17:8d:13:5a:5e:49:8a:2a: 8b:05:bd:2d:6b:9f:d8:7c:d6:3d:d2:29:a0:d4:0a:58:fa:5e: 2c:6c:47:20:a0:0e:00:8a:ef:c7:4d:ec:a6:b7:43:74:5b:a4: b7:9a:bb:6f:0e:38:99:63:e3:49:6d:ed:86:67:46:38:e8:7c: 74:f0:e8:32:7f:00:34:8b:68:2e:a4:36:eb:6b:c0:8f:91:8f: 2f:5a:17:12:d9:a4:2e:a9:7c:33:fe:37:83:ef:db:2b:f1:7f: 2f:e5:40:f1:65:3f:a4:24:b0:cc:42:af:35:3d:26:38:84:13: 30:89:43:10:43:ca:c4:0a:39:1b:4b:68:11:c7:b5:af:69:8c: e1:e1:40:a6:4a:14:ff:d1:60:1e:23:1e:80:44:17:c4:11:b6: 18:4c:a9:9c:26:c3:fe:51:a5:0c:90:a2:47:83:a3:69:76:aa: 9c:e0:10:5c:36:2f:95:ed:c8:ca:75:69:58:12:40:44:7b:3b: d1:00:34:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjUwNDI2MjE0NzQ1WhcNMjUwNTAzMjE0NzQ1WjAYMRYwFAYD VQQDEw02ODBkNTQ4Mi00ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzu6CGQVkw6FaYoIpj6DLV4e9lKm8mAGVt4vgZy/J4Uxi44DupUR5s8Hd/Um IgoLzGkML1C19kETHs/FLqsFhdj7YSHzVNCL985CDcCW9J1cePZ8PF0ZDyfhmbVu TzOeZBeHa0WquJKb27uo5/bk6IEDDEnAURZ2eYwlehUcKfOmhoRDE/w/XF3HAfT8 gY9gwgGFetIkYAgnhPzcs9Q+rmX+rewveHLcwcxkb72mA4FOVl0qs+z2224hNI4e 9Mb0fSoXm95CD6vEfoGcDjeVK4XYTZR4OEFMK2ucZb3eejAJmkkvLrkoeFQLGAyw ZNMBDO+gIcuejqoAvGaHCc5tKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdjwTz1 dydtdBSxd+DdF1cLWZyLMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMi8wWFWfJhRqgafIjuaniFAM9vKAeVuT10nOZZ6/AKcBpdIBoqbtV qG5jVfwOae09zgId5yg1XhMYc+MNUIIHF40TWl5JiiqLBb0ta5/YfNY90img1ApY +l4sbEcgoA4Aiu/HTeymt0N0W6S3mrtvDjiZY+NJbe2GZ0Y46Hx08OgyfwA0i2gu pDbra8CPkY8vWhcS2aQuqXwz/jeD79sr8X8v5UDxZT+kJLDMQq81PSY4hBMwiUMQ Q8rECjkbS2gRx7WvaYzh4UCmShT/0WAeIx6ARBfEEbYYTKmcJsP+UaUMkKJHg6Np dqqc4BBcNi+V7cjKdWlYEkBEezvRADSY -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net