$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: N0Gc3KFCa3MAsI4BtNVX/w6r0HLoABwDvFfg5bneJq8= Subject key identifier: F2:9A:26:2C:03:25:73:DA:0A:E2:62:EB:10:03:D9:33:C8:2F:03:E3 Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 75 Signing time: Fri 25 Apr 2025 05:51:00 +0000 Manifest this update: Fri 25 Apr 2025 05:50:59 +0000 Manifest next update: Fri 02 May 2025 05:50:59 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: Bb93dtGiCW4vikmUSmzSPJqBYts3nMOGlIR+evnQ/fo=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: Po2BM3la9bQp8SxvolgWBVl3dKAKoE5yaonqoVw5jxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Apr 25 05:50:59 2025 GMT Not After : May 2 05:50:59 2025 GMT Subject: CN=680b22c3-40fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4f:23:ad:eb:c0:57:11:bd:44:3d:13:40:91: b3:dc:0f:e5:06:69:7e:2b:03:ed:eb:93:fe:ac:b4: 4d:fa:18:f8:de:c1:66:d8:11:25:2d:29:00:2f:93: 4d:4e:24:54:3c:d9:f3:e7:76:9c:69:0c:57:1e:df: ef:ce:72:d5:e5:7c:c3:69:ba:29:e9:51:a0:cd:50: 21:69:1d:f4:61:19:01:00:bf:72:76:a4:97:a6:d7: 06:04:f7:7d:7a:4b:7e:ff:f9:88:ef:8c:fd:ba:b8: 1b:61:c3:4e:4e:21:4c:c2:31:e7:76:af:41:4e:1b: 75:df:18:d7:b5:a7:45:47:5e:19:fe:28:bf:03:87: 87:20:27:29:df:69:95:37:a8:32:a1:38:87:44:a7: 48:c8:de:e6:cb:bf:a9:dd:51:19:b9:dc:90:8b:68: 0d:93:57:f7:6c:1b:c7:c2:af:cf:f7:ed:50:cb:1b: d1:9f:ce:5b:76:79:59:93:57:35:06:e4:48:52:90: a9:de:45:7c:84:04:d1:8f:0e:9d:68:1a:ce:5b:87: e2:28:d6:7e:92:4a:1e:4a:af:44:07:ec:ed:02:06: c4:c8:bc:d3:17:51:70:91:bc:53:e9:59:00:43:64: 38:a5:db:14:3a:99:49:e8:5f:46:93:82:25:1e:7f: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:26:2C:03:25:73:DA:0A:E2:62:EB:10:03:D9:33:C8:2F:03:E3 X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:26:e8:b9:58:96:6e:a9:2c:20:77:ed:29:a1:81:06:4b:69: 60:8c:01:97:2c:bf:1c:36:bc:c8:59:06:d4:3c:5f:9f:cb:30: 88:12:eb:df:a8:bf:0f:45:e1:67:92:c2:03:ae:44:2e:1a:50: 10:b3:ba:13:6e:c7:2e:4d:88:96:d6:49:27:7d:3b:e2:44:f1: 12:4d:cd:ef:36:42:92:93:86:fd:98:6f:9b:88:b4:b8:0c:bf: ae:3f:9f:50:59:e7:25:25:53:b5:37:64:72:3b:62:42:a0:52: c3:c9:9f:2b:a2:58:b6:69:3c:9d:ac:3e:c8:8a:d0:b0:29:d3: 2a:71:89:1b:77:d9:0d:cb:50:f5:17:26:5f:27:90:b1:1e:8b: 28:60:e2:bd:68:9f:d7:6d:53:ba:eb:d7:ab:4e:9a:7f:b6:ee: a4:83:d5:7b:7e:32:60:4c:30:39:98:6d:4f:21:54:74:7b:f8: 92:3c:a8:51:b2:92:5f:81:01:7c:62:82:c8:fa:77:f4:ec:bc: 3d:d4:ae:d6:3a:1d:56:d4:9d:f5:e7:55:5a:1f:01:d1:b5:26: 60:d6:2a:cf:77:ea:c2:c8:ac:61:57:51:70:b1:e2:2f:b1:ba: b1:c9:99:33:34:07:5f:07:e7:17:8a:d4:ff:34:55:2e:46:c3: ec:23:63:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzlCRjExMC8GA1UEBRMoNUNBQ0U1QkY2NTVBQUNGN0NCQzYyNzJDNUM2OTdGMzc3 QTA2Q0U4QzAeFw0yNTA0MjUwNTUwNTlaFw0yNTA1MDIwNTUwNTlaMBgxFjAUBgNV BAMTDTY4MGIyMmMzLTQwZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5TyOt68BXEb1EPRNAkbPcD+UGaX4rA+3rk/6stE36GPjewWbYESUtKQAvk01O JFQ82fPndpxpDFce3+/OctXlfMNpuinpUaDNUCFpHfRhGQEAv3J2pJem1wYE9316 S37/+YjvjP26uBthw05OIUzCMed2r0FOG3XfGNe1p0VHXhn+KL8Dh4cgJynfaZU3 qDKhOIdEp0jI3ubLv6ndURm53JCLaA2TV/dsG8fCr8/37VDLG9Gfzlt2eVmTVzUG 5EhSkKneRXyEBNGPDp1oGs5bh+Io1n6SSh5Kr0QH7O0CBsTIvNMXUXCRvFPpWQBD ZDil2xQ6mUnoX0aTgiUef5stAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8pomLAMl c9oK4mLrEAPZM8gvA+MwHwYDVR0jBBgwFoAUXKzlv2VarPfLxicsXGl/N3oGzoww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOUJGL0JFMUQ0QTM0N0I0 RDExRUZCMDIzNkM3OEM0RjlBRTAyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEt6bHYyVmFyUGZMeGljc1hHbF9OM29Hem93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OUJGL0JFMUQ0QTM0N0I0RDExRUZCMDIzNkM3OEM0RjlBRTAyL1hLemx2MlZhclBm THhpY3NYR2xfTjNvR3pvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQm6LlYlm6pLCB37SmhgQZLaWCMAZcsvxw2vMhZBtQ8X5/LMIgS69+o vw9F4WeSwgOuRC4aUBCzuhNuxy5NiJbWSSd9O+JE8RJNze82QpKThv2Yb5uItLgM v64/n1BZ5yUlU7U3ZHI7YkKgUsPJnyuiWLZpPJ2sPsiK0LAp0ypxiRt32Q3LUPUX Jl8nkLEeiyhg4r1on9dtU7rr16tOmn+27qSD1Xt+MmBMMDmYbU8hVHR7+JI8qFGy kl+BAXxigsj6d/TsvD3UrtY6HVbUnfXnVVofAdG1JmDWKs936sLIrGFXUXCx4i+x urHJmTM0B18H5xeK1P80VS5Gw+wjY3E= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:02 2025 by rpki-client on console.sobornost.net