$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: eXdqWvUFjS2BZzswWDIw1oHwwBpYJENhn0jbxmIxzVE= Subject key identifier: 78:AD:6F:07:40:92:B5:FF:BC:3A:65:A3:19:71:93:6C:D2:D2:7B:7C Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 0626 Signing time: Sat 26 Apr 2025 22:22:53 +0000 Manifest this update: Sat 26 Apr 2025 22:22:53 +0000 Manifest next update: Sat 03 May 2025 22:22:53 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: XgANv2TSwtNnYVsUyDflbja7bipihV9/ICpNt0f5TPo=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: JGxMB26ttBekYTYeINbF/ZGgUOz7c1MGNzdVG0LlGY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Apr 26 22:22:53 2025 GMT Not After : May 3 22:22:53 2025 GMT Subject: CN=680d5cbd-27da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:73:59:d1:95:85:d7:76:25:6f:20:94:4a: 93:d0:64:19:d9:f2:b3:60:5a:18:ed:c4:48:72:a9: 70:c7:f5:62:d3:2c:08:fb:6b:af:29:a7:1f:93:40: 43:7f:d6:7c:87:ca:b0:38:96:b8:79:62:98:55:c1: 28:e3:82:cd:b0:3b:7a:75:83:9f:a5:76:be:dc:68: 5d:9f:85:8e:6b:e6:98:e5:6b:c3:3b:40:2f:d6:b0: 71:08:b6:6f:86:14:4d:67:31:66:f8:22:e2:27:e3: 07:c6:d4:65:72:61:64:88:f0:12:58:41:2b:24:46: 1e:3a:3b:18:99:da:d2:c9:33:f4:cb:ef:fc:2d:a6: e8:24:a0:8d:57:9a:b8:df:5f:7f:db:66:b5:05:d7: 15:fc:32:8a:c2:96:1d:e4:d2:91:df:43:d7:e9:87: fb:69:ec:dd:03:98:a1:70:f9:32:88:fb:ca:57:ae: a2:4d:a9:90:7b:a2:3f:20:3e:77:62:f1:84:0c:d2: 5b:38:f9:47:34:46:e2:34:fb:ee:41:48:3d:98:4b: b2:87:88:1a:42:61:7d:6c:27:b5:98:11:68:81:65: 65:cb:c4:26:0e:f8:e6:33:cb:23:74:4e:d1:bc:f6: 48:a1:20:36:51:d8:42:7a:1d:65:54:0b:b3:e6:5a: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:6F:07:40:92:B5:FF:BC:3A:65:A3:19:71:93:6C:D2:D2:7B:7C X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:14:91:d8:78:3f:18:fd:fa:87:54:a0:36:b2:73:6c:f6:7e: e1:19:f5:01:b4:ec:f5:ed:dc:86:7f:69:9c:7a:c7:71:d4:45: be:78:b3:0e:9e:9d:2e:82:08:e7:24:51:2e:99:9e:6a:79:15: d0:2f:a9:f1:8c:82:b4:7b:bf:1e:10:7a:a5:db:18:f3:68:ee: f1:36:c9:df:99:92:60:2e:6b:f0:57:a7:3a:52:90:36:c9:23: 8f:8e:4b:5f:54:c6:66:53:ac:25:27:32:a3:51:b7:19:12:2a: 9a:6f:5d:24:4f:6c:b9:e9:91:ab:c3:4a:06:06:b1:26:4e:37: 8c:db:c2:c1:ab:f0:6b:e4:30:50:a4:b8:f4:e7:66:17:cf:f7: 3a:de:b9:72:de:e0:1e:09:8e:b4:86:36:17:ed:e7:cc:89:10: cb:83:e0:25:d2:4f:59:86:39:53:ad:bf:1f:d7:be:f9:85:ca: 44:92:40:e7:d1:05:43:ce:02:73:89:2b:74:f1:5c:9c:d3:f0: 15:66:21:ce:6a:3c:c8:1e:e3:0b:35:0f:94:ed:00:53:bc:21: dc:5f:98:5a:aa:42:8b:1c:e0:74:91:93:96:ff:54:08:0e:de: c5:38:7d:e0:65:ab:2c:f3:9e:c3:9b:be:ad:6d:90:14:df:39: 78:83:61:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjUwNDI2MjIyMjUzWhcNMjUwNTAzMjIyMjUzWjAYMRYwFAYD VQQDEw02ODBkNWNiZC0yN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDlzWdGVhdd2JW8glEqT0GQZ2fKzYFoY7cRIcqlwx/Vi0ywI+2uvKacfk0BD f9Z8h8qwOJa4eWKYVcEo44LNsDt6dYOfpXa+3Ghdn4WOa+aY5WvDO0Av1rBxCLZv hhRNZzFm+CLiJ+MHxtRlcmFkiPASWEErJEYeOjsYmdrSyTP0y+/8LaboJKCNV5q4 319/22a1BdcV/DKKwpYd5NKR30PX6Yf7aezdA5ihcPkyiPvKV66iTamQe6I/ID53 YvGEDNJbOPlHNEbiNPvuQUg9mEuyh4gaQmF9bCe1mBFogWVly8QmDvjmM8sjdE7R vPZIoSA2UdhCeh1lVAuz5lrGcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHitbwdA krX/vDploxlxk2zS0nt8MB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoFJHYeD8Y/fqHVKA2snNs9n7hGfUBtOz17dyGf2mcesdx1EW+eLMO np0uggjnJFEumZ5qeRXQL6nxjIK0e78eEHql2xjzaO7xNsnfmZJgLmvwV6c6UpA2 ySOPjktfVMZmU6wlJzKjUbcZEiqab10kT2y56ZGrw0oGBrEmTjeM28LBq/Br5DBQ pLj052YXz/c63rly3uAeCY60hjYX7efMiRDLg+Al0k9ZhjlTrb8f1775hcpEkkDn 0QVDzgJziSt08Vyc0/AVZiHOajzIHuMLNQ+U7QBTvCHcX5haqkKLHOB0kZOW/1QI Dt7FOH3gZass857Dm76tbZAU3zl4g2G1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net