$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: KtFLbAlIPkNttUJYW7VzfOdDfoU62f02RXoPK+GaBxU= Subject key identifier: A2:46:0A:F1:DF:FD:5A:FA:91:6C:09:A4:6F:B1:39:5B:4C:CD:82:2F Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 01DA Signing time: Sun 27 Apr 2025 01:54:43 +0000 Manifest this update: Sun 27 Apr 2025 01:54:42 +0000 Manifest next update: Sun 04 May 2025 01:54:42 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: 9xo+/rVs1VEoQhbIps6e+syXDD9/pfye7B1bdbjEEDQ=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: GYHUkkvyeIFfScmABzCLZTH4inEWtwXGbi+j71xqPHQ=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Apr 27 01:54:42 2025 GMT Not After : May 4 01:54:42 2025 GMT Subject: CN=680d8e63-ac3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:bb:e1:fc:86:22:c0:e3:fa:bb:5e:4f:c3: 2b:32:a9:c2:7b:f6:99:0f:67:75:0d:ef:41:d7:09: 78:3e:f4:5d:69:e3:01:7d:54:41:a2:37:51:ab:c0: 0c:80:35:ce:e1:bc:60:30:4b:d4:5b:97:47:a3:5c: 2d:de:a6:d9:96:b3:3b:0b:2c:e5:71:8b:bd:4f:46: 39:a1:3d:c3:e0:32:09:85:59:d6:68:22:e3:90:f7: 1d:d7:75:a2:0c:f1:0d:c1:09:08:03:d0:07:27:f4: f6:8a:9d:be:20:42:4f:93:d9:74:87:07:1a:78:d5: 07:c2:82:a3:d6:d9:02:b4:8e:57:58:67:8e:52:51: 53:b5:26:99:13:ca:58:8c:18:f8:c3:9b:05:80:93: 47:3e:02:92:3e:74:b6:64:e4:c7:c1:b8:a2:f6:c5: 50:de:58:3c:05:72:6b:a4:b6:9e:ac:d9:02:c7:43: 07:c2:a1:b7:99:5d:e2:bb:1c:e2:f0:35:e4:09:17: f7:04:74:11:19:e3:87:4a:1f:56:b2:41:ee:45:10: b6:60:5c:dc:ff:72:97:f4:a2:1b:61:52:30:ad:d6: 98:30:ab:ad:35:60:01:af:47:10:8e:76:64:92:2b: df:ea:5d:66:bf:ad:1a:9f:36:65:bb:42:dd:fd:3d: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:0A:F1:DF:FD:5A:FA:91:6C:09:A4:6F:B1:39:5B:4C:CD:82:2F X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:22:f5:b9:a0:61:47:ce:e2:34:6e:c3:44:83:a9:6c:a3:16: 2e:1f:e4:86:47:c8:ce:d3:86:13:22:77:6b:d1:39:00:16:44: 79:2a:29:a4:a6:8e:49:9f:d1:f6:ba:08:82:e5:21:d8:20:b7: be:e6:f4:ad:2b:d8:73:54:07:d1:4e:62:be:cb:18:10:e5:8f: d6:23:d5:d4:7d:4d:28:a4:74:ab:41:01:83:e4:e3:3b:cc:91: d9:af:86:5d:54:6f:7e:5c:d3:07:13:9c:15:a3:e8:9c:43:86: 9c:04:66:9f:53:09:bc:d9:4e:99:2b:bf:78:76:8e:94:29:dc: b2:a0:0c:25:22:88:b5:8b:fa:b2:aa:eb:4c:a7:1e:cc:e7:20: 81:b9:a5:f3:6c:ea:03:9f:05:45:bd:8f:c5:ac:a8:24:ec:ff: b7:bf:5b:78:a2:27:a1:5f:52:a0:dc:4c:cf:1c:45:cd:be:1d: 28:54:57:38:94:d5:21:36:c1:2a:08:91:50:8d:0e:97:f5:53: 5e:7d:09:a0:3e:24:bc:82:1c:d9:f1:a2:39:fd:50:83:62:88: 05:1d:41:8b:16:e0:82:c9:6d:9a:ac:bb:48:e2:27:76:a2:3e: db:4c:86:f7:8a:f4:f1:04:13:bc:ec:ae:de:2d:2b:d0:6a:5c: 74:91:8a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNDI3MDE1NDQyWhcNMjUwNTA0MDE1NDQyWjAYMRYwFAYD VQQDEw02ODBkOGU2My1hYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN+74fyGIsDj+rteT8MrMqnCe/aZD2d1De9B1wl4PvRdaeMBfVRBojdRq8AM gDXO4bxgMEvUW5dHo1wt3qbZlrM7CyzlcYu9T0Y5oT3D4DIJhVnWaCLjkPcd13Wi DPENwQkIA9AHJ/T2ip2+IEJPk9l0hwcaeNUHwoKj1tkCtI5XWGeOUlFTtSaZE8pY jBj4w5sFgJNHPgKSPnS2ZOTHwbii9sVQ3lg8BXJrpLaerNkCx0MHwqG3mV3iuxzi 8DXkCRf3BHQRGeOHSh9WskHuRRC2YFzc/3KX9KIbYVIwrdaYMKutNWABr0cQjnZk kivf6l1mv60anzZlu0Ld/T1quQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJGCvHf /Vr6kWwJpG+xOVtMzYIvMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPIvW5oGFHzuI0bsNEg6lsoxYuH+SGR8jO04YTIndr0TkAFkR5Kimk po5Jn9H2ugiC5SHYILe+5vStK9hzVAfRTmK+yxgQ5Y/WI9XUfU0opHSrQQGD5OM7 zJHZr4ZdVG9+XNMHE5wVo+icQ4acBGafUwm82U6ZK794do6UKdyyoAwlIoi1i/qy qutMpx7M5yCBuaXzbOoDnwVFvY/FrKgk7P+3v1t4oiehX1Kg3EzPHEXNvh0oVFc4 lNUhNsEqCJFQjQ6X9VNefQmgPiS8ghzZ8aI5/VCDYogFHUGLFuCCyW2arLtI4id2 oj7bTIb3ivTxBBO87K7eLSvQalx0kYqf -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net