$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: 7Dx2aRorbhYSh87U3sQAGuUCvykKZyH1IdJSvV2SBaA= Subject key identifier: 63:69:3D:DA:6B:59:09:94:E4:51:42:C4:EA:92:52:ED:3B:FF:AB:2F Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0DE0 Signing time: Mon 28 Apr 2025 18:06:44 +0000 Manifest this update: Mon 28 Apr 2025 18:06:43 +0000 Manifest next update: Mon 05 May 2025 18:06:43 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: qHfT0R8fqiEw3ND+eeo5Su2YqFQ3fU8VJ4u2PBI1w9o=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 0xCnVozQZWjgc3AYs562bOg5LeDIgNinyp8El/uXPPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Apr 28 18:06:43 2025 GMT Not After : May 5 18:06:43 2025 GMT Subject: CN=680fc3b4-ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:04:fc:f6:21:c7:31:ef:d6:64:9a:19:f0: 42:1a:eb:40:78:78:9b:3a:eb:b0:a7:29:b5:06:4f: b3:a0:91:10:90:cd:69:56:33:d4:bb:4e:df:f6:4b: b5:93:bc:62:03:fa:31:cd:c8:f4:85:29:82:a3:77: c4:68:93:4c:80:66:26:54:d6:97:69:e5:63:14:b2: 39:ce:be:f2:d0:13:d9:41:c6:16:7c:6f:b8:2c:92: d7:79:d0:3f:ab:a1:cf:e0:dc:c6:95:6d:19:cc:be: 9b:cd:9d:bb:8a:fa:9d:fb:d4:9f:e9:cd:36:ae:7a: 0a:ec:91:e9:bd:46:3d:d7:15:1f:0f:2d:29:5d:b2: 38:74:27:3b:ed:76:85:0b:3c:48:39:6c:6c:61:83: f5:38:c7:bf:2a:aa:02:23:8a:ca:11:79:d5:1f:5f: 19:2b:14:b6:bf:b5:ff:99:22:18:4f:22:27:91:e8: de:31:ac:4f:8f:fb:db:b9:ad:45:9c:f5:59:72:15: 4f:17:69:d6:f4:e1:ec:01:f7:d2:1a:8c:63:22:f6: 31:01:2d:b9:6f:08:86:91:44:7e:e3:8d:7c:7c:e3: d3:a4:3e:84:12:67:b8:4f:d5:0f:b0:04:49:bb:bd: 7f:bb:6e:9f:37:c4:ed:c2:db:85:f8:9c:36:58:9e: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:3D:DA:6B:59:09:94:E4:51:42:C4:EA:92:52:ED:3B:FF:AB:2F X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:fd:80:41:66:ad:92:83:59:20:59:27:83:91:54:25:ff: 11:9b:71:54:0c:13:8d:15:4d:05:4b:3c:f4:5c:3f:8b:29:63: 84:83:59:43:82:c7:db:fb:9a:06:a5:ec:3a:4a:8f:cc:90:7a: 48:55:2a:b5:e6:13:f4:58:58:92:cb:b3:00:8a:2a:0f:66:5e: b2:1f:2e:37:5d:d9:ad:1e:c4:ef:11:bf:5f:dd:48:ee:b7:d9: 7a:41:f2:04:a7:d5:10:96:3e:e8:37:52:97:e7:2d:41:d5:e3: ca:14:a1:82:b4:c1:e0:27:6e:01:ef:80:20:32:6c:d8:bd:5e: e4:1d:d9:4f:1b:3b:65:1a:fc:82:52:21:c8:a6:b6:29:e4:1f: 6b:4a:4c:78:4e:40:d8:f5:27:c9:a6:cd:72:1a:ae:7c:7d:e5: 11:3f:32:cd:dd:d5:fa:67:ec:cf:ce:3e:40:aa:cd:bd:1b:83: 0a:3e:1c:9f:f5:62:18:3a:da:0f:f3:ec:87:9b:d1:7e:b6:86: f3:41:2a:2c:2a:a0:f8:ef:98:98:99:87:1d:ca:86:c5:10:58: 56:79:15:e8:f9:64:04:53:2e:20:5f:f1:e2:9b:e3:3c:d7:8e: cb:8a:e0:3b:c8:6a:3c:d3:f4:b8:a6:1d:0d:32:c8:28:72:77: 58:64:3e:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUwNDI4MTgwNjQzWhcNMjUwNTA1MTgwNjQzWjAYMRYwFAYD VQQDEw02ODBmYzNiNC1hZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4oE/PYhxzHv1mSaGfBCGutAeHibOuuwpym1Bk+zoJEQkM1pVjPUu07f9ku1 k7xiA/oxzcj0hSmCo3fEaJNMgGYmVNaXaeVjFLI5zr7y0BPZQcYWfG+4LJLXedA/ q6HP4NzGlW0ZzL6bzZ27ivqd+9Sf6c02rnoK7JHpvUY91xUfDy0pXbI4dCc77XaF CzxIOWxsYYP1OMe/KqoCI4rKEXnVH18ZKxS2v7X/mSIYTyInkejeMaxPj/vbua1F nPVZchVPF2nW9OHsAffSGoxjIvYxAS25bwiGkUR+4418fOPTpD6EEme4T9UPsARJ u71/u26fN8TtwtuF+Jw2WJ6FRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNpPdpr WQmU5FFCxOqSUu07/6svMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSY/2AQWatkoNZIFkng5FUJf8Rm3FUDBONFU0FSzz0XD+LKWOEg1lD gsfb+5oGpew6So/MkHpIVSq15hP0WFiSy7MAiioPZl6yHy43XdmtHsTvEb9f3Uju t9l6QfIEp9UQlj7oN1KX5y1B1ePKFKGCtMHgJ24B74AgMmzYvV7kHdlPGztlGvyC UiHIprYp5B9rSkx4TkDY9SfJps1yGq58feURPzLN3dX6Z+zPzj5Aqs29G4MKPhyf 9WIYOtoP8+yHm9F+tobzQSosKqD475iYmYcdyobFEFhWeRXo+WQEUy4gX/Him+M8 147LiuA7yGo80/S4ph0NMsgocndYZD6w -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net