$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: FN5yN3GzH+sGnU/4ONbIpTyyZgT1SC50X7s1dat33dg= Subject key identifier: 7A:D4:AD:A6:06:BA:14:B9:4C:C3:00:06:5F:B4:44:57:20:EE:42:BB Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C2D Signing time: Fri 02 May 2025 18:45:00 +0000 Manifest this update: Fri 02 May 2025 18:44:59 +0000 Manifest next update: Fri 09 May 2025 18:44:59 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: MDIkGKDbbn4vm4TfUNrsfAegjCZ5BHJHN+eO1wkGUJA=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: Ze8Yanp+k5PHmh85OnFiLG44bNuhfOzahNgejKqhDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 18:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: May 2 18:44:59 2025 GMT Not After : May 9 18:44:59 2025 GMT Subject: CN=681512ac-037f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:94:72:d6:dc:27:c6:1e:15:b4:d3:13:2b: 23:4e:17:d5:00:52:9d:71:7f:be:aa:96:0d:14:d5: 4c:0c:7a:d8:e7:59:b8:9f:7e:95:1b:61:c2:da:00: 90:d8:67:f9:bc:6f:21:1f:54:d2:26:50:4c:db:c2: 3b:00:b1:1f:31:df:00:f2:b3:0c:cf:19:b5:25:68: e0:b8:ee:d9:73:fa:8a:b3:cf:99:c8:8a:69:ca:6d: b1:3b:33:b7:34:c9:21:55:98:be:db:73:52:88:e0: 70:a5:c7:3c:8a:41:c2:d7:5a:cb:33:ce:8f:3a:95: f2:cc:da:c9:98:8f:8a:81:37:e1:90:cd:68:fd:1e: 39:d6:3f:46:70:63:26:a7:9b:ad:4f:ec:4c:ad:e6: 6d:1b:86:c8:de:19:38:73:d3:3f:71:d4:59:e6:35: 1a:48:4a:6f:65:0c:dd:d7:20:91:4c:46:6e:e8:6f: 7e:71:e8:1f:25:cd:bb:87:dc:cf:87:6c:4a:49:f5: f6:5c:6e:3e:0a:dd:c5:01:0c:22:37:bf:e0:3d:36: 2b:aa:b7:8d:64:9b:b9:56:a0:7d:e8:8b:e5:b8:2a: 41:7f:2d:0b:cd:a3:3b:a5:cd:76:cd:b3:ee:10:33: 7b:92:55:89:d4:8f:40:26:4d:d9:b4:84:05:b6:3d: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D4:AD:A6:06:BA:14:B9:4C:C3:00:06:5F:B4:44:57:20:EE:42:BB X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:78:49:7b:34:e5:40:eb:8a:d2:24:e9:8d:f4:e4:f8:58:92: 95:4a:36:57:e0:0a:d5:45:07:fb:a1:ef:89:8e:f2:75:f1:be: 27:2c:c1:13:91:bd:f5:d7:44:f2:3e:60:de:2e:74:5d:17:f2: 7d:b1:46:62:bf:45:70:28:82:4c:c2:1f:1d:97:7e:f7:ec:c7: 06:7f:fc:fa:b4:a9:dd:08:93:be:6f:91:08:4c:dd:ea:14:65: ab:94:88:04:01:79:d0:50:76:20:ea:1f:0e:c8:bb:1d:d2:a9: cb:55:f3:20:3e:38:99:48:a2:28:49:06:9a:7d:2c:be:13:31: 40:22:23:5a:2d:57:10:98:72:e0:47:cb:06:4a:4a:b0:56:78: 4c:3c:3e:34:89:e4:0e:05:0a:8a:19:ca:f4:3c:c9:84:d5:ab: 2f:be:58:9e:87:c9:e3:21:05:6a:22:5e:70:a2:a3:10:0c:3c: 29:2d:b2:d3:ee:03:53:58:2c:4c:87:1e:4d:96:2b:df:66:fa: 39:c7:d9:4a:e1:a3:46:7d:80:1f:40:34:c8:65:64:7f:a4:7f: 1c:37:1a:8c:a5:8a:c1:ed:1e:bd:65:ca:60:8c:c7:1e:58:5e: 1e:a5:45:7b:69:e3:cd:5c:bd:a5:be:2e:8c:2c:df:2b:13:8b: bb:f7:9a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwNTAyMTg0NDU5WhcNMjUwNTA5MTg0NDU5WjAYMRYwFAYD VQQDEw02ODE1MTJhYy0wMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD2UctbcJ8YeFbTTEysjThfVAFKdcX++qpYNFNVMDHrY51m4n36VG2HC2gCQ 2Gf5vG8hH1TSJlBM28I7ALEfMd8A8rMMzxm1JWjguO7Zc/qKs8+ZyIppym2xOzO3 NMkhVZi+23NSiOBwpcc8ikHC11rLM86POpXyzNrJmI+KgTfhkM1o/R451j9GcGMm p5utT+xMreZtG4bI3hk4c9M/cdRZ5jUaSEpvZQzd1yCRTEZu6G9+cegfJc27h9zP h2xKSfX2XG4+Ct3FAQwiN7/gPTYrqreNZJu5VqB96IvluCpBfy0LzaM7pc12zbPu EDN7klWJ1I9AJk3ZtIQFtj01XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrUraYG uhS5TMMABl+0RFcg7kK7MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbeEl7NOVA64rSJOmN9OT4WJKVSjZX4ArVRQf7oe+JjvJ18b4nLMET kb3110TyPmDeLnRdF/J9sUZiv0VwKIJMwh8dl3737McGf/z6tKndCJO+b5EITN3q FGWrlIgEAXnQUHYg6h8OyLsd0qnLVfMgPjiZSKIoSQaafSy+EzFAIiNaLVcQmHLg R8sGSkqwVnhMPD40ieQOBQqKGcr0PMmE1asvvlieh8njIQVqIl5woqMQDDwpLbLT 7gNTWCxMhx5NlivfZvo5x9lK4aNGfYAfQDTIZWR/pH8cNxqMpYrB7R69ZcpgjMce WF4epUV7aePNXL2lvi6MLN8rE4u795qH -----END CERTIFICATE-----Generated at Sat May 3 06:12:02 2025 by rpki-client on console.sobornost.net