$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: W5eewEtqVE2eIRo4KLdCL2BhjNLcMHDuvPKE6MQWX0I= Subject key identifier: 34:73:EA:92:9B:F0:EF:3A:6C:FB:33:33:DF:14:1F:D3:F0:54:58:C0 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 3491 Signing time: Mon 28 Apr 2025 15:08:03 +0000 Manifest this update: Mon 28 Apr 2025 15:08:03 +0000 Manifest next update: Mon 05 May 2025 15:08:03 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: 8dfLzplEgG6h3lz8l5FhjtDbWH5QEUdKbsr4+mZ7BMA=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: +Z1Ldyuz4HB0yeC9kiN8GX7/0TnuMGaHDVLqOr783Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Apr 28 15:08:03 2025 GMT Not After : May 5 15:08:03 2025 GMT Subject: CN=680f99d3-138f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:2b:6b:be:41:d0:fd:2e:97:a4:38:48:40: 08:d4:9a:ea:29:c5:63:25:18:62:80:79:c6:21:93: 6b:aa:96:b4:36:8b:fc:78:2c:41:2a:90:02:34:d0: 98:d1:b7:09:7f:57:c7:d2:a6:b8:82:bf:99:fe:58: f5:6e:fe:2a:7c:bc:12:1e:d3:5f:cc:77:2d:a7:d8: b2:89:d9:8e:22:d1:36:8c:8c:d2:20:88:4e:97:e8: 95:76:ec:2b:1a:6f:fe:63:7d:0e:e4:ee:03:54:8c: e7:7d:28:95:e2:0a:49:ff:9a:0a:dc:b1:41:65:aa: 42:4e:3e:ff:f3:25:4c:c6:0f:2e:51:42:ec:f9:19: 54:8c:93:6f:10:87:90:92:bb:55:64:61:45:3a:22: 1e:6a:23:52:5c:dc:41:d5:ed:08:1c:d6:a1:18:ea: b8:80:85:e5:c8:2d:e5:15:21:aa:28:11:12:a3:50: 06:a9:b2:be:5c:5f:64:c5:c4:49:4f:7e:62:a5:c3: 5c:7d:64:ef:86:b1:47:3a:84:5c:5f:c3:c7:69:29: 65:87:36:d1:01:84:11:a0:23:17:61:e8:e1:15:fa: 30:0b:bf:b5:a2:05:9b:2e:d9:7c:47:18:88:9a:99: f9:21:2e:42:bf:38:9e:6e:28:62:a0:74:b2:8d:ad: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:73:EA:92:9B:F0:EF:3A:6C:FB:33:33:DF:14:1F:D3:F0:54:58:C0 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:28:fc:cc:e8:a4:a7:b5:a0:06:5e:ca:1e:2a:30:07:be:9c: ab:05:22:40:f8:f0:14:92:33:df:ee:23:85:27:0b:30:d6:93: 16:10:bc:0f:a4:6f:cb:91:6e:a6:b7:0f:26:b1:3f:f7:e8:de: 4b:43:c2:25:8a:c0:49:71:aa:83:62:e9:aa:d4:dd:44:bd:e6: 0f:8b:ac:48:8e:ad:3f:0b:94:a7:7b:38:a9:89:1f:5a:9f:41: 1a:f0:d3:be:c9:b3:ce:32:42:54:6b:67:22:94:16:94:2b:67: 02:e0:3e:22:0f:32:bd:52:b7:fd:b2:eb:9d:28:fb:81:27:5c: 47:a4:06:70:28:95:b3:e8:98:12:9b:99:63:e9:c2:71:bb:58: e1:c5:7f:5b:f0:30:14:8e:43:c9:2a:84:48:2a:f3:56:be:9a: 50:5e:cd:f5:0f:18:97:35:9a:20:54:ed:36:c3:47:f7:98:3d: 84:d9:7b:59:b1:3f:70:3b:35:55:3d:17:e1:0e:de:fb:7f:66: 28:89:0d:ff:da:1b:5c:6d:02:dc:e0:97:51:54:62:e0:34:e7: 17:b4:6a:08:4c:6d:fe:2c:96:1a:e0:4a:57:79:0e:b8:7c:0c: 69:4b:e9:94:51:20:b0:72:9b:4f:e6:01:f7:15:7c:0c:ce:32: 70:68:51:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUwNDI4MTUwODAzWhcNMjUwNTA1MTUwODAzWjAYMRYwFAYD VQQDEw02ODBmOTlkMy0xMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmMra75B0P0ul6Q4SEAI1JrqKcVjJRhigHnGIZNrqpa0Nov8eCxBKpACNNCY 0bcJf1fH0qa4gr+Z/lj1bv4qfLwSHtNfzHctp9iyidmOItE2jIzSIIhOl+iVduwr Gm/+Y30O5O4DVIznfSiV4gpJ/5oK3LFBZapCTj7/8yVMxg8uUULs+RlUjJNvEIeQ krtVZGFFOiIeaiNSXNxB1e0IHNahGOq4gIXlyC3lFSGqKBESo1AGqbK+XF9kxcRJ T35ipcNcfWTvhrFHOoRcX8PHaSllhzbRAYQRoCMXYejhFfowC7+1ogWbLtl8RxiI mpn5IS5CvziebihioHSyja1hkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRz6pKb 8O86bPszM98UH9PwVFjAMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwKPzM6KSntaAGXsoeKjAHvpyrBSJA+PAUkjPf7iOFJwsw1pMWELwP pG/LkW6mtw8msT/36N5LQ8IlisBJcaqDYumq1N1EveYPi6xIjq0/C5SnezipiR9a n0Ea8NO+ybPOMkJUa2cilBaUK2cC4D4iDzK9Urf9suudKPuBJ1xHpAZwKJWz6JgS m5lj6cJxu1jhxX9b8DAUjkPJKoRIKvNWvppQXs31DxiXNZogVO02w0f3mD2E2XtZ sT9wOzVVPRfhDt77f2YoiQ3/2htcbQLc4JdRVGLgNOcXtGoITG3+LJYa4EpXeQ64 fAxpS+mUUSCwcptP5gH3FXwMzjJwaFHF -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:00 2025 by rpki-client on console.sobornost.net