$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json) Hash identifier: gB4ml9KkjH94O6F7iSREjfXKM4J66TM6XUjpmNEVpcE= Subject key identifier: 94:4E:D1:ED:BB:8B:5E:9A:01:87:BC:74:74:57:F2:7C:1B:B8:6B:AA Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft Manifest number: 39 Signing time: Sun 27 Apr 2025 06:24:12 +0000 Manifest this update: Sun 27 Apr 2025 06:24:11 +0000 Manifest next update: Sun 04 May 2025 06:24:11 +0000 Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: KjxQfSFOhQ4i/7CMhYCt9dGub3ZPI6UOu9vQ6lBTikI=) 2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: PORQCBDGSlwilkpipBB8A0mqgYc20HJgljabtkGa8CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Validity Not Before: Apr 27 06:24:11 2025 GMT Not After : May 4 06:24:11 2025 GMT Subject: CN=680dcd8c-bc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:a9:61:f7:81:03:21:15:7e:ca:26:31:c1: 6d:58:68:44:27:da:0e:ce:07:b0:60:36:c5:79:f6: b9:72:50:19:db:47:77:86:e4:89:e2:8c:af:33:cd: f5:58:91:ef:0c:28:de:af:97:ea:8d:09:3a:09:d5: 42:47:2d:30:0e:92:d8:5a:78:b0:d4:10:33:f6:c0: 6d:f0:7e:18:e6:15:68:87:f3:51:01:21:a1:39:0a: d5:d8:ae:94:f8:6e:4b:21:31:a8:0c:f6:97:35:50: 6c:83:46:4f:2a:00:c5:fa:64:f5:d5:86:e8:ee:1e: b3:8d:a7:cf:bd:90:01:40:ba:db:a0:cf:ae:f3:10: c3:5b:a0:cf:44:5c:6c:a2:73:53:c4:d1:7d:0d:0d: 4d:1b:73:cd:6e:0c:6e:e4:e5:a1:c9:c4:56:d1:e0: e3:e0:b0:b7:34:bd:3f:26:ef:fd:6f:84:80:91:ea: 21:d6:20:48:41:8f:87:6a:92:ed:27:9d:b0:f8:eb: 36:6c:87:5f:d7:3f:cc:dd:0a:0d:e6:ea:ca:2c:29: eb:b8:41:27:1b:b8:ab:ae:e0:a2:c8:3c:4c:60:dd: 8d:81:09:e3:17:64:4a:a2:75:3f:eb:0f:b2:4d:c5: 15:8f:78:c3:aa:29:62:6e:c8:94:9b:dc:c6:81:1f: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4E:D1:ED:BB:8B:5E:9A:01:87:BC:74:74:57:F2:7C:1B:B8:6B:AA X509v3 Authority Key Identifier: keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:64:76:cf:25:93:b0:af:07:2e:39:87:9c:08:e5:4d:87:ea: 74:4b:58:9d:a7:aa:6d:30:fd:1e:68:39:76:33:13:cc:ea:12: ce:e7:fe:87:32:c1:4d:b2:75:39:a4:21:3e:a9:f4:12:40:4d: 2a:1a:98:83:ca:7f:9b:b9:3a:fc:76:e1:9a:dc:2e:6f:a9:18: 8f:66:d3:ba:40:35:55:6a:89:d9:1f:85:f1:61:23:b9:7a:a6: f2:b8:3e:77:47:02:78:60:d0:f9:c8:eb:3e:36:f7:4f:a2:b0: 64:5a:f9:cb:5b:0e:a9:bf:80:39:da:d2:ec:79:da:9a:3b:48: 08:eb:db:53:c0:3f:f9:72:63:ad:63:b4:1c:10:3a:6b:12:71: 62:a5:b6:41:37:42:57:fb:52:53:a8:22:ac:37:32:c0:47:a0: 20:8e:f8:28:f2:b3:67:03:a7:eb:dc:09:56:3a:6b:2a:e8:48: 74:f7:d1:8d:d2:62:a4:d6:92:bb:85:a2:2f:40:b1:ef:ba:c4: 4c:dc:b7:3a:24:5a:0e:c5:ff:e1:25:4c:8d:43:96:9b:9b:81: f6:3c:d3:d1:6c:34:82:69:9e:05:b4:f5:3c:4b:e8:f3:8e:06: 4e:a8:0e:d2:96:fb:f6:dc:77:c8:9e:36:ff:d4:32:0b:4e:ae: a0:ae:1a:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoNjk0RjU2MUI2M0RBN0NDNTc3OTMxNjM2RDQ3ODhBRDJC MEI0QUUyMDAeFw0yNTA0MjcwNjI0MTFaFw0yNTA1MDQwNjI0MTFaMBgxFjAUBgNV BAMTDTY4MGRjZDhjLWJjOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCziKlh94EDIRV+yiYxwW1YaEQn2g7OB7BgNsV59rlyUBnbR3eG5InijK8zzfVY ke8MKN6vl+qNCToJ1UJHLTAOkthaeLDUEDP2wG3wfhjmFWiH81EBIaE5CtXYrpT4 bkshMagM9pc1UGyDRk8qAMX6ZPXVhujuHrONp8+9kAFAutugz67zEMNboM9EXGyi c1PE0X0NDU0bc81uDG7k5aHJxFbR4OPgsLc0vT8m7/1vhICR6iHWIEhBj4dqku0n nbD46zZsh1/XP8zdCg3m6sosKeu4QScbuKuu4KLIPExg3Y2BCeMXZEqidT/rD7JN xRWPeMOqKWJuyJSb3MaBHxmtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlE7R7buL XpoBh7x0dFfyfBu4a6owHwYDVR0jBBgwFoAUaU9WG2PafMV3kxY21HiK0rC0riAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0M4NkNEODA2RDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyL2FVOVdHMlBhZk1WM2t4WTIxSGlLMHJDMHJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVU5V0cyUGFmTVYza3hZMjFIaUswckMwcmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0M4NkNEODA2RDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyL2FVOVdHMlBhZk1W M2t4WTIxSGlLMHJDMHJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEtkds8lk7CvBy45h5wI5U2H6nRLWJ2nqm0w/R5oOXYzE8zqEs7n/ocy wU2ydTmkIT6p9BJATSoamIPKf5u5Ovx24ZrcLm+pGI9m07pANVVqidkfhfFhI7l6 pvK4PndHAnhg0PnI6z4290+isGRa+ctbDqm/gDna0ux52po7SAjr21PAP/lyY61j tBwQOmsScWKltkE3Qlf7UlOoIqw3MsBHoCCO+Cjys2cDp+vcCVY6ayroSHT30Y3S YqTWkruFoi9Ase+6xEzctzokWg7F/+ElTI1DlpubgfY809FsNIJpngW09TxL6POO Bk6oDtKW+/bcd8ieNv/UMgtOrqCuGq0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net