$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: taeh3KALTVVz7H5st58ApaUufEsEXKjaWWbqknvcqiE= Subject key identifier: 14:60:F8:F9:BE:E1:C4:47:A3:44:E6:27:A2:F6:EC:3B:E6:F7:B3:43 Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 133C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 1332 Signing time: Mon 28 Apr 2025 17:14:29 +0000 Manifest this update: Mon 28 Apr 2025 17:14:29 +0000 Manifest next update: Mon 05 May 2025 17:14:29 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: +LEtJwRV5OeuVZlvixspuVDW9kBxYpD7dEP9+gVO/QM=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: vl7ru7jGeXouITslQ3P7oElUqX5fMm8OE7sy4pQtZjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4924 (0x133c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Apr 28 17:14:29 2025 GMT Not After : May 5 17:14:29 2025 GMT Subject: CN=680fb775-9718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:e4:9c:17:2f:9a:37:00:49:fd:b7:8a:85: 96:20:c1:eb:23:98:90:26:93:dd:77:62:cb:31:80: 23:23:0c:8e:39:c0:81:d3:8b:6e:cb:40:0b:29:44: 88:a2:84:80:ed:bb:76:58:a1:2d:d6:61:5b:48:46: d8:cd:b4:be:c2:fd:0f:4a:82:4e:f4:e8:f6:c0:f6: dc:b9:bf:bc:5e:cb:a8:31:41:1b:7a:e1:86:1f:b4: 02:b3:24:ad:4d:05:c9:d9:33:a2:fd:4b:3f:95:8e: d7:ca:5c:23:35:f9:f6:f9:07:d6:bc:e8:f0:6d:de: 63:cf:ec:ad:6d:1a:b6:1f:83:94:9d:e1:46:dd:94: af:67:4b:a9:93:46:b0:e0:46:ad:28:5f:d4:64:63: e0:46:43:f0:e0:bf:66:d2:89:50:11:0c:2f:b6:e0: 40:56:3e:57:33:e4:ff:e5:a9:c4:96:35:9c:8d:22: 4e:9d:2b:21:67:5e:40:0b:f4:d4:d2:67:0b:11:da: 26:c8:30:71:72:9f:b3:db:eb:ed:35:79:a3:a9:b7: d6:f5:6e:31:30:02:0c:22:5f:3e:a8:ac:11:ac:b0: 98:6c:33:b7:36:b6:df:77:aa:6a:70:ce:43:45:80: 90:bc:da:01:89:fe:1e:78:8c:fa:b7:0c:2b:5a:ba: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:60:F8:F9:BE:E1:C4:47:A3:44:E6:27:A2:F6:EC:3B:E6:F7:B3:43 X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b0:7b:fc:3d:f7:2a:57:fe:f6:8a:c9:5f:12:ed:52:90:f1: 7c:0a:67:a3:cb:6c:a6:d2:ce:47:1e:bc:e0:1c:a6:e7:4f:d1: 50:ba:b2:42:07:bc:45:a5:77:69:04:64:d4:cc:6e:c0:fe:c2: 78:34:18:fa:7f:d7:82:2f:e3:61:56:82:52:20:41:00:8a:6e: 82:55:31:41:45:6a:72:32:81:df:c1:0e:42:42:41:ea:ef:b7: 44:27:81:57:a3:98:d2:ce:17:d2:83:01:ee:76:f9:5d:5d:14: 72:16:59:f2:68:e4:af:b1:82:47:08:e3:40:bf:5f:8d:8c:2c: 05:5c:bf:95:10:5c:c2:e9:e6:45:09:3b:11:08:72:35:cd:8f: 24:08:ff:fd:ab:48:b4:76:9f:cc:c6:90:cd:42:3c:e6:f3:ce: c8:4c:79:b8:97:fb:6d:ee:ba:78:09:7a:84:42:af:58:8f:59: 15:6c:0d:5c:bd:1c:46:81:6d:58:8f:f4:83:81:8f:b0:33:7a: 77:7c:cf:bd:53:35:14:32:80:bb:ef:a0:5d:0d:74:7e:78:a6: 74:84:8b:7c:33:83:3a:34:67:9e:55:b6:73:c3:56:bc:a9:4a: 2b:6a:8a:d8:f6:b9:65:50:f1:4f:49:e6:36:d9:63:17:de:8c: 32:71:67:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUwNDI4MTcxNDI5WhcNMjUwNTA1MTcxNDI5WjAYMRYwFAYD VQQDEw02ODBmYjc3NS05NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t7knBcvmjcASf23ioWWIMHrI5iQJpPdd2LLMYAjIwyOOcCB04tuy0ALKUSI ooSA7bt2WKEt1mFbSEbYzbS+wv0PSoJO9Oj2wPbcub+8XsuoMUEbeuGGH7QCsySt TQXJ2TOi/Us/lY7XylwjNfn2+QfWvOjwbd5jz+ytbRq2H4OUneFG3ZSvZ0upk0aw 4EatKF/UZGPgRkPw4L9m0olQEQwvtuBAVj5XM+T/5anEljWcjSJOnSshZ15AC/TU 0mcLEdomyDBxcp+z2+vtNXmjqbfW9W4xMAIMIl8+qKwRrLCYbDO3Nrbfd6pqcM5D RYCQvNoBif4eeIz6twwrWrpu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRg+Pm+ 4cRHo0TmJ6L27Dvm97NDMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/sHv8PfcqV/72islfEu1SkPF8Cmejy2ym0s5HHrzgHKbnT9FQurJC B7xFpXdpBGTUzG7A/sJ4NBj6f9eCL+NhVoJSIEEAim6CVTFBRWpyMoHfwQ5CQkHq 77dEJ4FXo5jSzhfSgwHudvldXRRyFlnyaOSvsYJHCONAv1+NjCwFXL+VEFzC6eZF CTsRCHI1zY8kCP/9q0i0dp/MxpDNQjzm887ITHm4l/tt7rp4CXqEQq9Yj1kVbA1c vRxGgW1Yj/SDgY+wM3p3fM+9UzUUMoC776BdDXR+eKZ0hIt8M4M6NGeeVbZzw1a8 qUoraorY9rllUPFPSeY22WMX3owycWeX -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:53 2025 by rpki-client on console.sobornost.net