$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 8T7Zr2GzBssBmgRrQ89oOOBTXscTeRqcOiMyN+jHJ5A= Subject key identifier: 25:7A:D8:99:93:78:CF:C9:24:55:EB:E1:83:19:28:A8:3C:1D:FE:44 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 70 Signing time: Sun 27 Apr 2025 05:39:48 +0000 Manifest this update: Sun 27 Apr 2025 05:39:47 +0000 Manifest next update: Sun 04 May 2025 05:39:47 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: iisco5+FMuswrNOsY/FQ32k9deq/dQSjgBHtlnlAxRc=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Apr 27 05:39:47 2025 GMT Not After : May 4 05:39:47 2025 GMT Subject: CN=680dc324-25bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e5:f6:a4:42:de:16:69:fe:d0:39:d3:8e:e9: bd:09:29:ce:3b:db:e8:5e:74:0c:db:5e:a8:6d:c9: fd:43:67:ff:8f:f0:ab:94:3f:58:74:35:2d:c1:8f: 5a:e7:2b:42:86:f0:45:1d:bd:25:3a:b8:4d:b9:55: 78:1b:00:1f:7c:5b:9f:e7:04:df:43:33:7e:5e:b8: 0d:ea:5c:61:9e:e6:3d:6a:ee:e4:3e:3a:1e:b3:4b: 0c:3c:92:35:18:8d:8d:5e:3b:3a:85:fa:bc:d4:84: 89:68:08:b0:03:28:b5:0c:65:04:b4:bf:2c:bd:fe: c3:8f:c1:5d:b2:7b:f2:e2:5d:94:dc:54:5f:3e:23: c2:1e:c7:a4:d4:d5:eb:69:9e:23:c9:fe:32:28:87: 37:1f:d9:c3:f3:df:c4:37:b7:39:0d:b7:5b:ea:67: ad:2d:df:a7:75:71:f6:f6:c5:4f:3f:32:3c:53:66: e4:83:a5:a4:68:ed:7f:e9:e6:a7:1d:67:08:c0:8c: 6b:2b:27:d7:a3:8c:65:9e:84:48:85:8b:3c:c6:ab: e5:84:a7:37:3e:73:fa:ea:5e:9b:50:76:73:ec:bb: 1d:16:05:29:3c:9c:f1:f9:18:f7:18:01:26:ab:bf: 80:5e:6f:de:ae:19:92:58:bc:59:57:3f:30:b7:02: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:D8:99:93:78:CF:C9:24:55:EB:E1:83:19:28:A8:3C:1D:FE:44 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:01:06:5c:4b:66:6c:d9:c3:37:cd:9e:91:30:09:d4:bc:71: 78:17:6f:6f:10:3e:27:91:64:44:9e:35:37:05:bc:79:b8:54: 18:6c:e0:5a:2c:c2:ef:d2:4f:2c:e3:15:d3:95:88:3e:e8:ce: c4:27:e0:69:98:10:dc:1b:21:c0:d0:45:58:2f:1e:0a:76:30: 18:84:b4:ba:b2:23:2e:dd:d3:2a:1e:e1:bb:a0:0a:99:20:bc: 8e:08:a3:6f:de:f7:c0:7c:7e:b6:10:ef:65:9a:69:72:f8:15: f4:a3:c2:a0:f4:ef:95:b2:aa:50:ae:11:c2:89:49:60:f6:32: de:56:73:85:d6:96:bb:a6:6b:07:a9:1b:dd:34:ed:05:38:93: 79:1a:d2:27:8f:a3:0f:bf:34:ec:16:c8:d1:3f:8c:3c:01:28: 1f:42:9b:f7:ac:04:35:34:48:15:97:5e:77:67:c7:40:8b:68: 95:d4:02:f6:43:8b:72:97:64:f9:a2:90:b6:7b:ad:ae:8b:c3: 5f:c6:28:ff:4b:21:f1:af:b9:67:95:75:f0:d6:06:1c:eb:c3: fa:66:ce:14:32:6f:a3:a9:9b:f1:73:0c:ad:87:79:c0:fc:e0: 27:03:86:ec:2d:02:98:4d:24:0a:53:3a:5f:61:ef:f6:24:d0: 82:5a:90:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoREQ3QzhEMEY0NzhGOUJFNkFCRjczOUMwNEY1QjVCRTRE QzlGNjFGODAeFw0yNTA0MjcwNTM5NDdaFw0yNTA1MDQwNTM5NDdaMBgxFjAUBgNV BAMTDTY4MGRjMzI0LTI1YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf5fakQt4Waf7QOdOO6b0JKc472+hedAzbXqhtyf1DZ/+P8KuUP1h0NS3Bj1rn K0KG8EUdvSU6uE25VXgbAB98W5/nBN9DM35euA3qXGGe5j1q7uQ+Oh6zSww8kjUY jY1eOzqF+rzUhIloCLADKLUMZQS0vyy9/sOPwV2ye/LiXZTcVF8+I8Iex6TU1etp niPJ/jIohzcf2cPz38Q3tzkNt1vqZ60t36d1cfb2xU8/MjxTZuSDpaRo7X/p5qcd ZwjAjGsrJ9ejjGWehEiFizzGq+WEpzc+c/rqXptQdnPsux0WBSk8nPH5GPcYASar v4Beb96uGZJYvFlXPzC3AvWZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJXrYmZN4 z8kkVevhgxkoqDwd/kQwHwYDVR0jBBgwFoAU3XyND0ePm+ar9znAT1tb5NyfYfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzRDMDk4NjJFNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55Zllm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1h5TkQwZVBtLWFyOXpuQVQxdGI1TnlmWWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzRDMDk4NjJFNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1h cjl6bkFUMXRiNU55ZllmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG0BBlxLZmzZwzfNnpEwCdS8cXgXb28QPieRZESeNTcFvHm4VBhs4Fos wu/STyzjFdOViD7ozsQn4GmYENwbIcDQRVgvHgp2MBiEtLqyIy7d0yoe4bugCpkg vI4Io2/e98B8frYQ72WaaXL4FfSjwqD075WyqlCuEcKJSWD2Mt5Wc4XWlrumawep G9007QU4k3ka0iePow+/NOwWyNE/jDwBKB9Cm/esBDU0SBWXXndnx0CLaJXUAvZD i3KXZPmikLZ7ra6Lw1/GKP9LIfGvuWeVdfDWBhzrw/pmzhQyb6Opm/FzDK2HecD8 4CcDhuwtAphNJApTOl9h7/Yk0IJakMM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net