$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: hjRQ4L9zkTBE39RO9f9Bu1lQR3ujDzptdYYp3em65p8= Subject key identifier: 1F:20:9E:26:2E:D0:C6:E4:79:FD:C0:84:41:4A:92:56:DB:F4:BB:5C Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 3E Signing time: Sun 27 Apr 2025 06:18:34 +0000 Manifest this update: Sun 27 Apr 2025 06:18:33 +0000 Manifest next update: Sun 04 May 2025 06:18:33 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: iooQxjpns79/hjASE6EWCrgMRLxDdw2qayG5+Z8N4IQ=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Validity Not Before: Apr 27 06:18:33 2025 GMT Not After : May 4 06:18:33 2025 GMT Subject: CN=680dcc39-f32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b9:a5:de:36:09:ce:49:7b:e9:c1:14:1b:2e: bb:cf:1a:69:a7:a4:82:04:f0:01:77:34:b2:6d:60: 1b:79:19:27:6e:d5:b7:ca:b5:ba:20:b4:88:47:42: b0:f0:6f:06:1d:3b:fc:b5:05:bb:6d:62:3e:b2:41: 70:84:bd:7c:ea:81:0c:bb:a8:b1:42:32:e2:30:a4: c0:f0:da:9f:2d:19:5d:e2:b4:8e:98:57:a1:01:8f: 40:38:d0:dd:1d:5a:86:b5:e7:64:62:2d:f9:67:97: 69:8e:59:e5:bc:6e:c1:d6:7a:1b:df:fd:a7:e3:5a: dc:ab:85:4d:ac:04:77:e5:84:ec:03:ba:99:43:ca: 1f:c0:db:a5:9e:93:55:1c:96:7f:a7:0a:ec:46:64: 5f:08:17:26:2d:ed:25:55:c6:5f:0b:eb:58:28:c9: 51:de:e5:58:1c:d5:6a:e3:fc:99:ac:70:8a:12:0e: 86:b8:01:e8:55:4f:17:c1:ba:67:07:e9:b5:c7:6d: 65:e6:f8:b5:a5:f2:fb:a1:17:af:a6:d0:73:3c:ee: c5:66:23:3b:6a:cb:23:a6:c8:83:5f:fa:7f:03:3c: fc:15:13:6a:be:39:3e:84:60:3f:5d:3d:c5:2c:ac: c3:90:d8:c0:45:8c:fc:6a:2e:d1:96:b8:b6:4f:49: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:9E:26:2E:D0:C6:E4:79:FD:C0:84:41:4A:92:56:DB:F4:BB:5C X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:1e:18:7c:d2:57:93:69:7d:5d:7b:01:a4:8d:44:1d:76:26: c5:af:fc:1f:24:22:35:c3:96:93:a2:27:f4:f0:69:34:38:a9: ae:99:b1:d4:84:39:1f:ea:9e:b0:3a:c0:d7:45:de:45:85:58: b2:43:64:4d:65:41:6f:35:49:de:5f:c0:5f:bf:25:1b:03:69: cc:06:e1:bb:a0:10:fa:46:17:ef:61:52:7f:63:27:eb:5a:30: a6:24:45:52:d1:28:7d:7b:d8:d8:9c:f5:50:46:3e:a6:4b:5b: 86:8b:54:6d:fe:f0:8e:25:39:5a:33:fe:de:f9:8a:54:63:71: 22:47:de:28:2a:12:04:1f:79:3e:b4:29:07:fe:0d:0b:e9:5c: 51:51:d8:0c:63:54:c8:48:c8:4a:c8:b9:26:a4:0a:75:c5:dd: cf:23:d1:94:46:03:4a:37:7e:4d:da:4f:b1:36:d4:2d:dd:09: 6e:b4:a8:c7:be:4a:68:5c:35:f9:60:40:79:2a:10:46:62:79: c5:c1:48:65:f9:f3:60:77:07:f6:ed:6b:b4:5b:6d:84:39:88: da:9e:70:97:6c:94:bf:74:85:1b:bc:d8:7c:74:d6:e0:18:ba: 76:10:8f:cc:25:37:a3:65:77:0a:ad:76:0c:b5:73:e1:99:00: b0:50:1b:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTA0MjcwNjE4MzNaFw0yNTA1MDQwNjE4MzNaMBgxFjAUBgNV BAMTDTY4MGRjYzM5LWYzMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7uaXeNgnOSXvpwRQbLrvPGmmnpIIE8AF3NLJtYBt5GSdu1bfKtbogtIhHQrDw bwYdO/y1BbttYj6yQXCEvXzqgQy7qLFCMuIwpMDw2p8tGV3itI6YV6EBj0A40N0d Woa152RiLflnl2mOWeW8bsHWehvf/afjWtyrhU2sBHflhOwDuplDyh/A26Wek1Uc ln+nCuxGZF8IFyYt7SVVxl8L61goyVHe5Vgc1Wrj/JmscIoSDoa4AehVTxfBumcH 6bXHbWXm+LWl8vuhF6+m0HM87sVmIztqyyOmyINf+n8DPPwVE2q+OT6EYD9dPcUs rMOQ2MBFjPxqLtGWuLZPSVflAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHyCeJi7Q xuR5/cCEQUqSVtv0u1wwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMkeGHzSV5NpfV17AaSNRB12JsWv/B8kIjXDlpOiJ/TwaTQ4qa6ZsdSE OR/qnrA6wNdF3kWFWLJDZE1lQW81Sd5fwF+/JRsDacwG4bugEPpGF+9hUn9jJ+ta MKYkRVLRKH172Nic9VBGPqZLW4aLVG3+8I4lOVoz/t75ilRjcSJH3igqEgQfeT60 KQf+DQvpXFFR2AxjVMhIyErIuSakCnXF3c8j0ZRGA0o3fk3aT7E21C3dCW60qMe+ SmhcNflgQHkqEEZiecXBSGX582B3B/bta7RbbYQ5iNqecJdslL90hRu82Hx01uAY unYQj8wlN6Nldwqtdgy1c+GZALBQG3M= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net