$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: OYbOmNzGtBOzkOTjvCbjid9qj4hwIO03CjUU5oimJZg= Subject key identifier: B7:0A:1C:89:11:B4:44:6E:0F:48:3F:87:46:93:2F:DA:A2:DE:D2:A7 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: 93 Signing time: Sun 27 Apr 2025 05:14:35 +0000 Manifest this update: Sun 27 Apr 2025 05:14:34 +0000 Manifest next update: Sun 04 May 2025 05:14:34 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: 8NlMvDGHPs5WY4/FZuu5REEuXEnZ8/byOolAhdA4lzY=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Apr 27 05:14:34 2025 GMT Not After : May 4 05:14:34 2025 GMT Subject: CN=680dbd3a-2905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:05:44:b1:b9:f1:6f:a5:a8:0a:d8:63:37: 57:12:02:7b:63:5a:e8:33:d0:1c:f1:1d:6e:3c:33: 19:9c:77:9d:c5:43:cd:d5:0c:9f:d9:18:98:e5:30: f5:3a:d4:09:31:80:c5:da:9f:da:33:ab:82:59:06: 5a:11:b3:ff:3f:ee:45:1d:15:22:cd:f4:30:1a:96: a0:6c:17:fc:a2:16:f1:3e:bb:24:e6:33:04:43:55: 48:d9:0f:0f:87:11:d8:12:a1:40:06:42:00:25:66: 15:d0:d9:2d:33:2c:19:f1:c4:3b:cd:7a:36:7e:7c: c2:5b:c0:9e:d9:24:f5:37:a9:5a:d1:a6:b5:b5:de: b6:3a:73:ef:b4:6a:ab:a6:53:1c:d5:d6:db:25:64: 7c:1a:37:9d:0e:8e:7b:5e:f3:62:de:21:57:cf:25: 2b:29:95:67:7e:18:d5:e1:15:9a:d6:0a:b7:68:b1: 6f:a2:87:53:f0:79:81:15:e1:d1:9d:a6:ad:14:58: 31:00:c2:16:b6:00:d6:e1:1e:0b:82:a8:33:0d:23: 97:98:23:88:6a:01:5c:c3:48:a4:b1:b4:fc:f8:d5: cd:a2:b9:9f:e7:aa:73:39:10:49:90:e2:a9:8e:fc: c4:35:93:ec:e7:89:40:58:d1:8c:5c:f8:b5:b2:dc: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:1C:89:11:B4:44:6E:0F:48:3F:87:46:93:2F:DA:A2:DE:D2:A7 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4f:78:fe:fe:a1:14:54:b3:b8:d9:41:11:0e:57:4d:50:84: 54:a8:5f:21:91:d2:3c:37:07:30:69:96:95:87:a7:30:54:27: 69:fa:13:f8:61:5a:0b:7d:62:50:c5:fc:50:36:2b:d5:d5:97: cc:de:13:40:e1:cf:27:09:c4:fa:4d:f9:4b:fd:ea:83:2e:d1: b4:60:d0:0f:c2:f3:92:87:af:fa:7c:13:d4:c3:c0:72:6a:27: b3:13:c9:66:90:10:c8:aa:8f:b8:9d:bd:2d:b9:22:1b:26:1b: 44:a2:08:01:6c:cf:61:65:3f:e7:63:8d:6f:6d:dd:c2:71:89: 7f:3f:e4:88:cf:b9:39:97:43:74:09:00:09:a1:f6:5d:37:5f: 28:bc:32:7e:9e:97:2e:7b:81:1a:ec:84:0e:11:14:38:10:78: 38:d0:32:21:c5:fa:27:b9:56:64:3d:4d:bd:b0:7b:4a:62:a2: 89:66:91:8e:eb:b6:5a:3a:55:ef:fe:57:da:ce:ae:85:c2:21: 70:bd:99:8f:2f:11:81:19:bd:77:f4:5f:3b:88:12:48:f3:bd: cd:2b:32:70:a6:e4:ea:de:f4:f5:fc:04:7a:5a:88:f3:e8:d9: df:91:b0:89:6a:d7:d9:df:68:f2:ee:d9:8c:93:67:64:b4:fd: 2a:70:bd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5 NzYzQTYyQkEwHhcNMjUwNDI3MDUxNDM0WhcNMjUwNTA0MDUxNDM0WjAYMRYwFAYD VQQDEw02ODBkYmQzYS0yOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr8FRLG58W+lqArYYzdXEgJ7Y1roM9Ac8R1uPDMZnHedxUPN1Qyf2RiY5TD1 OtQJMYDF2p/aM6uCWQZaEbP/P+5FHRUizfQwGpagbBf8ohbxPrsk5jMEQ1VI2Q8P hxHYEqFABkIAJWYV0NktMywZ8cQ7zXo2fnzCW8Ce2ST1N6la0aa1td62OnPvtGqr plMc1dbbJWR8GjedDo57XvNi3iFXzyUrKZVnfhjV4RWa1gq3aLFvoodT8HmBFeHR naatFFgxAMIWtgDW4R4LgqgzDSOXmCOIagFcw0iksbT8+NXNormf56pzORBJkOKp jvzENZPs54lAWNGMXPi1styf1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcKHIkR tERuD0g/h0aTL9qi3tKnMB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81MDgzNUU2ODQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3Fl bmdNUjVWTGI4M1dYWTZZcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANT3j+/qEUVLO42UERDldNUIRUqF8hkdI8NwcwaZaVh6cwVCdp+hP4 YVoLfWJQxfxQNivV1ZfM3hNA4c8nCcT6TflL/eqDLtG0YNAPwvOSh6/6fBPUw8By aiezE8lmkBDIqo+4nb0tuSIbJhtEoggBbM9hZT/nY41vbd3CcYl/P+SIz7k5l0N0 CQAJofZdN18ovDJ+npcue4Ea7IQOERQ4EHg40DIhxfonuVZkPU29sHtKYqKJZpGO 67ZaOlXv/lfazq6FwiFwvZmPLxGBGb139F87iBJI873NKzJwpuTq3vT1/AR6Wojz 6NnfkbCJatfZ32jy7tmMk2dktP0qcL1h -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net